Data protection declaration and legal notes

We are delighted you have visited our website www.getfinn.com. Bike Citizens Mobile Solutions GmbH (in the following “we” or “Bike Citizens”) take data protection very seriously. You will find more information about the use of your data here:

Processor

In part, we use external service providers to process personal data (“processors”). These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

Transfer outside the EEA

In the following cases, we transfer data to recipients based outside the European Economic Area (EEA).

  • Google LLC (“Google“)with offices at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA processes data on our behalf. We transfer device recognition and information about app usage frequency to Google. The legal basis for this transfer is the legitimate interest for purposes of analysis (Art. 6 Para. 1 letter a GDPR) as well as fulfillment of contracts for purposes of communication (Art. 6 Para, 1 letter b GDPR)
  • Payments in the online shop are processed via the service provider Stripe, Inc. as part of contract fulfilment (Art. 6 Para. 1 letter b GDPR).
    All companies indicated are based in the USA andcertified under the US-European data privacy agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.
  • With your consent, Facebook Pixel provides data to Facebook, Inc. (for more information see „Other Cookies“).

All companies indicated are based in the USA andcertified under the US-European data privacy agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

Websites and associated data processing

Provision of the website and creation of log files

Description and scope of data processing

Every time our website is opened, our system records automated data and information about the computer system of the accessing computer.

The following data is collected here:

  • Information about the browser type and the version used
  • Language and version of the browser software
  • User’s operating system and interface
  • User’s IP address
  • Date and time of access and time zone difference from Greenwich Mean Time (GMT)The amount of data transmitted
  • Websites from which the user’s system reached our internet pages
  • Websites which are opened by the user’s system via our website
  • Access status/HTTP status code

The data is also stored in the log files of our system.

Legal basis for data processing

The legal basis for the temporary storage of data and log files is the legitimate interest of Bike Citizens as per Art. 6 Para. 1 letter f GDPR.

Purpose of data processing

Temporary storage of the IP address by the system is necessary to facilitate delivery of the website to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session.

Data is saved in log files to ensure full functionality of the website. The data also helps us optimise the website and to guarantee the security of our information technology  systems. There is no evaluation of the data for marketing purposes in this regard.

For these purposes, our legitimate interest in data processing is in accordance with Art. 6 Para. 1 letter f GDPR.

Duration of storage

The data is immediately anonymised or deleted.

Where data is saved in log files, this is carried out after 90 days. Data is not stored beyond this in a form which allows identification of the person affected.

Recipients

This data is processed via our server infrastructure service provider.

Use of cookies

Definition of cookies

Cookies are small text files which are stored in your browser. These are downloaded to your browser the first time you visit our website. When you visit the website again with the same device or browser, the cookie and the information saved there are either sent back to the relevant website which created them (first party cookie) or to another website to which it belongs (third party cookie). This is how the system recognises that the website was opened by the browser in question and uses this status to change how content is displayed. Cookies “remember”, for example, your preferences, tell you how to use a page and also partly individually adapt the offers shown.

Functionally necessary cookies

We use cookies for the purpose of communicating messages and provision of the services you desire. The data processing activities resulting from the use of cookies are based on our legitimate interest in provision of a fully functioning website and the services you desire (Art. 6 Para. 1 letter f GDPR, § 96 Para. 3 TKG).

Other cookies

In addition, based on our legitimate interest, we use cookies for purposes of analysis which helps us improve our website and our services (Art. 6 Para. 1 letter f GDPR, § 96 Para. 3 TKG). Here, the IP address is anonymised using abbreviation, which excludes any establishment of a direct relationship to the person. These cookies are not places when the browser setting “do not track” is active.

Besides that, if you have given your consent, the Facebook Pixel will be implemented on this website (also see „interest based advertising“)

Here you will also have the option to prevent the functionality of the cookies.


Matomo

 

Facebook


After your approval, Facebook Pixel is also integrated on this website (see point “Interest-based advertising”).

Your cookies settings on this website

If you would like to limit or completely block cookies, you can change the settings in your browser. Cookies already stored can be deleted at any time. If cookies are de-activated for our website, it is possible that all functions of the website may not be usable to their full extent.

You will find the process for managing and deleting cookies in your browser’s help function. You will find more detailed information about this process at the following links:

Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Chrome: https://support.google.com/chrome/answer/114836?hl=en&ref_topic=7437824

Safari: https://support.apple.com/en-gb/guide/safari/sfri35610/mac

Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Opera: https://help.opera.com/en/latest/web-preferences/

Interest based advertising

With your consent this webiste and connected websites (getfinn.com) uses the Facebook Pixel of Facebook, Inc. („Facebook“). This Facebook Pixel connects the website directly to the Facebook Servers at the moment of your website visit.

During this connection, the Facebook Pixel sends – when acitvated – technical traffic data, together with the Facebook cookie, the Pixel ID, the URL of the visited page and occasionally, the information on clicked buttons.
Facebook Pixel serves for analytial purposes that helps us optimise our website and our offer. It also helps to provide our users with advertisement that fits their interests.

More information on the collection and the processing of data by Facebook as well as your rights and privacy protection are available in the privacy policy of Facebook: https://www.facebook.com/about/privacy/. You can change the settings on advertising analysis of Facebook here: https://www.facebook.com/settings/?tab=ads#_=_

Comment function at getfinn.com

Purpose

You have the option of leaving comments on getfinn.com. For this purpose, Bike Citizens collects and processes name, email address and comment. Alternatively, you can log into the app with your user account to enter this data.

Legal basis

Your data is processed based on your consent (Art. 6 Para. 1 letter a GDPR). You have the right to withdraw your consent at any time, free of charge (information about legal remedies and contact data below). After unsubscribing, your data will continue to be processed based on the legitimate interests with regard to purposes of documentation (Art. 6 Para. 1 letter f GDPR).

Saving and deletion

Fundamentally, your data will be saved until revoked and thereafter for a period of two years, unless deletion is prevented by a statutory storage period, and we do not need the data in an individual case to defend or assert legal claims.

Recipients

Your data is processed via our server infrastructure service provider and our email provider.

Online shop

Purpose

Bike Citizens collects and processes the data provided when ordering products such as name, delivery/collection and invoicing address, shopping basket, order content, invoice data, payment data and so on, which facilitates purchase of our products.

Legal basis

Your data must be processed for conclusion and fulfilment of online purchase contracts (Art. 6 Para. 1 letter b GDPR) as well fulfilment of statutory storage obligations (Art, 6 Para. 1 letter c GDPR).

Saving and deletion

Fundamentally, your data will be saved until you unsubscribe and thereafter for a period of two years, unless deletion is prevented by a statutory storage period, and we do not need the data in an individual case to defend or assert legal claims.

Data regarding individual orders and transactions will be stored in accordance with the statutory storage obligations and always for a period of seven years.

Recipients

The data is processed via our server infrastructure service provider and our email provider.

Data is not passed on to any third parties, with the exception of a transfer of payment information to the processing bank institute / payment service provider for purposes of booking the purchase price, to the transport company/shipping company we engage for delivering the goods, as well as our tax advisors for fulfilment of our statutory tax  obligations.

Contact questions using forms, email or telephone

Purpose

If you contact us via the contact form, email, or by telephone, in each case we collect and process your name, contact data, the issue you have raised with us and any data which you give us by uploading or attaching documents. The purpose of data processing is the response to your contact question.

Legal basis

The data is processed based on the legitimate interest of Bike Citizens in communication with websites and app users (art. 6 Para. 1 letter f GDPR).

Saving and deletion

Bike Citizens deletes or anonymises your personal data once the achieving the purposes for which it was collected and processed are no longer required, and where there are no other statutory obligations for continued storage. Obligations for proof and storage arise, in particular from company, share and tax law as well as money laundering regulations. In addition, Bike Citizens stores that personal data which is required for any assertion, resistance or defense of legal claims and their implementation in official or legal proceedings. This storage is carried out until expiry of the relevant applicable period of limitation or conclusion of the legally applicable process.

Recipients

The data is processed via our server infrastructure service provider and our email provider.