PRIVACY POLICY STATEMENT
-
Who are we and how can you reach us?
-
What data is processed when you visit our website?
-
What data is processed when you contact us, order a newsletter, open a user account and purchase online products and services?
-
Processing personal data during order processing
-
What rights do you have and how can you exercise them?
-
​
Thank you for visiting the websites of the Sparkybit. Protecting your personal data is very important to us. The purpose of this privacy policy statement is to inform you about how your personal data is handled when you visit our websites, and about your rights in this regard.
​
1. Who are we and how can you reach us?
We are the
Sparkybit GmbH
Im Dörener Feld 3
33100 Paderborn
Germany
Email: info@sparkybit.com
​
and as a "controller" in the sense of the GDPR, we are responsible for protecting your personal data. Our data protection team will be happy to assist you with any questions you may have about data processing, your rights, or this privacy policy statement. It can be reached at: gdpr@sparkybit.com
​
2. What data is processed when you visit our website?
​
A. Log files
​
Data collected:
When you visit our website, your browser automatically transmits the following data to us:
-
Your IP address
-
The website you are coming from
-
Websites that you access from our site
-
The pages you click on, and
-
Time when the page was accessed
-
Name of your Internet service provider
-
Your browser type and version
-
The operating system used on your device
-
The date and duration of your visit.
​
Purposes for which the data is processed:
Temporary storage of this data is necessary to display the website on your computer and to ensure that the website functions properly. We also use this data to compile statistics about how our websites are used. Another reason for collecting this data is to track and prevent unauthorized access to the web server and any improper use of the web pages, and to secure our information technology systems.
​
Legal basis:
We temporarily store this data on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in our legitimate interest to achieve the purposes described above.
​
Storage period and control options:
The data is deleted when it is no longer needed to achieve the described purposes. Log files are deleted after a maximum of 90 days.
​
B. General information about cookies and targeting technologies
​
Data collected:
Our website uses "cookies", which are small text files that are stored on your device. Cookies typically contain a unique character sequence called the cookieID which can be used to identify your browser the next time you visit our website.
We also use "tags", i.e. small pieces of code with which we can measure our users' behavior and determine the success of our advertising activities.
Depending on the type of cookies or tags used, different types of data are collected and processed after pseudonymization.
We use both our own cookies and cookies from other providers (third-party cookies). The third-party cookies are described in detail below, in Section 2 C.
​
Purposes for which the data is processed:
Some cookies are technically necessary for the functioning of our websites. Certain functions used on our websites cannot be offered without the use of cookies.
Functionality cookies are used to make our websites more user-friendly and to ensure that certain functionalities are available, e.g. the ability to consistently display the shopping cart icon from one page to the next with the number of items in your cart, or storage of your login data so that you can have access to the data and settings you have already entered when you return to the page.
Analysis cookies and tags enable us to generate overall statistics, e.g. the number of times a given page has been accessed, which areas of our pages are most frequently viewed, and information on locations and the average amount of time spent on each page. This helps us to improve the quality of our websites and their content.
Advertising cookies and retargeting technologies enable us to provide you with offers and information tailored to your specific needs. This helps us to provide you with a more interesting experience at our websites, and to reach out to you on other websites with personalized advertising based on your interests.
​
Legal basis:
We use technically necessary cookies and functionality cookies on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in our legitimate interest to ensure that our websites function as intended and to provide optimal usability for visitors to our websites.
We use analytics cookies and advertising cookies, as well as tags and retargeting technologies on the basis of legitimate interests (Art. 6 (1)(f) GDPR, Recital 47). It is in our legitimate interest to tailor our websites to our customers' specific interests.
​
Storage period and control options:
Some of the cookies we use are automatically deleted after closing the browser (so-called session cookies), while others are stored permanently on your device and enable us to recognize your browser (so-called persistent cookies).
You have full control over the use of cookies and can delete cookies in your browser, completely deactivate the storage of cookies, or selectively accept certain cookies. Use your browser's help function to learn how you can change these settings. Note that such changes may limit the functionality of our websites.
​
C. Third-party cookie and tracking technologies
​
Facebook:
Facebook-Pixel and Facebook Custom Audience(Remarketing)
​
Data collected:
On our website we deploy the so-called "Facebook pixel" of the company "Facebook" (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). The Facebook pixel enables us to classify the visitors to our website into specific target groups in order to be able to display corresponding advertisements ("ads") on Facebook. The data collected (e.g. IP addresses, information about the web browser, the location of the website, buttons clicked, pixel IDs if applicable and other features) cannot be viewed by us, but can only be used within the scope of the display of certain advertisements. Within the scope of using the Facebook pixel code, so-called cookies are also used.
If you have a Facebook account and are signed in, your visit to this website will be associated with your Facebook user account.
We also partly utilise the remarketing function "Custom Audiences" of the company "Facebook". This enables users of the Site to display interest-based ads ("Facebook Ads") when visiting Facebook or other websites that also use this method. In this respect, we pursue your interest in displaying advertisements that correspond to your interests in order to make our website more appealing to you.
In order to exchange the respective data, your browser automatically establishes a direct connection with the Facebook server. We have no control over the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of our website or clicked on an advertisement from us. If you are registered with a "Facebook" service, "Facebook" may assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to trace and store your IP address and other identification features.
Insofar as you have consented to this, we may forward your telephone number or e-mail address to "Facebook" in order to be able to display advertisements corresponding to your interests.
​
To find out how Facebook pixel is deployed for advertising campaigns, please visit https://www.facebook.com/business/tools/meta-pixel
For more information about Facebook's privacy policy, please visit https://www.facebook.com/privacy/policy
For more information about Facebook's data processing practices, please visit https://www.facebook.com/about/privacy
​
Purposes for which the data is processed:
We employ these functions in order to be able to provide you with advertising offers corresponding to your interests.
​
Legal basis:
We process your data on the basis that you have consented to this or that we have a legitimate interest in processing the data pursuant to Art. 6 para. 1, sentence1 (a) and (f) GDPR.
​
Storage period and control options:
We store your data as long as we require it for the respective purpose (display of interest-based advertising) or provided you have not objected to the storage of your data or revoked your consent.
The deactivation of the function "Facebook Custom Audiences" is possible for logged in users at
https://www.facebook.com/settings
If you are logged in to Facebook you can adjust your ad settings in Facebook at
https://www.facebook.com/ads/preferences
​
Google:
​
Data collected:
Google Analytics: On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin4, Ireland ("Google"). Google Analytics stores cookies on your device that make it possible to evaluate your use of our websites.
To do so, Google collects various data, including data to uniquely identify your browser and information about when and how often you have visited our websites, how much time you have spent on our websites, and how you have interacted with our websites (more information available here).
We have added the code "get._anonymizeIP();" to Google Analytics. This causes Google to shorten your IP address, thereby allowing for anonymous analysis. IP addresses are shortened within the EU or the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. The IP address sent by your browser for Google Analytics is not merged with other Google data. The data collected through the use of cookies is usually transmitted to a Google server in the United States and stored there. Google shares data with third parties if permission has been given, if necessary for legal reasons, or to have the third parties process this data on Google's behalf.
​
Google Remarketing and DoubleClick: We use Google Remarketing and Google DoubleClick. This technology uses cookies to track how you use our website, and to help us recognize your browser when you visit websites that are part of the Google advertising network. To do this, the Google Analytics tracking code uses so-called DoubleClick cookies in addition to the usual Google Analytics cookies. DoubleClick cookies collect data about which third-party websites you have visited in the Google Display Network, and which ads you have clicked on. Data from first-party cookies (e.g. Google Analytics cookies) is also linked with data from third-party cookies (e.g. Google cookies for display preferences). This allows us to evaluate how advertisements are displayed and how you interact with them.
​
Google AdWords Conversion Tracking: We use Google AdWords Conversion Tracking. This technology stores cookies when you interact with one of our advertisements, e.g. by clicking on it. The cookies are then used to analyze what happens after you interact with an ad, such as whether you bought our product, accessed the ad from a cell phone, downloaded our app, or subscribed to a newsletter.
​
Google Tag Manager: Google Tag Manager is a solution that we use to manage web page tags from an interface (allowing us to integrate f. e. Google Analytics, or other Google marketing services, into our online offering). The tag manager itself (which implements the tags) does not process personal information. With regard to the processing of personal data, reference is made to the information relating to the respective Google services. The Google Tag Manager usage policy can be viewed here: https://www.google.com/intl/de/tagmanager/use-policy-html
​
Google reCAPTCHA: We use Google's reCAPTCHA service in some of our forms. For this service, Google collects certain data to determine whether a human being or a machine is accessing our websites; this data may include your IP address, your screen and window resolution, your browser's language settings, the time zone where you are located, the browser's user agent and what browser plugins you have installed. We have added the code "get._anonymizeIP();" to this service. This causes Google to shorten your IP address. For more information about shortening IP addresses, see the explanation of Google Analytics above.
​
Google Signals: In parts we also use the function Signals of Google Inc.'s. Google Signals recognizes single users across different devices (socalled Cross Device Tracking). As a result we receive anonymized data in report form. The reports show patterns in user behavior.
​
The function is only activated, if you
-
have a Google account,
-
are logged in to this Google account while using the according Sparkybit websites,
-
and have activated the option 'Ads personalization' in your Google account's Ads Settings.
​
Purposes for which the data is processed:
​
Google Analytics: Google uses the data collected via Google Analytics on our behalf in order to evaluate how our websites are used, compile reports on website activity, and to provide other services relating to website and Internet use.
​
Google Remarketing and DoubleClick: We use this technology to display ads relevant to your interests on other sites in the Google advertising network. These ads relate to content that you have previously viewed on our websites.
​
Google AdWords Conversion Tracking: We use this technology to improve our offerings.
​
Google Tag Manager: We use this service to create, deploy and manage tags on our website.
​
Google reCAPTCHA: We use this service to distinguish whether the data entered in one of our web forms was entered by a human being or illegitimately by an automated process, which in turn helps us to protect our information technology systems.
​
YouTube: We use YouTube to embed videos on our websites.
​
Google Signals: We are using the technology to recognize users across different devices. Thus we are able to present you interest based advertisements.
​
Legal basis:
We use the Google products listed above after you have given your consent. When you visit our website, we obtain your consent via the cookie banner at the bottom edge of the page.
We use Google reCAPTCHA on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in our legitimate interest to prevent misuse of our forms and to protect our information technology systems.
​
Storage period and control options:
The data that is collected by these Google functions is stored and deleted regularly.
You may prevent the use of cookies by configuring the appropriate settings on your browser.
You can also prevent Google from collecting and processing this data by downloading and installing the browser add-on available at this link.
​
Google Dynamic Remarketing and DoubleClick and Google AdWords Conversion Tracking: You can refuse the storage of cookies and the associated data processing by deactivating personalized ads in your ad settings. You can deactivate the use of cookies by third-party providers through the Network Advertising Initiative's opt-out page. DoubleClick cookies can also be deactivated by installing a browser plugin.
Note that such changes may limit the functionality of our websites.
For more information, see the Google Privacy Policy Statement.
​
3. What data is processed when you contact us, order a newsletter, open a user account and purchase online products and services?
This sections explains what data is collected and processed when you contact us, order a newsletter, open an account or purchase online products; for what purposes and by which recipients it is processed; on what legal basis the data is processed; and when the data is deleted.
​
A. Contacting us
​
Data collected:
When you contact us through a contact form or via email, we collect and process the data you provide, such as your contact information, your name and your request. All data that you share with us is transmitted from your browser to our server in encrypted form.
​
Purposes for which the data is processed:
Data processing is performed by our customer service department or by service providers working on our behalf, exclusively on the basis of your request and in order to process that request.
​
Legal basis:
We process your data for the implementation of precontractual and contractual measures that are performed at your request (Art. 6 (1)(b) GDPR).
​
Storage period:
We store your data for as long as we need it for the specific processing purpose, or to guarantee or comply with statutory retention periods.
​
Transfers to third countries:
We deploy, among others, the service provider Salesforce.com (salesforce.com EMEA Limited, Company No. 05094083, registered in England; Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London; UK) for the administration of your data.
In principle Data is processed in European data centres, data may also be transmitted to third countries such as the USA whilst undertaking maintenance and support measures. In order to ensure that your data is adequately protected in such cases, we have obligated the service provider Salesforce Inc. to ad here to a data protection level that complies with EU law, using the corresponding EU standard contractual clauses for the transfer of personal data to processors established in third countries.
​
4. What rights do you have and how can you exercise them?
​
A. Revocation of consent
If you have consented to the processing of your personal data, you can revoke that consent at any time with future effect. Note that such revocation has no effect on the legality of previous data processing, and that it does not extend to data processing for which a statutory justification exists, and which may therefore take place even without your consent.
​
B. Additional rights of data subjects
In addition, you have the following rights as a data subject under Articles 15 to 21 and 77 of the EU General Data Protection Regulation (GDPR), provided that the statutory requirements are met:
​
Information:
You can request at any time that we provide you with information as to which of your personal data we process and how, and that we provide you with a copy of the stored personal data that relates to you, Art. 15 GDPR.
​
Correction:
You can request the correction of incorrect personal data and the completion of incomplete personal data, Art. 16 GDPR.
​
Deletion:
Regarding the deletion of your personal data: Please note that the right to deletion excludes data that we require for the execution and processing of contracts, and for the assertion, exercise and defense of legal claims, as well as data for which statutory, regulatory or contractual retention requirements apply, Art. 17 GDPR.
​
Restriction of processing:
Under certain circumstances, you may request that processing be restricted, e.g. if you believe that your data is incorrect, that the processing of your data is unlawful, or if you have objected to the processing of your data. The result of such a request is that your data may only be processed to a very limited extent without your consent, e.g. for the assertion, exercise and defense of legal claims or to protect the rights of other natural and legal persons, Art. 18 GDPR.
​
Objection to data processing:
You have the option to object at any time to data processing for purposes of direct advertising. In addition, if special reasons apply, you can object at any time to data processing on the basis of a legitimate interest, Art. 21 GDPR.
​
Data portability:
You have the right to receive the data that you have provided to us, and that we process based on your consent or in order to fulfill a contract, in a common, machine-readable format and, to the extent that this is technically feasible, to request that this data be transmitted directly to third parties, Art. 20 GDPR.
​
C. How to contact us
You can exercise your rights via the following contact channels:
Sparkybit GmbH
Data protection team
Im Dörener Feld 3
33100 Paderborn (Germany)
Email: gdpr@sparkybit.com
You can also revoke your consent to receive the newsletter at any time by clicking the corresponding link in each newsletter.
​
D. Right of appeal to a regulatory authority
If you believe, for example, that our data processing is unlawful or that we have not protected the rights described above to the required extent, you have the right to file a complaint with the competent data protection authority.
​