Privacy policy

Name and contact details of Controller (“we” or “Responsible”)

Responsible party under data privacy law, Controller is Chal-Tec GmbH, Wallstr. 16, 10179 Berlin E-Mail: info@chal-tec.com Telefon: +49 (0) 30 - 408 173 810 Fax: +49 (0) 30 - 408 173 505

Contact details of data privacy officer

Verimax GmbH
Herr Michael Grein
Warndtstr. 115, 66127 Saarbrücken
DSB.CHAL-TEC@verimax.de

Data processing in general

The Privacy Policy applies to users of this website as potential future business partners ("Users").

1. Use of personal data

We collect and process voluntarily provided personal data of users to the extent necessary to provide our services.

1.1 Collection

If you provide information about yourself and your company on our website in the contact form, we collect data from the following data categories: 

• Contact data (E-Mail) 
• Inventory data (such as full name, company name) 
• Information (such as URL of your webshops; annual net sales; what percentage of your sales you generate on Amazon; URL of the Amazon store) 
• Details about the possible sale of the business (such as details that are important to you in the sales process or how quickly you want to sell your business) 

Additional the following data is collected automatically:

• Confirmation of collecting consent
• User´s IP -address
• Time and date of sending contact form 

1.2 Processing of personal data 

The data collected within the scope of 1.1 will be transmitted to us and stored. We process these personal data as follows:

• To contact you (in regard of requested rating)
• For processing the conversation
• For reviewing the given data in preparation and implementation of possible business relations
• To submit a requested rating via our contact form (https://www.berlin-brands-group.com/en/sell-your-brand) 

Mandatory information marked with an asteriks (*). Without these informations it is impossible for us to get in contact with you and submit the requested rating. 

2. Legal basis for processing personal data

 The legal basis for processing your personal data is the performance of possibly pre-contractual measures or the fulfillment of a contract with you as a user, Art. 6 Para. 1 lit. b GDPR and if you have given explicitly consent, legal basis is Art. 6 Para 1 lit. a GDPR. 

3. Recipient of your personal data 

In connection with the data processing described above, we only provide this to certain recipients such as IT service provider [E-Mail-Provider, hosting providers, CRM providers, sending of direct mail] as well as parcel services insofar as they are designated as processors if necessary and corresponding agreements are concluded with us as data controller. 

4. Duration of data storage and Deletion 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form and those sent by e-mail, this is the case when the respective conversation or the initiation of a business relationship with the user has finally ended. Personal data that serve the purpose of being able to fulfill a contract are kept until the complete fulfillment of the contract. Necessary personal data collected to protect the legitimate interests of the responsible parties will be retained until the fulfillment of this purpose. Any storage beyond this for a longer period will only take place with the specific consent of the user or due to the fulfillment of a legal obligation or an official order vis-à-vis the person responsible. 

5. Your rights

In regard to your personal data stored by us, you are entitled to the following rights if the legal requirements are met:

• You have the right to revoke your consent to the processing of data at any time with effect for the future (Art. 7 (3) DSGVO).
• You have the right to request information about your personal data stored by us at any time (Art. 15 DSGVO).
• You have the right to have your data corrected or deleted (Art. 16, 17 DSGVO).
• You have the right to request the restriction of the processing of your data due to unlawful data processing (Art. 18 DSGVO).
• Insofar as a correction, deletion or restriction of data has been made, you have the right to a notification obligation to all recipients to whom your personal data have been disclosed (Art. 19 DSGVO).
• You have the right to receive the data collected by us within the framework of the contract or by way of consent, in structured form and the right to have this data transmitted to third parties at your request, data portability (Art. 20 DSGVO).
• You have the right to object to the processing of your personal data in certain cases (Art. 21 GDPR).

In addition you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. For Chal-Tec GmbH this is the Berlin Comissioner of Data Protection and Freedom of Information. 

6. Cookies

We do use certain cookies and tracking tools to provide our services. 

We do use cookies on our website, to personalize content, offer functions for social media, analyze access to our website. We pass on information about your use of our website to partners for advertising and analysis or social media. These partners may keep this information together with other data that was collected in the course of use or that you have provided to them. 

6.1. Necessary cookies

Necessary cookies are required to enable the operation of our website. (These include, for example, cookies that enable you to log into the customer area or to add something to the shopping cart.) These cookies do not contain any personal data. 

6.2. Functional cookies

Functional cookies enable a website to remember information that affects the way a website behaves or looks. We use cookies, for example to remember your preferred language or the region you are in. The cookies we use do not collect and process any personal data or only anonymized data (e.g. time and date of access, URL of the referring website, browser type, browser settings, etc.) in order to analyze your surfing behavior. This means that no conclusions can be drawn about the individual user from this data collected as part of the cookie. The storage period only extends to the duration of your visit to the website.

6.3. Analytic Cookies

Analytical cookies collect data about the usage behavior of our visitors. Your evaluation helps us to improve the functionality of the website and to show you interesting and optimized offers. 

Google Analytics: As far as you have given your consent we do use Google Analytics, a service provider for web analysis of Google LLC., responsible service provider for EU is the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. We have activated Google's IP anonymization so that your IP address is shortened by Google before transmission within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. While using our website, information about the page you have visited, your “click path”, conversions, downloads or your user behavior (e.g. clicks, length of stay, bounce rates) your approximate location (region), your abbreviated IP address, technical information about your browser and devices you use (e.g. language setting, screen resolution), our internet provider the referrer URL (via which website(via which advertising material you came to our website) are recorded. Google will use the information obtained on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The reports provided by Google Analytics are used to analyze the performance of our website and success of our marketing campaign. You can install a browser add-on offered by Google to disable Google Analytics (https://tools.google.com/dlpage/gaoptout/). Or deny your consent for using this service at the cookie banner. The transfer of data to the USA takes place on the basis of your express consent. It should be noted that US authorities have extensive access to data processed in the US. You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser so that all cookies are rejected, functionality on this and other websites may be restricted. Recipient of data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as data processor. Therefore we agreed on a data processing agreement with the Google LLC, California, USA and if applicable, U.S. authorities can access the data stored by Google. Legal basis for processing these data is your consent, Art. 6 (1) s.1 lit. a GDPR. You can revoke your consent with effect for the future at any time by changing your selection regarding the cookie settings: https://www.berlin-brands.group.com/en/privacy-policy. You can find more information about the terms of use of Google Analytics and data protection at Google at https://policies.google.com/?hl=de or https://marketingplatform.google.com/about/analytics/terms/de/. 

Google Tag Manager: We use the Google Tag Manager, a tag management system from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). The Google Tag Manager is a platform and a tool for tag management. Tags are scripts that are used to set cookies. The Google Tag Manager does not collect any personal data, but rather triggers other tags that regularly use cookies. This makes it easier to manage the tags used on the website. 

Hotjar: Hotjar is software from www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe, which we use with the legitimate interest of improving the user-friendliness of our website (Art. 6 Para. 1 lit . f GDPR). Hotjar helps us understand how users use the website (mouse movements, clicks, scrolling, etc.). For this purpose, Hotjar uses analysis cookies including the IP address, which is then pseudonymised, and details about the behavior of visitors when visiting our website. You can find more information about the data collected by Hotjar and how it is processed in Hotjar's data protection declaration (www.hotjar.com/legal/policies/privacy). You can object to the use of the Hotjar cookie in the following link: https://www.hotjar.com/legal/compliance/opt-out. 

6.4. Marketing Cookies

We use marketing cookies that allow us to display advertising on and outside of our website based on your use of our website by means of retargeting and remarketing measures. This also enables third retargeting and remarketing providers to save cookies on your hard drive. On the basis of cookie technology, usage information is stored and evaluated in pseudonymised form, e.g. which advertisements you have received or clicked on from us, which products you have viewed or whether you have bought a product from us. The pseudonymous data will not be merged with your personal data without your consent to the third party provider and will only be used to enable and optimize advertising in accordance with the interests of the respective user. 

Google Ads: We use the online advertising program Google AdWords from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") and, as part of this, Google AdWords Conversion Tracking. We use the offer of Google Adwords to draw attention to our offers with the help of advertising materials (so-called Google Adwords) on external websites. We can also measure the success of advertising campaigns. As far as a personal data is contained therein, the processing takes place with the legitimate interest to show you targeted advertising as well as to make our website more interesting for you and to achieve a fair calculation of advertising costs (Art. 6 Abs. 1 lit. f GDPR). The data is transferred to the USA on the basis of your express consent. It should be noted that US authorities have extensive access to data that is processed in the USA. If you do not want to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under user settings or by downloading and installing the browser plug-in available under the following link: http: // www.google.com/settings/ads/plugin?hl=de. Please note that certain functions of this website may not be able to be used or only to a limited extent if you have deactivated the use of cookies. If you have not given Google permission for this, cookies are used without reference to personal data. The Google AdWords cookies have a storage period of up to 30 days. 

Google Ads Conversion: We use “AdWords Conversion” from Google to keep track of which users click on an advertisement placed by Google. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the respective customer can see that the user clicked on the ad and was redirected to this page. Each AdWord customer receives an individual cookie so that it is not possible to track users across the websites of other AdWords customers. The information obtained with the help of the conversion cookie is used to create anonymous conversion statistics for AdWords customers. Google shows the customer the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. They do not receive any information with which a personal identification of the user is possible, so that the use of the cookie takes place without reference to personal data. Insofar as this does contain personal data, processing takes place with the legitimate interest of showing you targeted advertising, making our website more interesting for you and achieving a fair calculation of advertising costs (Art. 6 Para. 1 lit. f GDPR ). These advertising media are delivered by Google via "ad servers". For this purpose, ad server cookies are used, which use certain parameters to evaluate the success of the advertising. For this purpose, e.g. displays of advertising and clicks by users are measured. If you reach our website via an advertisement from Google, Google AdWords stores a cookie on your computer. In connection with the cookie, analysis values ​​are usually saved, such as the unique cookie ID, number of ad impressions per placement, last impression and opt-out information (this would indicate that you do not want to receive direct, targeted advertising via Google AdWords ). With the help of this cookie you can usually be recognized by your browser. As long as the cookie is not deleted, Google and the customer can see which ad you clicked on. Due to the marketing tool used, your browser automatically establishes a connection to the Google server. We have no influence on the scope and further use of the data within this connection. If you use a Google service and are registered with it, Google can assign your visits and your clicks to your account; this option also exists if you are not logged into the account at the time. The data is transferred to the USA on the basis of your express consent. It should be noted that US authorities have extensive access to data that is processed in the USA. You can permanently deactivate cookies for ad preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link: http://www.google.com/settings/ads/plugin?hl=de. The Google AdWords conversion cookies are valid for 30 days 

LinkedIn: This service is provided on the technical platform of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as “LinkedIn”). If you visit our website and are logged in to your LinkedIn account at the same time, LinkedIn can immediately assign your visit to our website to your LinkedIn account. If you do not want LinkedIn to assign your data to your account, you must log out of LinkedIn before visiting our website. We hereby point out that you use the service offered here and its functionalities at your own risk. This applies in particular to the use of interactive functions such as the “share” function. The way in which LinkedIn collects and processes your data and for what purposes this is done can be found in LinkedIn's data protection declaration, which can be found at https://www.linkedin.com/legal/privacy-policy?_l=de_DE can retrieve. If you use the service, cookies and similar technologies such as pixels, web beacons and local storage can be used to collect information about your usage behavior and to make functions available to you. In addition, advertisers or other partners of the provider can provide cookies or similar technologies on your device. Information on the provider's contact options, as well as the way in which the provider uses the data due to your visit for its own purposes or passes it on to third parties, can also be found in the data protection declaration of the corresponding service https://www.linkedin.com/legal/ privacy-policy? _l = de_DE. However, you have the option of restricting the processing of your data in the privacy settings of your profile. Further information on the privacy settings can be found here (with further references): https://www.linkedin.com/legal/privacy-policy?_l=de_DE. In addition, you can use the setting options on your mobile device to restrict the service's access to contact and calendar data, photos, location data, etc. However, this depends on the operating system you are using. We also collect and process the following data from the use of the service: The data you enter on LinkedIn, in particular your user name and the content published under your account, are processed by us to the extent that we share or reply to your posts or we also write posts that refer to your profile and that Content is included in our offer and made available to our followers. The data mentioned are processed by us for the purpose of customer loyalty and advertising purposes.

Facebook Custom Audience: We use Custom Audiences from the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). When you visit our website, a direct connection is established between your browser and the Facebook server. Facebook receives information about which products have been added to the shopping cart, which categories have been viewed, which products have been viewed and which products have been purchased. We can use the information obtained in this way to display Facebook ads. The cookies do not contain any personal data. However, it cannot be ruled out that Facebook will combine the cookie with the data contained in your Facebook user account (such as age, gender, region). However, it will only be used for advertising purposes if you have given your consent to Facebook (Art. 6 Para. 1 lit. a GDPR). You can find more information on this in Facebook's data protection declaration at https://www.facebook.com/about/privacy/. Due to the marketing tool used, your browser automatically establishes a connection to the Facebook server. We have no influence on the scope and further use of the data within this connection. If you use a Facebook service and are registered with it, Facebook can assign your visits and your clicks to your account; this option also exists if you are not logged into the account at the time. The data is transferred to the USA based on your express consent. It should be noted that US authorities have extensive access to data that is processed in the USA. The Facebook Custom Audience cookies are valid for 3 months. 

7. Data security 

We always endeavor to process personal data by taking all appropriate technical and organizational measures to ensure that they are secure and not accessible to unauthorized persons. Your personal data is securely encrypted and transmitted with us. We use the coding system SSL (Secure Socket Layer). In this respect, we expressly point out that complete data security cannot be guaranteed when communicating by e-mail. We therefore recommend that confidential information be sent by post. In order to protect the user's data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons in the best possible way, we use appropriate technical and organizational security measures that are continuously optimized in accordance with technical developments.

June 29th, 2021

1. Name and contact details of Controller

Responsible party under data privacy law, Controller is Chal-Tec GmbH, Wallstr. 16, 10179 Berlin E-Mail: info@chal-tec.com Phone: +49 (0) 30 - 408 173 810 Fax: +49 (0) 30 - 408 173 505

2. Contact details of data privacy officer

Verimax GmbH
Herr Michael Grein
Warndtstr. 115, 66127 Saarbrücken
DSB.CHAL-TEC@verimax.de

3. Purpose of data processing

We process the data of your application to assess the establishment of a possible employment relationship. In doing so, we process your data in order to process the application and match it with our vacancies. This involves the following categories of data:

• Identification data (including, for example, name, address, e-mail address)
• Applicant information, including cover letter, name, email address, mailing address, applicant questionnaires, applicant interview, education, employment history, resume and other work experience information. The provision of personal data as part of the application process is required for participation in the application process. Without providing them, we cannot assess your suitability for the advertised position and consequently cannot establish a contractual relationship with you. For processing sensitive personal information, you provided (e.g. details of disabled status, Information on marital status, information on sex life or sexual orientation, information on health, etc.) within the meaning of Art. 9 GDPR, we do need your explicit consent also including Greenhouse as part of the application management at Chal-Tec and the processing of my personal data in the USA that may be associated with this. We do not request this kind of sensitive data unless it is required in accordance with the law for the job position. In general, we do urge you to not provide this sensitive personal information and therefore to refrain from providing it. You can revoke this consent at any time to Chal-Tec GmbH by mail, e-mail or fax to the contact data mentioned above. In case of revocation, your data covered by the consent will be deleted immediately. In the event of revocation of consent and if you have provided particularly sensitive personal data within the meaning of Art. 9 GDPR, your application already submitted cannot be considered further.

4. Legal basis for data processing

Legal basis for processing the provided application data including getting in touch with you is Art. 6 Para. 1 lit. b GDPR and § 26 Federal Data Protection Act.

5. Recipients of personal data

When carrying out the communication , the communication service providers used, in particular email providers, as well as our software-service providers Greenhouse Software, Inc. 18 West 18th Street, 11th Fl., New York, NY 10011 USA as processor receives your data. As the so-called Privacy-Shield is no longer suitable transfer mechanism, we have aggreed with Greenhouse on Eu Standard Data Protection clauses pursuant to Art. 26 Para. 2 of Directive 95/46/EC for data transfers to the U.S.; as well as additional safeguards to prevent access by U.S. government authorities and thus protect your rights.

6. Duration of storage

Applications from applicants with whom no employment relationship has been established will be deleted within 6 months of receipt of the rejection notice and thus after completion of the application process. If you on request will be interested on being part of our Talent Pool, we will ask you for your explicit consent to do so. When you join our Talent Pool, your data will be stored for additional 12 months. If an employment relationship is established with the applicant, application, if required for the implementation of the employment relationship, becomes part of the personnel file and is stored for the duration of the employment relationship. If an early deletion is required please contact us at privacy@go-bbg.com.

7. Your rights

You are entitled to the following rights if the legal requirements are met:

• Right to withdraw consent to the processing of data, once given, at any time with effect for the future (Art. 7(3) DSGVO).
• Right to information about personal data concerning you (Art. 15 DSGVO)
• Right to have inaccurate personal data concerning you corrected (Art. 16 DSGVO)
• Right to erasure of personal data (Art. 17 DSGVO)
• Right to restrict the processing of personal data (Art. 18 GDPR)
• Right to be notified to all recipients to whom your personal data has been disclosed, insofar as rectification, erasure or restriction of data has been carried out (Art. 19 DSGVO).
• Right to object to the processing of personal data (Art. 21 GDPR).
• Right to data portability (Art. 20 DSGVO)

In addition you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. For Chal-Tec GmbH this is the Berlin Comissioner of Data Protection and Freedom of Information.

8. Automated decision-making including profiling

We do not use.

1. Purpose of data processing

In order to carry out the application process, Chal-Tec GmbH, Wallstr. 16, 10179 Berlin, E-Mail: privacy@go-bbg.com; Fax:+49 (0) 30 - 408 173 505 processes my personal data that I provide as part of the application process. This includes the following categories of data:

• Identification data (including e.g. name, address, e-mail, emergency contact details);
• Electronical identification data (incl. e.g. login-data);
• Information about applicant, incl., cover letter, name, email address, mailing address, applicant questionnaires, applicant interview, education, employment history, resume, and other work experience information;
• Photographs of applicants, if submitted; and any other personally identifiable information uploaded or submitted by the applicant through the Services.

Chal-Tec GmbH works with a software service provider to carry out the application process, Greenhouse Software, Inc. 18 West 18th Street, 11th Fl., New York, NY 10011 USA („Greenhouse“). This company processes the applicant data according to the specifications of Chal-Tec GmbH by storing the personal data on servers in the USA. To secure the data processing, Chal-Tec GmbH and Greenhouse have concluded a data processing agreement, Art. 28 of the General Data Protection Regulation. Chal-Tec GmbH remains the master of my data.

2.Adequate level of data protection, appropriate safeguards

The EU Commission has currently not determined an adequate level of data protection for the USA, Art. 45 (3) of the General Data Protection Regulation, and the so-called Privacy Shield is invalid. The General Data Protection Regulation alternatively provides for appropriate safeguards for a data transfer to a third country, Art. 46 (1) General Data Protection Regulation. Between Chal-Tec GmbH and Greenhouse, the EU standard data protection clauses according to Art. 26 (2) of Directive 95/46/EC and additional safeguards have been agreed upon to prevent access by US government authorities and thus protect my rights.

3. Possible risks

The protection of my personal data is particularly important to Chal-Tec Even though there are are still potential risks, which cannot be completely ruled out at present, despite the existing data privacy an data security measures in connection with the aforementioned No. 1. And 2. These are in particular: my personal data could possibly be processed beyond the actual purpose of application management, e.g. by a US government agency. I may not be able to sustainably enforce my rights to information against Chal-Tec and against Greenhouse.

4. Consent/revocation of consent

I consent to the transfer of my personal data mentioned in No. 1 to Greenhouse as part of the application process at Chal-Tec and to the associated processing of my personal data in the USA. I am not obliged to give this consent. If the consent is not granted, however, it is not possible for me to carry out the application process with Chal-Tec. I can revoke this consent at any time to Chal-Tec by mail, e-mail, or fax to the above contact details. In the event of revocation, my data covered by the consent will be deleted with no further delay. In the event of revocation of consent, my application that has already been submitted cant be considered further.