Privacy policy

Privacy Policy

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the related websites, functions, and content, as well as external online presences, such as our social media profiles (collectively referred to as "online offering"). Regarding the terms used, such as "processing" or "controller," we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Responsible Person

SensoryBoost
Albert-Einstein-Straße 4
04600 Altenburg, Germany
E-Mail: Business@SensoryBoost.de
Managing Director/Owner: Benjamin Zeising
Link to the imprint

Types of Processed Data

Inventory data (e.g., names, addresses).
Contact data (e.g., email, phone numbers).
Content data (e.g., text entries, photographs, videos).
Usage data (e.g., visited websites, interest in content, access times).
Meta/communication data (e.g., device information, IP addresses).

Categories of Data Subjects

Visitors and users of the online offering (hereinafter collectively referred to as "users").

Purpose of Processing

Provision of the online offering, its functions, and content.
Responding to contact requests and communicating with users.
Security measures.
Reach measurement/marketing.

Terms Used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.

"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

The "controller" is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

Legal Basis

In accordance with Article 13 GDPR, we inform you about the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing for the performance of our services and carrying out contractual measures as well as responding to inquiries is Article 6(1)(b) GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

Security Measures

In accordance with Article 32 GDPR, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as the access, input, disclosure, securing availability, and separation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and response to data threats. Additionally, we consider the protection of personal data during the development, or selection of hardware, software, and procedures, in accordance with the principle of data protection through technology design and through privacy-friendly default settings (Article 25 GDPR).

Cooperation with Processors and Third Parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g., if a transmission of the data to third parties, such as payment service providers, is necessary for the performance of the contract according to Article 6(1)(b) GDPR), you have given your consent, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

If we commission third parties to process data based on a so-called "processing contract," this is done on the basis of Article 28 GDPR.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of using services of third parties or disclosing, or transmitting data to third parties, this will only be done if it is necessary for the fulfillment of our (pre)contractual duties, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or let the data be processed in a third country only under the special conditions of Articles 44 ff. GDPR. That means the processing is carried out, for example, based on special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g., for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically only saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transmitted, and the requesting provider (access data), and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site as well as improving our offer. This serves to protect our legitimate interests in the correct presentation of our offer, which outweigh any interests, in accordance with Article 6(1)(f) GDPR. All access data will be deleted at the latest seven days after the end of your visit to the site.

Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments, or Shopify (USA) Inc. for further processing on our behalf. In the case of data transmission to Shopify Inc. in Canada, an adequate level of data protection is ensured by the European Commission's adequacy decision.

For more information on Shopify's privacy policy, please visit the following website: https://www.shopify.de/legal/datenschutz. Any further processing on servers other than those mentioned above by Shopify will only take place within the framework communicated below.

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers within the framework of processing on our behalf. Unless otherwise stated in this privacy policy, all access data as well as all data collected in forms provided on this website will be processed on their servers. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact the information provided in this privacy policy.

Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Canada. Our service providers are located and/or use servers in the USA and other countries outside the EU and EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.

1.2 Content Delivery Network (CDN) - Cloudflare

For shorter loading times, we use a so-called Content Delivery Network ("CDN") for some offers. With this service, content, e.g., large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers act within the framework of processing on our behalf. Our service providers are located and/or use servers in countries outside the EU and EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact the information provided in this privacy policy.

2. Data Processing for Contract Processing and Contact

2.1 Data Processing for Contract Processing

For the purpose of contract processing in accordance with Article 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us in the course of your order. Mandatory fields are marked as such because in these cases we need the data to process the contract, and we cannot complete the order without their provision. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.2 User Account

If you have given your consent in accordance with Article 6(1)(a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.3 Contact

In the context of customer communication, we collect personal data to process your inquiries in accordance with Article 6(1)(b) GDPR if you voluntarily provide it to us when you contact us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases we need the data to process your contact. Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.4 Shipping Processing / Shipping Notification

If you have given us your express consent during or after your order, we will forward your email address and phone number to the selected shipping service provider based on this consent in accordance with Article 6(1)(a) GDPR so that they can contact you before delivery for the purpose of delivery notification or coordination.

The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany

3. Data Processing for Payment and Transaction Processing

In the processing of payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.

3.1 Data Processing for Transaction Processing

Depending on the selected payment method, we pass on the necessary data for processing the payment transaction to our technical service providers, who act on our behalf, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfillment of the contract in accordance with Article 6(1)(b) GDPR. In part, the payment service providers collect the necessary data for processing the payment themselves, e.g., on their own website or through a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

If you have any questions regarding our partners for payment processing and the basis of our cooperation with them, please contact the information provided in this privacy policy.

3.2 Data Processing for the Purpose of Fraud Prevention and Optimization of Our Payment Processes

If necessary, we provide our service providers with additional data, which they use together with the necessary data for processing the payment as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing of contested payments, support for accounting). This serves to protect our legitimate interests in protecting against fraud or in efficient payment management, which outweigh any interests, in accordance with Article 6(1)(f) GDPR.

3.3 Identity and Credit Check with Klarna

Klarna (Direct Debit):
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent in accordance with Article 6(1)(a) GDPR that we may transmit the necessary data for processing the payment and for an identity and credit check to Klarna. In Germany, the credit agencies mentioned in Klarna's privacy policy may be used for identity and credit checks. Klarna uses the received information about the statistical probability of a payment default for a balanced decision about the establishment, execution, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option described in this privacy policy. This may result in us no longer being able to offer you certain payment options. You can revoke your consent to this use of personal data at any time also towards Klarna.

3.4 Payment Service Amazon Pay

1) When paying via Amazon Pay, we primarily pass on your payment data to Amazon Payments Europe s.c.a., and secondarily to Amazon EU SARL, Amazon Services Europe SARL, and Amazon Media EU SARL, all three based at 5, Rue Plaetis L 2338 Luxembourg (hereinafter "Amazon Payments"), for payment processing.

2) Amazon Payments reserves the right to conduct a credit check. The result of the credit check in relation to the statistical probability of payment default is used by Amazon Payments for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values.

3) Furthermore, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analytics services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).

4) For further data protection information, including the credit agencies used, please refer to the privacy policy of Amazon Payments: pay.amazon.com/de/help/201751600. The legal basis for this is Article 6(1)(b) GDPR.

3.5 Payment Service PayPal

1) In the context of payment processing, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), when paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#rAnnex.

2) The result of the credit check in relation to the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values.

3) Furthermore, PayPal is entitled to pass on your data to known third parties (banks, e-service providers, service partners, but also auditors, analytics services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies) as well as to unnamed third parties www.paypal.com/de/webapps/mpp/ua/third-parties-list.

4) For further data protection information, including the credit agencies used, please refer to the privacy policy of PayPal: www.paypal.com/de/webapps/mpp/ua/privacy-full. The legal basis for this is Article 6(1)(b) GDPR.

3.6 Shopify Payments (Apple Pay, Google Pay, etc.)

We use the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, the payment will be processed through the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we provide the information you disclosed during the ordering process, along with information about your order (name, address, account number, bank code, if applicable, credit card number, invoice amount, currency, and transaction number) in accordance with Article 6(1)(b) GDPR. Your data will only be disclosed for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. More information on the privacy policy of Shopify Payments can be found at the following Internet address: https://www.shopify.com/legal/privacy. Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy.

4. Integration of Services and Contents of Third Parties

Within our online offering, we use content or service offers from third-party providers on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Article 6(1)(f) GDPR) to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always requires that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browsers without the IP address. The IP address is thus required for the presentation of this content. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information, such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, among other things, technical information about the browser and operating system, referring websites, visit time, and other information about the use of our online offering, as well as be linked to such information from other sources.

4.0 Judge.me Review Portal

To continuously improve the quality of our offer and enable our customers to make transparent purchase decisions, we use the Judge.me review platform. This platform gives our customers the opportunity to share their experiences with our products. The submitted reviews help us and other customers better assess the quality and satisfaction with our products. When using Judge.me, personal data such as your name and email address may be collected to ensure the authenticity of the reviews. This data processing serves our legitimate interest in collecting feedback on our products and improving our services. Further details on data collection and use by Judge.me can be found in the privacy policy of the platform.

4.1 YouTube

We integrate videos from the "YouTube" platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

4.2 Google

We integrate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

4.2.1 Google ReCaptcha

We integrate the function for recognizing bots, e.g., when entering data in online forms ("ReCaptcha"), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

4.2.2 Google Fonts

We integrate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

4.2.3 Google Maps

For the visual representation of geographic information, Google Maps collects data about your use of the Maps functions, in particular, the IP address and location data, which are transmitted to Google and subsequently processed by Google. We have no influence on this subsequent data processing.

4.2.4 Google ADS

For advertising purposes in Google search results and on third-party websites, a Google Remarketing cookie is set when you visit our website, which automatically enables interest-based advertising through the collection and processing of data (IP address, visit time, device, and browser information, and information about your use of our website) and through a pseudonymous cookie ID and based on the pages you visit. Further data processing only occurs if you have activated the setting "personalized advertising" in your Google account. In this case, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To analyze website use and event tracking, we measure your subsequent usage behavior when you reach our website through a Google Ads advertisement. Cookies may be used, and data (IP address, visit time, device, and browser information, and information about your use of our website based on predetermined events such as visiting a website or signing up for a newsletter) may be collected from which pseudonymous usage profiles are created.

4.2.5 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering in the sense of Article 6(1)(f) GDPR). Google uses cookies. The information generated by the cookie about the use of the online offering by the users is usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offering by the users, to compile reports on the activities within this online offering, and to provide further services related to the use of this online offering and the Internet. Pseudonymous usage profiles of the users can be created from the processed data.

We use Google Analytics with activated IP anonymization. This means that Google shortens the IP address of the users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offering by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data usage by Google, setting, and objection options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

The personal data of the users will be deleted or anonymized after 14 months.

Online Presences in Social Media

We maintain online presences within social networks and platforms to communicate with customers, interested parties, and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within social networks and platforms, e.g., write posts on our online presences or send us messages.

4.2.6 Google Tag Manager

In our privacy policy, we want to show you in more detail what role the Google Tag Manager plays, why it is used on our website, and how data is processed.

About Google Tag Manager: This tool enables us to manage website tags via a central interface. Tags are small snippets of code that are used, among other things, to track your interactions on our website. These codes often come from Google services like Google Ads or Google Analytics but can also be from other providers. They fulfill various functions, such as collecting browser data, providing marketing tools with information, inserting buttons, setting cookies, or tracking users across different websites.

Use on our website: Efficient organization and management of our website are very important to us to offer you and other interested parties the best possible experience. This includes various tracking tools that give us insights into user preferences and potential improvements. The Google Tag Manager facilitates the integration and management of these tools significantly by providing a user-friendly interface without requiring programming knowledge.

Data storage and management: It is important to emphasize that the Tag Manager itself does not set cookies or store data. It merely acts as a mediator for the tags of various web analytics tools that collect data independently. In the settings of the Tag Manager, we have agreed to provide Google with anonymized data about the use of the Tag Manager, but these data do not relate to information collected through the tags.

Server locations and data protection: Google stores data on globally distributed servers. For more information on server locations and how long data is stored, please visit the corresponding Google pages.

Your privacy options: Although the Google Tag Manager itself does not collect data, the individual tracking tools we use offer ways to manage or prevent data collection. Details on this can be found in our specific privacy texts for these tools.

Google adheres to the EU-U.S. Privacy Shield Framework, which ensures the secure transfer of personal data. Further information on Google Tag Manager can be found in the official Google FAQs.

4.3 SSL Encryption

To protect your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.

Amendment of Our Privacy Policy

We reserve the right to adapt this privacy policy to ensure that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. For your renewed visit, the new privacy policy applies.

4.4.1 Pandectes GDPR Compliance Cookie Consent Tool

Our website uses cookies to enhance your user experience. With our cookie consent tool, you can choose at any time which cookies you want to allow and which you do not. You can adjust your settings at any time.

4.4.2 Cookies and Right to Object to Direct Marketing

"Cookies" are small files that are stored on users' computers. Different information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, or "session cookies" or "transient cookies," are cookies that are deleted after a user leaves an online offering and closes their browser. In such a cookie, e.g., the content of a shopping cart in an online shop or a login status can be stored. "Permanent" or "persistent" cookies are those that remain stored even after the browser is closed. Thus, e.g., the login status can be stored if users visit them after several days. Likewise, in such a cookie, the interests of users can be stored, which are used for reach measurement or marketing purposes. "Third-party cookies" are cookies offered by providers other than the controller who operates the online offering (otherwise, if it is only their cookies, we speak of "first-party cookies").

We may use temporary and permanent cookies and clarify this in our privacy policy.

If users do not want cookies to be stored on their computers, they are asked to deactivate the corresponding option in the system settings of their browsers. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offering.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by turning them off in the settings of the browser. Please note that then, if applicable, not all functions of this online offering can be used.

Cookie statement: https://sensoryboost.de/pages/cookie-erklarung

4.5 Facebook (META) Services

4.5.1 Facebook Pixel

We use the Facebook Pixel within the following technologies provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). With the Facebook Pixel, data (IP address, time of visit, device, and browser information, as well as information about your use of our website based on predefined events such as visiting a website or subscribing to a newsletter) are automatically collected and stored, from which usage profiles are created using pseudonyms. For this purpose, a cookie is automatically set by the Facebook Pixel when visiting our website, which automatically enables the recognition of your browser when visiting other websites using a pseudonymous cookie ID. Facebook will merge this information with other data from your Facebook account and use it to compile reports about website activities and to provide other services related to website use, particularly personalized and group-based advertising.

The information automatically collected by Facebook technologies about your use of our website is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If the data transmission to the USA is our responsibility, our cooperation is based on standard data protection clauses of the European Commission. For more information on data processing by Facebook, please refer to Facebook's privacy policy.

4.5.2 Facebook Analytics

As part of Facebook Analytics, statistics on visitor activities on our website are created from the data collected using the Facebook Pixel about your use of our website. Data processing is based on an agreement on data processing by Facebook. Your analysis serves the optimal presentation and marketing of our website.

4.5.3 Facebook Ads

Through Facebook Ads, we advertise this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, particularly the decision on the placement of the advertisements with individual users. Unless otherwise specified in the individual technologies, data processing is based on an agreement between jointly responsible parties in accordance with Article 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Facebook Ireland. The subsequent data processing by Facebook Ireland is not covered by this.

Based on the statistics created with Facebook Pixel about visitor activities on our website, we run group-based advertising on Facebook through Facebook Custom Audience, determining the characteristics of the respective target group.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we run personalized advertising through Facebook Pixel Remarketing.

Through Facebook Pixel Conversions, we measure your subsequent usage behavior when you reach our website through a Facebook Ads advertisement for web analysis and event tracking. Data processing is based on an agreement on data processing by Facebook.

4.6 WhatsApp Business

We offer our customers the opportunity to contact us via WhatsApp Business, a service provided by WhatsApp Inc. This service is solely for the purpose of providing an additional communication option and facilitating your contact with us. If you contact us via WhatsApp Business, we will use your contact details and messages solely to respond to your inquiries. We will not initiate contact through WhatsApp Business unless you have sent a message first and thus given your consent to the use of this communication channel.

Please note that WhatsApp Business is part of Facebook, Inc. and can store data on servers outside the EU, particularly in the USA. The privacy practices of WhatsApp are described in their privacy policies, which we recommend you read. We have no control over how WhatsApp processes data exchanged through this service. Using WhatsApp Business for communication with us is voluntary and based on your consent in accordance with Article 6(1)(a) GDPR.

4.7 Use of the UpPromote affiliate partner program

We, SensoryBoost, use the Shopify app “UpPromote” to operate our own affiliate partner program. This program enables us to promote our products and services through various online channels of affiliate partners, such as websites or social media platforms.

Collection and processing of personal data:

The person responsible for processing your personal data within the framework of this partner program is:

SensoryBoost
Albert-Einstein-Str. 4
04600 Altenburg

Your data will be processed in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

1.1 Data processing by SensoryBoost

If you participate in our program as an affiliate partner, we will collect certain personal data from you. This includes in particular:

Contact information: such as your email address and, if applicable, your first and last name.
Payment information: such as account details or information about your preferred payment methods.

Marketing information: such as data about your social networks or websites where you place our affiliate link.

This data is required to enable you to participate in the affiliate program, to ensure the payment of commissions and to be able to contact you if you have any questions or concerns.

This data is processed in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

1.2 Data processing by UpPromote

When you access our website via an affiliate link and complete a transaction, the UpPromote system records certain information about your order, such as the order amount, the items ordered and the order ID. This data is used to ensure the traceability of affiliate transactions and to ensure the correct payment of commissions to the respective affiliate partners.

UpPromote places a cookie on your device that does not store any personal data. This data is stored and evaluated on the basis of Art. 6 (1) (f) GDPR, based on our legitimate interest in the correct calculation of affiliate remuneration. If consent to store cookies or access information on your device is required, processing will be carried out exclusively on the basis of Art. 6 (1) (a) GDPR. This consent can be revoked at any time with effect for the future.

You can find more information on data protection at UpPromote at https://docs.uppromote.com/privacy-policy/privacy-policy

2. Sharing of information

Your personal data will only be passed on to third parties to the extent necessary to provide our services. These include:

Technical service providers: who support us in providing and maintaining the affiliate platform.

Payment service providers: who support us in processing commission payments.

These third parties only receive access to personal data if this is necessary to fulfill their tasks and they process the data in accordance with this privacy policy. Your data will only be passed on to third parties with your express consent or if we are legally obliged to do so.

3. Your rights as a data subject

You have the right to access, rectify, delete, restrict processing and transfer your personal data. If you would like to exercise these rights, please contact us at [your email address]. We reserve the right to request proof of identity in order to process your request.

Affiliate partners should contact us directly to exercise their rights, as we act as the controller in this context within the meaning of the GDPR.

4. Changes to the privacy policy

We reserve the right to adapt this privacy policy to reflect changes in our data protection practices or legal requirements. If there are any significant changes, we will inform you of the updated privacy policy. By continuing to use the affiliate program, you agree to the revised privacy policy.

5. Contact information

If you have any questions about this privacy policy or the processing of your personal data, you can contact us at: Support@SensoryBoost.de

5. Social Media

5.1 Plugins from Facebook, Instagram, Pinterest, and LinkedIn

Our website uses social buttons from social networks. These are integrated into the page as HTML links only, so no connection is made to the servers of the respective provider when you visit our website. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There, you can, for example, press the Like or Share button.

5.2 Our Online Presence on Facebook, Instagram, YouTube

If you have given your consent to the respective social media operator in accordance with Article 6(1)(a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences in the above-mentioned social media. From this data, pseudonymous usage profiles are created, which can be used to place advertisements within and outside the platforms that are presumably in line with your interests. For this purpose, cookies are generally used. For detailed information on the processing and use of data by the respective social media operator, as well as contact options and your rights and setting options for protecting your privacy, please refer to the data protection notices of the providers linked below. If you still need help in this regard, you can contact us.

Facebook is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. The data processing within the framework of the visit to a Facebook fan page is based on an agreement between jointly responsible parties in accordance with Article 26 GDPR. Further information (Information on Insights data) can be found here.

Instagram is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. The data processing within the framework of the visit to an Instagram fan page is based on an agreement between jointly responsible parties in accordance with Article 26 GDPR. Further information (Information on Insights data) can be found here.

YouTube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

Pinterest is an offer from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

LinkedIn is an offer from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on Pinterest is generally transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

Xing is an offer from New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

6. Contact Options and Your Rights

6.1 Rights of the Data Subjects

You have the right to request confirmation as to whether data concerning you is being processed and to access information about this data as well as further information and a copy of the data in accordance with Article 15 GDPR.
You have the right to request the completion or correction of incorrect data concerning you in accordance with Article 16 GDPR.
You have the right to request the immediate deletion of data concerning you in accordance with Article 17 GDPR, or alternatively to request a restriction of the processing of data in accordance with Article 18 GDPR.
You have the right to request that the data concerning you that you have provided to us be received in accordance with Article 20 GDPR and request their transmission to other controllers.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 GDPR.

6.2 Contact

If you have any questions about the collection, processing, or use of your personal data, as well as revocation of any consents granted or objections to a particular use of data, please contact our Data Protection Officer.
Benjamin Zeising | SensoryBoost – Info@SensoryBoost.de – Subject: Data Protection