For the collection, use and processing of your personal data described below, consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 and 8 GDPR is required.
1. type of processing or use of your personal data
In the survey to which this declaration of consent refers, we collect personal data from you that we want to use for the decision to use you as a product tester. We intend to use/process the categories of data described in section 2 as follows:
On the one hand, your data will be used for the purpose of making decisions about whether you are suitable for Junglück as a product tester and which products we can make available to you for testing. In addition, we also intend to process your data for internal purposes to optimize our products and for sales purposes.
In connection with the use/processing of your personal data, we would also transfer the data mentioned under point 2 to the following bodies for the following purposes:
TYPEFORM, C/Bac de Roda, 163 (Local), 08018 - Barcelona (Spain), based in Spain (EU), is the service provider through which we collect the query of your data mentioned under point 2 and have it forwarded to us. There is a proper contract with TYPEFORM for order processing in accordance with Art. 28 of the EU General Data Protection Regulation (GDPR). You can find more information on data processing by TYPEFORM at: https: //admin.typeform.com/to/dwk6gt/
Your data is then transmitted by TYPEFORM to the service provider KLAVIYO, which processes the data collected for us and makes it analyzable.
There is also a proper contract with KLAVIYO, Global HQ, 125 Summer St, Floor 6 Boston, MA 02111 United States for order processing in accordance with Art. 28 GDPR. This contract can be viewed at: https://www.klaviyo.com/privacy/dpa. Attachment 3 of the contract contains the so-called standard contractual clauses issued by the EU Commission as suitable guarantees pursuant to Art. 46 para. 2 lit. c) GDPR.
However, since KLAVIYO is a provider based in the third country USA, where a comparable level of data protection as in a member state of the EU cannot be guaranteed despite the aforementioned suitable guarantees, we also require your express consent for the transfer of data to KLAVIYO in accordance with Art. 49 para. 1 lit. a) GDPR. You give this consent when you submit this declaration of consent. According to the ruling of the European Court of Justice of July 16, 2020 (so-called SCHREMS II ruling), there is a risk that US authorities may also access personal data of EU citizens and process it for their own purposes on the basis of the so-called CLOUD Act, despite the existence of suitable guarantees. Please be aware that a level of data protection similar to that in the EU member states is therefore not guaranteed when you submit this declaration of consent. You can read more about the processing of personal data by KLAVIYO at: https: //www.klaviyo.com/privacy/policy
Klaviyo also compares your personal data with your data if it is already stored in Shopify via orders placed with us or via the creation of a customer account. There is also a proper contract with Shopify in accordance with Art. 28 GDPR. Shopify is a store system of Shopify Inc, 150 Elgin St, 8th Fl, Ottawa, ON K2P 1L4, Canada ("Shopify"). Shopify processes the following data of our customers as part of the provision of the store system: Name, e-mail address, delivery and billing address, payment data, company name, telephone number, IP address, information about orders, information about stores visited and supported by Shopify and information about devices and browsers used.
For customers from the European Economic Area, data processing is carried out by Shopify's subsidiary, Shopify International Limited, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
2. type of data to be processed
We request the following personal data from you for the data processing mentioned in section 1:
- E-mail address
- Your hair length
- Your hair structure
- Certain character traits that you would give your hair (e.g. lots of volume)
- Features that your hair lacks (e.g. moisture)
- Whether your hair is colored
- Your hair color
- properties of your scalp (e.g. scaly)
- Medical problems with your scalp (e.g. neurodermatitis)
- The frequency of shampooing
- Hair products that you use
- Preference for products from the same line
- Importance of the right conditioner for the shampoo
- Styling tools used in the routine
- Preferred fragrance intensity for hair products
3. place and duration of storage
The data mentioned in section 2 is processed in our internal databases and by the service provider KLAVIYO in accordance with our instructions. You can read more about the protection of your data and the processing via KLAVIYO in section 2. Complex CRM systems, data warehouse applications and cloud solutions are used for data processing.
We will store and process your data for a period of five years from the date of collection as described in section 1. As this declaration of consent is voluntary, you can revoke your consent at any time and request that we delete your data. We will then no longer process your data, but delete it immediately.
4. special data types
Please note that the data we want to process from you also includes so-called special categories of personal data in accordance with Art. 9 para. 1 GDPR. In this case, this is health data, i.e. information that allows conclusions to be drawn about your state of health. The processing of such special categories always entails an increased data protection risk, which we would like to draw your attention to at this point.
5. responsible body and data protection officer
The controller within the meaning of Art. 4 No. 7 GDPR for the collection, processing and use of your personal data is
JUNGLÜCK GmbH
Keltenring 9
82041 Oberhaching
If you have any questions, you can contact our company data protection officer at the address below.
6. voluntariness
I acknowledge that my consent is based on my voluntary decision. Failure to give my consent will not have any negative consequences for me. I am also aware that I can revoke my consent at any time for the future. Uses and processing that took place before the revocation remain unaffected by the revocation.
7. declaration of consent
With my signature I declare my consent to the described collection, processing and use of my data.
I have taken note of the information in this declaration of consent regarding the processing, storage and transmission of my personal data and also declare my consent to this. I have also taken note of the fact that this consent is voluntary and that I can revoke this consent informally at any time without giving reasons by telephone, in writing or by e-mail to info@thales-datenschutz.de.