Your Workout

Privacy Policy

Last amended: February 2023

We thank you for your visit to our website www.bellicon.com and your interest in our company and our offers. Despite careful control of the contents, we do not assume any liability for external links to third-party contents, as we have not initiated the transfer of this information, did not select the addressee of the transmitted information and the transmitted information ourselves or have amended any such information ourselves.

The protection of your personal data in connection with the collection, processing of use on the occasion of your visit to our Internet pages is an important concern for us. The collection, processing and use of your personal data takes place within the scope of the statutory provisions on which you may for instance obtain information on the website www.bfdi.bund.de.

In the following, we explain which information we record on the occasion of your visit to our websites and how this information is used.

Contact Data of the Controller responsible for the Processing of the Data

Controller with regard to compliance with data protection legislation is bellicon Europe GmbH, Poststraße 4-5, 10178 Berlin. If you have any questions about data protection or want to exercise rights or claims with regard to your personal data, please contact us by email at [email protected].

1. Collection and Storage of Personal Data as well as Nature and Purpose of their Use

a) When visiting the Website

Whenever a customer (or any other visitor) visits our website, the Internet browser used on your device (computer, laptop, tablet, smartphone, etc.) automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.
The following data is in this connection collected and stored, without any action on your part, until the time of automatic deletion:

  • IP-address of the accessing computer as well as device-ID or individual device identifier and type of device,
  • the name of the retrieved file and the transmitted data volume, as well as date and time of the retrieval,
  • report on successful retrieval,
  • accessing domain,
  • description of the type of Internet browser used and of the operating system of your device as well as the name of your access provider, as the case may be,
  • your browser history data as well as your default web log information,
  • location data, including location data of your mobile device. Please note that you are able to control or deactivate the use of location services on most mobile devices in the setup menu of the mobile device.

Our justified interest in accordance with Art. 6 para. 1 cl. 1 lit. f GDPR is based on the following purposes:

  • ensuring the smooth establishment of a connection and comfortable use of the website,
  • analysis of system security and system stability, and
  • other administrative purposes.

In no event will we use the collected data for the purpose of drawing any conclusions as to your person.

b) When using our Contact Form

Should you have questions of any kind, we offer you the possibility to contact us via a Contact Form provided on our website. In this connection, the specification of your name and of a valid email address is at least required, so that we know, who sent the enquiry and are able to answer it. Further information may be provided on a voluntary basis.

The data processing for the purpose of establishing contact with us takes place in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR on the basis of your voluntarily granted consent.

The personal data collected by us for the use of the Contact Form will be automatically erased after the inquiry you have sent us has been answered.

c) When concluding a contractual Relationship

Upon the conclusion of a contractual relationship on our website (e.g. within the scope of a purchase contract for a product or registration for a seminar at bellicon Academy) or via affiliates of bellicon, we ask you to provide the following personal data:

  • data that personally identify you, such as name and email address, address for invoice and delivery, and telephone number,
  • date of birth,
  • photos,
  • information on your means of payment,
  • additional personal data to whose collection we are legally obliged or entitled and which we require for your authentication, identification or for verifying the data collected by us.

The above-mentioned data are processed for the handling of the contractual relationship. The processing of the data is performed on the basis of Art. 6 para. 1 cl. 1 lit. b GDPR. The storage period is restricted to the contractual purpose and, if applicable, legal and contractual retention regulations.

For the handling of your orders, we cooperate with bellicon AG (Lucerne, Switzerland), on the basis of an agreement on commissioned data processing.

d) Use of Payment service providers

  • PayPal:

To process your order, we also cooperate with the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). When paying via PayPal, credit card via PayPal, direct debit via PayPal, we pass your data (payment data such as name, address, e-mail address) in the context of the payment processing to PayPal. The transfer takes place in accordance with Art. 6 para. 1 cl. 1 lit. b GDPR and only to the extent necessary for payment processing.

As a precaution, we would like to point out that PayPal reserves the right to carry out a creditworthiness check if PayPal is to make advance payment due to the justified interest in accordance with Art. 6 Para. 1 cl. 1 lit. b GDPR in determining your solvency. For this purpose, PayPal may pass on your payment data to credit agencies. The result of the credit check with regard to the statistical probability of non-payment can contain probability values (so-called score values), which are calculated on the basis of scientifically recognised mathematical-statistical procedures and include address data, among other things, in their calculation. According to PayPal, their interests worthy of protection are taken into account in accordance with the statutory provisions.

For more information about PayPal's handling of your data, and in particular about your rights, please refer to PayPal's privacy policy (https://www.paypal.com/de/webapps/mpp/ua/privacy-full). You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process your payment in accordance with the contract.

  • iDEAL:

Under certain conditions we offer payment via "iDEAL" on our website. iDEAL is a payment service of Currence iDEAL B.V., Gustav Mahlerplein 33-35, 1082 MA Amsterdam. When you make a payment using iDEAL, iDEAL collects various transaction details and forwards them to the bank of your choice. In addition to the data required for payment, iDEAL may also collect other data as part of transaction processing. For details on data collection by iDEAL, please refer to iDEAL's privacy policy at: https://www.ideal.nl/en/disclaimer-privacy-statement/.

  • Klarna:

To process your order, we also cooperate with the online payment service provider Klarna AB, Sveavägen 46, 11134 Stockholm (Sweden), postal address Germany: Postfach 900162, 90492 Nürnberg (hereinafter: "Klarna").

If you select the payment method "purchase on account" or "hire purchase" in our online shop and give the required consent, various personal data will be automatically transmitted to Klarna. The data is transmitted for the purpose of processing the payment and for Klarna's identity and credit check. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).

Personal data transmitted to Klarna generally includes first name, surname, address, date of birth, gender, e-mail address, IP address, telephone number, mobile phone number as well as other data required to process an purchase on account or hire purchase, in particular the transmission of payment information such as bank details, card number, expiry date and CVC code.

Klarna will also pass on your data to affiliated companies (Klarna Group) and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data are to be processed on behalf of Klarna. Klarna collects and uses data and information about your previous payment behaviour as well as probability values for your behaviour in the future (so-called scoring) to decide on the establishment, implementation or termination of a contractual relationship. Scoring is calculated on the basis of scientifically recognised mathematical-statistical methods.

You can object to the processing of your data at any time by sending a message to Klarna. Details about the collection of data by Klarna can be found in Klarna's privacy policy at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_de/privacy

e) When registering for our Newsletter

If you expressly consented in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR, we will use your email address for sending you our newsletter on a regular basis.

Deregistration is possible at any time, for instance via a link at the end of a newsletter. Alternatively, you can send us your deregistration request also via email to [email protected] (it is best to use the reference: "Deregistration/Abmeldung Newsletter").

f) When submitting a Critique

We offer you the possibility to assess our products and to publish the critique on our website. Should you wish to do so, we ask you to provide the following information: Name and email address, and the product you purchased. Additional information can be provided on a voluntary basis.

The processing of data which you provided in connection with your critique takes place in accordance with Art. 6 para. 1 cl.  1 lit. a GDPR on the basis of your voluntarily granted consent.

The personal data provided by you when sending the critique will be erased automatically after the erasure of the critique. You can have a critique erased at any time by sending an email to [email protected].

2. Disclosure of personal Data

No transmission of your data to third parties for purposes other than those listed below takes place.

We disclose your data to third parties only, if:

  • you gave your express consent to such disclosure (Art. 6 para. 1 cl. 1 lit. a GDPR),
  • this is required for the performance of contracts to which you are a party (Art. 6 para. 1 cl. 1 lit. b GDPR),
  • there is a legal obligation to disclose the data (Art. 6 para.1 cl. 1 lit. c GDPR),
  • the disclosure is required for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 cl. 1 lit. f GDPR).

In these cases, the volume of the disclosed data is however restricted to the necessary minimum.

Our data protection and data privacy provisions are in compliance with the applicable provisions of data protection legislation and the data are processed only in the Federal Republic of Germany and in Switzerland. The latter country was considered a third country by the European Commission, which ensures an appropriate level of data protection. In this regard, there are no reservations on the part of the European Commission concerning transmission of data to Switzerland and the transmission is possible on the basis of Art. 44 GDPR. Further information in this connection may be obtained from the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en. Subject to your consent, we work with third parties who can process the data outside the EU. All third parties with whom we work are listed in our Privacy Policy.

3. Rights of Data Subjects

Upon your request, we will be pleased to inform you whether and which personal data are stored with regard to your person (Art. 15 GDPR), in particular on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge complaints, the origin of your data, if these were not collected by us, and on the existence of automated individual decision-making, including profiling.

You also have the right to rectify any incorrectly collected personal data or to have incompletely collected data completed (Art. 16 GDPR).

Moreover, you have the right to demand the restriction of processing of your data by us, if the legal prerequisites are fulfilled (Art. 18 GDPR).

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to demand transmission of the data to another controller (Art. 20 GDPR).

Moreover, you have the so-called "Right to be forgotten", i.e. you are entitled to demand that we erase your personal data as soon as the legal prerequisites for such erasure are fulfilled (Art. 17 GDPR).

Irrespective of the above, your personal data will automatically be erased by us, when the purpose of the data collection no longer exists or the data processing has been unlawful.

In accordance with Art. 7 para. 3 GDPR you have the right to revoke your consent given to us at any time. As a consequence, we will not be permitted to continue the processing of data that was performed on this basis in the future.

You in addition have the right to object at any time against the processing of your personal data, if a right to object is provided for by law. In the event of a legally valid objection, your personal data will also be automatically erased by us (Art. 21 GDPR).

If you wish to avail yourself of your right of revocation or objection, just send an email to [email protected]

In the event of any violations of the provisions of data protection legislation, you are able, in accordance with Art. 77 GDPR, to lodge a complaint with the competent supervisory authority. The competent supervisory authority is both the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen/Data Protection Officer for Data Protection and Freedom of Information of North Rhine-Westphalia (https://www.ldi.nrw.de/) and any other supervisory authority.

4. Duration of Data Storage

The collected data are stored by us as long as this is required for the performance of the contracts concluded with us or as long as you have not exercised your right to erasure or to transfer of data to another company.

5. Cookies

We use cookies on our website. These are small text files that are automatically generated by your browser and stored on your device when you visit our website. The cookie is used to store information that is related to the specific device you are using. However, this does not mean that we will obtain immediate knowledge of your identity.

These cookies are set as so-called First Party Cookies ("own cookies") or Third Party Cookies ("third party cookies"). First party cookies are set by the website you are currently on and are not made accessible by browsers across domains. A Third Party cookie, on the other hand, is set by a third party, not by the actual website you are currently on.

In addition, cookies are divided into technically necessary and technically not necessary cookies. Both technically necessary cookies and technically unnecessary cookies are set on our website in accordance with the following paragraphs.

a) Technically necessary cookies

Technically necessary cookies are absolutely necessary for the operation of our website and lead, for example, to the fact that certain functions are made possible for the first time. These technically necessary cookies, which are only required and set for the individual online session, are automatically deleted after leaving our website.

The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 cl. 1 lit. f) GDPR.

b) Technically not necessary cookies

If you have given your consent, we will use so-called technically not necessary cookies on our website. The technically not necessary cookies are mainly used to evaluate the use of the website as well as user behaviour, to compile reports on the activities of visitors to the website and to provide further services associated with the use of the website.

The technically not necessary cookies used by us are explained in our cookie banner with regard to the functionality, duration and possible third party recipients of the data. If certain third party providers used by us set cookies within the scope of the service provided for us, this will also be pointed out separately in our Data Privacy Policy.

The legal basis for the use of technically not necessary cookies is Art. 6 para. 1 cl. 1 lit. a GDPR, provided that you have given your consent.

You can revoke your consent at any time. You can also configure the setting of cookies at any time. For example, you can set your browser so that it informs you beforehand when cookies are set or completely refuses cookies.

6. Google reCAPTCHA

For the protection of your inquiries by Internet form we use the service reCAPTCHA offered by Google Inc. The inquiry serves the differentiation whether the input takes place by humans or abusively by automated, mechanical processing. The query includes the transmission of the IP address and any other data required by Google for the service reCAPTCHA to Google. For this purpose your input will be transmitted to Google and used there. However, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not merged with other data from Google. These data are subject to the differing data protection regulations of Google. For more information about Google's privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/. You can find an opt-out option at the following link: https://adssettings.google.com/authenticated.

7. Zendesk

For faster and more efficient processing of customer inquiries we use the ticket system "Zendesk", a customer service platform of Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102. We also use the solution Zendesk Guide as a knowledge database for the FAQ available to you.

If it’s required to process your inquiry, data like for example your surname, first name, address, telephone number, e-mail address are collected and processed. The legal basis for the processing of your data is our legitimate interest in a fast and efficient processing of your inquiries in accordance with Art. 6 para. 1 cl. 1 lit. f) GDPR.

The recipient of the collected data is Zendesk. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Zendesk is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

For further information on how Zendesk handles your data, please refer to Zendesk's privacy policy: https://www.zendesk.de/company/customers-partners/privacy-policy/.

If you do not agree to Zendesk processing your request, you can alternatively communicate with us by e-mail, telephone or fax.

8. Online-Marketing-/ Analysis Measures

On our website, we use online-marketing measures and tracking tools for analysing the behaviour of the users on our website. By means of this statistical recording, we intend to design our website appropriately and in a needs-based manner and continuously adapt it for you as our user, optimise its utilisation and enhance its attractiveness and functionality.

a) Google Tools

On our website we use various tools from Google

In case your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Zendesk is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

aa) Google Analytics

If you have given your consent, Google Analytics, a web analysis service of Google Ireland Limited "Google"(Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as "Google"), is used on this website. The use includes the operating mode "Universal Analytics"; this makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyze the activities of a user across all devices.

Google uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended to include IP anonymisation in order to guarantee anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can find more information on the terms of use and data protection at (https://marketingplatform.google.com/about/analytics/terms/gb/ or https://policies.google.com/?hl=en).

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

The data sent by us and linked to cookies, user identifiers (e.g. User-ID) or advertising-IDs are automatically erased after 14 months. The erasure of data whose retention period has expired takes place automatically once a month.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through an appropriate setting in your browser software; however, we would like to point out that in this case you may not be able to fully use all the functions of this website.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your data across multiple devices, you must opt-out of all systems you use. If you click here (https://tools.google.com/dlpage/gaoptout?hl=en), the opt-out cookie will be set to disable Google Analytics.

ab) Google AdWords / Conversion Tracking

We in addition use the online advertising programme "Google AdWords" and the Conversion Tracking within the framework of Google AdWords. Google Conversion Tracking is an analysis service provided by Google.

When you click an advertisement placed by Google, a cookie for the Conversion Tracking is stored on your device. These cookies expire after 30 days, do not contain any personal data and thus do not serve personal identification purposes.

When you visit certain Internet pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked the advertisement and were redirected to this site. Each Google AdWords customer receives a different cookie. Thus, it is not possible to track cookies via websites of AdWords customers.

The information obtained by means of the Conversion cookie serves to prepare Conversion statistics for AdWords customers who opted for Conversion Tracking. In this connection, the customers are informed of the overall number of uses who clicked their advertisement and were redirected to a site equipped with a Conversion Tracking tag. They however do not receive any information that would permit the personal identification of users. The legal basis for the use of Google AdWords/ Conversion Tracking is your consent according to Art. 6 para. 1 cl. 1 lit. a GDPR.

You can revoke the use of tracking at any time. For further information and the data privacy policy of Google, go to https://policies.google.com/technologies/ads, https://policies.google.com/privacy.

ac) Google Remarketing

If you have given your consent, this website uses Google Remarketing, a marketing service offered by Google Inc. ("Google"). Third-party providers, including Google, place advertisements on websites on the Internet and employ cookies to place advertisements on the basis of prior visits by a user to this website. You can revoke your consent at any time. Further information can be found at: https://policies.google.com/technologies/ads. Alternatively, users can deactivate the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative at https://thenai.org/opt-out/browser-opt-out/.

The legal basis for the use of Google Remarketing is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

ad) Google Tag Manager

If you have given your consent, Google Tag Manager will be used on this website. By means of the Google Tag Manager, it is possible to manage website tags via a user interface. The tool Tag Manager as such (which implements the tag) is a cookie-less domain and does not collect personal data. The tool provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access these data. When any deactivation was made at domain or cookie level, this remains in force for all tracking tags, which are implemented by means of Google Tag Manager.

Further information on the Google Tag Manager may be found at https://www.google.com/intl/de/tagmanager/use-policy.html.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

ae) Google Workspace

On our website, we use Google Workspace from Google LLC (formerly known as Google Inc.),1600 Amphitheatre Parkway, Mountain View, California 94043 USA to communicate via email. In particular, your email address will be processed. The legal basis for the use of Google Workspace is your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

You can find more information about Google Workspace here: https://workspace.google.com/intl/de/.

af) YouTube

Our website includes videos about YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The videos are stored on www.youtube.com and can be played directly from our website. Our website enables you to connect to YouTube. Normally, when you visit a website with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer. However, we have integrated the YouTube videos with the "extended data protection mode" on our website. YouTube provides this extended data protection mode itself and ensures that no cookies are initially stored on your device. When you visit the relevant website, however, a connection to the "DoubleClick" network of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is established and your IP address is transmitted in "extended data protection mode". In particular, this indicates that you have visited our website. However, this data cannot be specifically assigned to you unless you have registered or are registered with YouTube or another Google service prior to visiting the website.

As soon as you start the playback of an embedded video by clicking on it, YouTube only stores cookies on your end devices that do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.

We have neither knowledge nor influence on the possible collection and use of your data by YouTube. For more information, please refer to YouTube's privacy policy at https://policies.google.com/privacy?hl=en&gl=en

b) Facebook Connect/ Facebook Pixel

With your consent, our website uses the so-called "Facebook-Pixel", which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA ("Facebook"). We use it to be able to track the behaviour of the visitors to our website when they have been redirected to the website of the seller after they clicked a Facebook advertisement. This enables the analysis of the efficiency of the Facebook advertisements for statistical and marketing research purposes and the optimisation of future advertising measures. The collected data are anonymous for us as the operator of this website; we are not able to draw any conclusions as to the identity of the users. The data are however stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook is able to use the data for their own advertising purposes, in accordance with Facebook's guideline concerning the use of data. This enables Facebook to place advertisements on the pages of Facebook as well as outside of Facebook. We, as the operator of this website, have no influence on this use of the data. Moreover, a cookie may be stored on your computer for these purposes. In the data privacy information of Facebook, you will find additional information on the protection of your privacy: https://www.facebook.com/about/privacy/.

You are also able to deactivate the remarketing function "Custom Audiences" in the settings area for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must have registered with Facebook. When you do not have a Facebook account, you can deactivate usage-based advertising of Facebook on the website of the European Interactive Digital Advertising Alliance.

The legal basis is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

The recipient of the collected data is FACEBOOK. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, FACEBOOK is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

Please click here, if you wish to revoke your consent: Opt-Out from Facebook

c) Taboola

If you have given your consent, we use the technology of Taboola Inc. (1115 Broadway, 7th Floor, New York, New York 10010), which enables us to recommend videos fitting your personal interests and thus to individually design our range of offers for you. Taboola determines by means of cookies, which video offers you use and how you move about on our website. For this purpose, device-based data and log data are collected and usage profiles are generated, using pseudonyms. These usage profiles are not aggregated and do not permit to draw any conclusions as regards your personal data.

The recipient of the collected data is Taboola. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Taboola is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

For more detailed information on Taboola and the possibility to deactivate the use of Taboola and their data privacy information, go to https://www.taboola.com/privacy-policy.

The legal basis is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

d) Outbrain

If you have given your consent, we integrate a so-called widget of Outbrain UK Limited, a company having its registered office in London. The service Outbrain is used for drawing your attention to supplementary contents, which are connected to the topics of the contents already read by you. If you did not declare your opt-out, the selection of the contents displayed in the widget is also made on the basis of those contents, which you currently and in the recent past have viewed on our web pages. For this purpose, Outbrain inter alia uses cookies.

The contents displayed in the widget are controlled and delivered in terms of contents and technology by Outbrain. We do not collect and use personal data in connection with the Outbrain widget. Outbrain provides information on the collection and utilisation of usage and other data in their data privacy policy (https://www.outbrain.com/legal/privacy). There, you are also able to object to the use of usage and other data for particular purposes (Opt-out). The recommendations of contents in the widget will afterwards no longer be controlled on the basis of usage data recorded by Outbrain.

The legal basis is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

e) Hotjar

If you have given your consent, we employ Hotjar, which essentially is a tracking code-based web analysis tool offered by Hotjar Ltd., (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). By means of Hotjar, interactions between randomly selected, individual visitors of our website are recorded in an anonymised form. This creates a log of e.g. mouse movements and clicks, with the aim of finding possibilities for improving our offers. Moreover, information on the operating system, browser, inbound and outbound references (Links), geographic origin, as well as resolution and nature of the device accessing our website are analysed for statistical purposes. Moreover, we offer the possibility of an anonymous user feedback via Hotjar by means of so-called "Feedback Pools". The recorded information is not person-related, is stored by Hotjar Ltd. and is not passed on to other third parties. You may find supplementary information on functions and data usage by means of Hotjar at https://www.hotjar.com/privacy.

The legal basis is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR.

If you do not desire an analysis of your web site by means of Hotjar, you can activate this on all Internet sites that employ Hotjar, by setting a DoNotTrack header in your browser (Hotjar-opt-out).

f) SendGrid

For the dispatch of order confirmation messages, we employ the service provider SendGrid. SendGrid is an offer of SendGrid, Inc., 1401 Walnut, Boulder, CO 80302, USA. Information on the data privacy policy of SendGrid may be found at https://sendgrid.com/privacy.

The recipient of the collected data is SendGrid. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, SendGrid is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

g) Cloudflare

To protect our website, we use the Cloudflare service of the provider Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare operates a content delivery network (CDN) and provides protection functions for the website (web application firewall). For this purpose, the data transfer between the requesting browser and our server is decrypted by Cloudflare to prevent attacks such as so-called distributed denial of service (DDoS) attacks on our software.

The legal basis is the protection of legitimate interests, namely the prevention of attacks on our website pursuant to Art. 6 para. 1 cl. 1 lit. f. GDPR

Insofar as a transfer of your data to the USA takes place, this is done on the basis of your consent pursuant to Art. 49 para. 1 cl.1 lit. a GDPR In addition, Cloudflare has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

You can find more information about Cloudflare's privacy policy here: https://www.cloudflare.com/privacypolicy

h) MailChimp

For the dispatch of newsletters, we utilise the services of MailChimp, an offer of Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service which inter alia enables the organisation and dispatch of newsletters. When you input data for the purpose of receiving newsletters (e.g. your email address), these are stored on the servers of MailChimp in the USA.

With the help of MailChimp, we are able to analyse our newsletter campaigns. When you open an email that has been sent by MailChimp, a file contained in the email (so-called web-beacon) establishes a connection to the servers of MailChimp in the USA. Thus, it is possible to determine whether a newsletter message was opened and which links, if any, were clicked. Moreover, technical information is recorded (e.g. time of retrieval, IP-address, browser type and operating system). We are not able to attribute this information to the respective recipients of the newsletters. They exclusively serve the purpose of statistical analysis of newsletter campaigns. We can use the results of these analyses to better adapt future newsletters to the interests of the recipients.

If you do not wish any analysis by MailChimp, you need to unsubscribe from the newsletter. For this purpose, we provide a relevant link in each newsletter message.

The data processing is performed on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time. The lawfulness of the data processing procedures that have already taken place remains unaffected by such revocation.

The data stored by you with us for the purpose of receiving newsletters remain stored by us until your deregistration from the newsletter and will be deleted from both our servers and from the servers of MailChimp after you unsubscribe from the newsletter. Data, which have been stored by us for other purposes (e.g. email addresses for the member section), remain unaffected thereby. For more details, you may wish to consult the data privacy provisions of MailChimp at https://mailchimp.com/legal/terms/.

The recipient of the collected data is MailChimp. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, MailChimp is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

We have concluded a so-called "Data Processing Agreement" with MailChimp, in which we obligate MailChimp to protect the data of our customers and not to disclose them to any third parties.

i) Tracify

We use the web analytics service Tracify on our website or on parts of our website to record how our website is used by its visitors and to evaluate and optimize the effectiveness of our advertising/marketing measures. Tracify is a web analytics service provided by Tracify GmbH in Munich, Germany. Tracify GmbH acts for us as a data processor on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Tracify enables an analysis of the use of the website and the customer journey without storing cookies or other information on the end device of the user, but only on the basis of browser and device information, such as the IP address of the user, the configuration of the respective user agent (user agent string), usage data, order information, contact data, the screen resolution, the installed fonts and plugins and the processor of the respective device.

The information transmitted to Tracify is completely and irreversibly anonymized immediately after transmission, so that a personal reference is excluded. Only the anonymized aggregated information is analyzed.

Data processing when using Tracify takes place entirely in Germany; there is no data transfer to unsafe third countries without an adequate level of data protection.

The legal basis for the use of Tracify is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in a demand-oriented design of the website and in the evaluation and optimization of our marketing measures.

We have integrated links to our Internet presences in the social networks (Facebook, Twitter, Instagram, Pinterest) on our website. We would like to point out that these are only links that lead to our website in the mentioned networks, they are not so-called plugins with which you could, for example, "share" or "link" information on our website in the networks. As far as we know, it is technically not possible for social networks to collect personal data on our website via mere links. Please refer to the data protection information of the respective network for the purpose and scope of data collection after forwarding.

We would like to point out that data of our website visitors can also be processed outside the European Union. This can result in risks for the users, as it could, for example, make it more difficult to enforce the rights of the users.

It is also possible that user data may be processed by third parties for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of users. The user profiles can also be used, for example, to place advertisements within and outside social networks that are presumed to correspond to the interests of the user. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behaviour and interests are stored. Furthermore, data may be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective social network and are logged in to this network).

For a detailed representation of the respective processing and the possibilities of objection (Opt-Out), we refer to the following linked information of the respective providers. Also in the case of requests for information or the assertion of your rights as a data subject, we point out that these can be asserted most effectively with the social networks. Only these have access to the data of their users and can directly take appropriate measures and provide information. Should you nevertheless need help, you can contact us.

10. Data Security and Data Privacy

We endeavour to take any and all necessary technical and organisational security measures to store your personal data in such a way that they are not accessible by third parties or the general public. Should you wish to contact us by email, we would like to draw your attention to the fact that, when using this means of communication, the confidentiality of the transmitted information cannot be ensured in full. We therefore recommend that you send us confidential information exclusively by post.

11. Up-to-Dateness and Amendment of this Data Privacy Policy

This Data Privacy Policy is at present in force and effect and was last amended in February 2023.

The further development of our website and the offers made on it or as a result of amended legal or official regulations may necessitate an amendment of this Data Privacy Policy. The Data Privacy Policy, as amended, can at any time be retrieved by you from our website at https://www.bellicon.com/en-eu/data-protection/, and printed out.