Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that You are visiting our website and thank You for Your interest. In the following, we inform You about the handling of Your personal data when using our website. Personal data means any data by which You can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is SUNRIDE GmbH, Marktplatz 12, 96242 Sonnefeld, Germany, Tel.: +49 15167552071, email: hello@sunride.eu. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries addressed to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in Your browser line.
2) Data Collection When Visiting Our Website
When using our website for informational purposes only, that is, if You do not register or otherwise transmit information to us, we collect only such data as Your browser transmits to our server, so called “server log files”. When You access our website, we collect the following data, which is technically necessary for us to display the website to You:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source or reference from which You reached the page
- Browser used
- Operating system used
- IP address used, where applicable in anonymized form
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
3) Cookies
In order to make the visit to our website attractive and to enable the use of certain functions, we use cookies, that is, small text files which are stored on Your terminal device. Some of these cookies are automatically deleted after the browser is closed, so called “session cookies”. Other cookies remain on Your terminal device for a longer period and enable the storage of page settings, so called “persistent cookies”.
Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event consent has been given, or in accordance with Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website and a customer friendly and effective design of the website visit.
You can set Your browser so that You are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that if cookies are not accepted, the functionality of our website may be restricted.
4) Contacting Us
When contacting us, for example via contact form or email, personal data is processed exclusively for the purpose of handling and responding to Your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to Your request pursuant to Art. 6 para. 1 lit. f GDPR. If Your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when the circumstances indicate that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Comment Function
Within the scope of the comment function on this website, in addition to Your comment, information on the time of creation of the comment and the commentator name chosen by You will be stored and published on this website. Furthermore, Your IP address will be stored for security reasons in order to enable attribution to the author in the event of unlawful comments. Your email address will be stored in order to contact You if a third party should object to Your published content as being unlawful.
6) Use of Customer Data for Direct Advertising
6.1 Subscription to Our Email Newsletter
If You subscribe to our email newsletter, we will regularly send You information about our offers. The only mandatory information required for sending the newsletter is Your email address. The provision of further data is voluntary and is used in order to address You personally. For the sending of the newsletter, we use the so called double opt in procedure, which ensures that You will only receive newsletters once You have expressly confirmed Your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, You give us Your consent to use Your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store Your IP address entered by the Internet Service Provider as well as the date and time of registration in order to be able to trace any possible misuse of Your email address at a later date. The data collected by us when You register for the newsletter will be used strictly for a specific purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, Your email address will be deleted from our newsletter distribution list without undue delay, unless You have expressly consented to further use of Your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform You in this declaration.
6.2 Sending the Email Newsletter to Existing Customers
If You have provided us with Your email address when purchasing goods or services, we reserve the right to regularly send You offers by email for goods or services from our range that are similar to those already purchased. For this purpose, we are not required to obtain separate consent from You pursuant to Section 7 para. 3 of the German Unfair Competition Act (UWG). In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR. If You have initially objected to the use of Your email address for this purpose, no emails will be sent by us. You are entitled to object to the use of Your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. For this, You will incur only transmission costs according to the basic rates. Upon receipt of Your objection, the use of Your email address for advertising purposes will cease without undue delay.
For the sending of our newsletter, we use the service provider CleverReach GmbH & Co. KG, CRASH Building, SchafjĂĽckenweg 2, 26180 Rastede. Data processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR. Further information on data processing by CleverReach GmbH & Co. KG can be found at: https://www.cleverreach.com/de-de/datenschutz/
7) Data Processing for Order Handling
7.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
Insofar as we owe You updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data transmitted by You when placing the order, namely name, address and email address, in order to inform You personally about upcoming updates within the legally prescribed period via an appropriate communication channel, such as by post or email, in the context of our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of notifications concerning updates owed by us and will be processed by us for this purpose only to the extent necessary for the respective information.
For the processing of Your order, we also cooperate with the following service providers, who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
7.2 Use of Payment Service Providers
Amazon Pay
If You select the payment method “Amazon Pay”, payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L 1855 Luxembourg, hereinafter “Amazon Payments”, to whom we pass on the information communicated by You during the ordering process together with the information about Your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. Insofar as cookies are set when using Amazon Pay, this is done exclusively on the basis of Your express consent pursuant to Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time via the cookie consent tool implemented on the website. Further information on the data protection provisions of Amazon Payments can be found at: https://pay.amazon.de/help/82974
Klarna
If a Klarna payment service is selected, payment processing is carried out via Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. In order to enable payment processing, Your personal data, first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address, as well as data related to the order, such as invoice amount, items and delivery method, will be transmitted to Klarna for the purpose of identity and creditworthiness checks, provided that You have expressly consented to this during the ordering process in accordance with Art. 6 para. 1 lit. a GDPR. You can see to which credit agencies Your data may be forwarded here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values, so called score values. Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical statistical procedure. Address data is included in the calculation of the score values, among other things, but not exclusively. You may revoke Your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may remain entitled to process Your personal data if this is necessary for contractual payment processing.
Your personal data will be processed in accordance with the applicable data protection provisions and in accordance with the information in Klarna’s privacy policy: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
PayPal
In the event of payment via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, purchase on account or installment payment via PayPal, we pass on Your payment data to PayPal Europe S.a.r.l. et Cie, S.C.A., 22 24 Boulevard Royal, L 2449 Luxembourg, as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for certain payment methods. For this purpose, Your payment data may be transmitted to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining Your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non payment for the purpose of deciding on the provision of the respective payment method. Further information under data protection law can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
8) Web Analysis Services
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, with which the use of websites can be analyzed.
When Google Analytics 4 is used, cookies are used by default. Cookies are text files stored on Your terminal device which enable analysis of Your use of a website. The information collected by cookies about Your use of the website, including the IP address transmitted by Your terminal device and shortened by the last digits, is generally transmitted to a Google server and stored and processed there. In this context, information may also be transferred to servers of Google LLC located in the USA.
When using Google Analytics 4, the IP address transmitted by Your terminal device when You use the website is collected and processed by default only in anonymized form, so that direct personal reference to the information collected is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by Your terminal device within member states of the European Union or in other contracting states to the Agreement on the European Economic Area by the last digits.
On our behalf, Google uses this and other information to evaluate Your use of the website, to compile reports on Your website activities and usage behavior, and to provide us with other services related to website use and internet use. The shortened IP address transmitted by Your terminal device within the scope of Google Analytics 4 is not merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for 2 months and then deleted.
Through a special function, the so called “demographic features”, Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest based advertising and with the inclusion of third party information. This makes it possible to determine and distinguish user groups of the website for the purpose of target group optimized alignment of marketing measures. However, data collected via the “demographic features” cannot be assigned to a specific person and therefore not to You personally. This data is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by You for the use of the website, takes place only if You have given us Your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without Your consent, Google Analytics 4 will not be used during Your use of the website. You can revoke any consent given at any time with effect for the future by deactivating this service via the cookie consent tool provided on the website.
We have concluded a data processing agreement with Google. In order to ensure compliance with the European level of data protection in the event data is transferred from the EU or EEA to the USA, Google relies on the standard contractual clauses of the European Commission.
Further information can be found at:
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Meta Pixel, formerly Facebook Pixel
This website uses the “Meta Pixel” service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, subject to Your express consent. Meta Pixel enables the tracking of user behavior after users have been redirected to our website by clicking on an advertisement. This allows the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and enables the optimization of future advertising measures.
The data collected is anonymous to us and therefore does not permit any conclusions to be drawn as to the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta may use the data for its own advertising purposes in accordance with the Meta Privacy Policy. This may enable Meta to place advertisements on Meta pages and outside of Meta. We have no final influence on this data processing.
In particular, the use of Meta Pixel may involve the processing of the following data: pages accessed, information about the browser used, information about the terminal device used, referrer URL, IP address, as well as pixel and cookie data. Insofar as so called events or conversions are recorded via Meta Pixel, further usage related information may also be processed.
The use of Meta Pixel and the storage and reading of information on Your terminal device take place exclusively on the basis of Your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke any consent granted at any time with effect for the future by changing the relevant settings in our cookie consent tool.
In connection with the use of Meta Pixel, it cannot be ruled out that personal data may also be transmitted to Meta Platforms, Inc. in the USA. Further information on data processing by Meta can be found at:
https://www.facebook.com/privacy/policy/
Further information on Meta’s business tools can be found at:
https://www.facebook.com/legal/technology_terms
9) Site Functionalities
Google Web Fonts
This website uses so called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, for the uniform display of fonts. When a page is accessed, Your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser You use must establish a connection to Google’s servers. In this context, personal data may also be transmitted to servers of Google LLC in the USA. In this way, Google obtains knowledge that our website has been accessed via Your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts takes place only if You have given us Your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke any consent granted at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website. If Your browser does not support web fonts, a standard font from Your computer will be used.
Further information on Google Web Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://www.google.com/policies/privacy/
10) Rights of the Data Subject
10.1 The applicable data protection law grants You the following rights of data subjects vis Ă vis the controller with regard to the processing of Your personal data:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to be informed pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR
- Right to lodge a complaint pursuant to Art. 77 GDPR
10.2 Right to Object
If we process Your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests, You have the right to object to this processing at any time with effect for the future on grounds relating to Your particular situation.
If You exercise Your right to object, we will stop processing the data concerned. Further processing remains reserved, however, if we can demonstrate compelling legitimate grounds for the processing which override Your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If Your personal data is processed by us for the purpose of direct advertising, You have the right to object at any time to the processing of personal data concerning You for the purpose of such advertising. If You exercise Your right to object, we will stop processing the data concerned for direct advertising purposes.
11) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and, where applicable, also by the respective statutory retention period, for example retention periods under commercial and tax law.
When personal data is processed on the basis of express consent pursuant to Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject revokes their consent.
If statutory retention periods exist for data processed within the framework of legal or quasi legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and provided that we no longer have any legitimate interest in further storage.
When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
When personal data is processed for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information contained in this declaration concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.