Last updated: 20-09-2022
Our Company operates https://refresh-collection.com. This page informs you of our policies regarding the collection, use and disclosure of Personal Data we receive from users of the Site. We use your Personal Data only for providing and improving the Site and providing you with information about REFRESH products and possibly other services from our company. By using the Site, you agree to the collection and use of information in accordance with this policy.
Name and Address of the Controller
You can reach our Data Protection Officer at the address of Boost Group AG (see imprint of the Boost Group), or by sending an email to firstname.lastname@example.org.
Information Collection And Use
While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to your name ("Personal Data").
Like many site operators, we collect information that your browser sends whenever you visit our Site ("Log Data").
This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.
In addition, we may use third party services such as Google Analytics that collect, monitor and analyze this.
Period for which Personal Data is retained.
We retain your personal data for a maximum of 30 days, to provide you with the services needed. The relevant data is routinely deleted on expiry of this period. Finally, the retention period is also based on statutory limitation periods.
We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send or by contacting us.
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.
Cookies allow us to provide you, the user, with more user-friendly services that would not be possible without the cookie setting. Using a cookie makes it possible to personalize the information and offers on our website in order to meet user interests. Cookies enable us to recognize the users of our website and, thereby, make it easier for them to use the site.
For example, "session cookies" may be used to identify your previous visits to individual pages of our website. These cookies are automatically deleted after you leave our site.
The data processed by technically necessary cookies is required for the above-mentioned purposes of protecting our legitimate interests pursuant to Art. 6 of the GDPR.
Still other types of cookies are used to statistically record use of our website and to evaluate it in order to improve our services for you. These cookies enable us to automatically recognize that you have previously visited our site, should you happen to return. They are automatically deleted after a defined period of time.
The legal basis for setting these cookies, which are not technically necessary for the operation of the website, is your consent pursuant to Art. 6 of GDPR. You can withdraw your consent at any time by deleting the cookies in your browser. However, if you do not accept cookies, you may not be able to use some portions of our Site. Please note that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to withdrawal.
We have integrated the Google Analytics component (with anonymization function) into this website. Google Analytics is a web analysis service for the collection, compilation and analysis of data about the behaviour of visitors to websites. A web analysis service collects information such as data about the website from which you came to our site ("referrer"), which subpages of the website were accessed or how often and for how long a subpage was viewed. The purpose of the Google Analytics component is to analyse the flow of visitors to our website.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").
The Controller uses the addition "gat._anonymizeIp" for web analysis using Google Analytics. By means of this extension, the IP address of your internet connection will be shortened and anonymized by Google if access to our webpages is from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The Processing is essentially carried out by Google.
Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our website, to provide other services related to the use of our website, etc.
Google may also use the data for any of its own purposes, such as Profiling, and link it to other data about you, such as search history, any personal Google accounts, usage data from other devices and any other data that Google may possess about you.
Your data will therefore also be transferred to the USA and stored there. Under certain circumstances, US authorities may also gain disproportionate access to your data in contravention of European data protection law.
The legal basis for the use of Google Analytics is your Consent pursuant to Art. 6(1)(a) As is always the case with Consent, you can withdraw it at any time with future effect.
Google Analytics sets a cookie on your information technology system. Cookies have been generally explained above but, in this case, the cookie that Google Analytics sets enables Google to analyse your use of our website. Each time you access one of the individual pages of this site, the internet browser on your information technology system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of Personal Data, such as your IP address, which Google uses in multiple ways, including its use to track the origin of visitors, to monitor clicks and subsequently to enable commission calculations.
The cookie is used to store Personal Data, such as the time of access, the location from which access originated and the frequency of your visits to our website. Each time you visit our website, this Personal Data, including the IP address of the internet connection you are using, is transmitted to Google in the United States of America. This Personal Data is stored by Google in the United States of America. Google may disclose this Personal Data collected in this technical process to Third Parties.
As described above, you can prevent our website from setting cookies at any time by adjusting the settings of the utilized internet browser and thus permanently block the setting of cookies. Such a setting of the internet browser would also prevent Google from setting a cookie on your information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
User Terms: http://google.com/analytics/terms/de.html
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or Profiling.
To provide you with the best possible service and to promote our business, we may transfer certain data internally or to selected Third Parties. There may also be a specific legal or statutory obligation that requires us to disclose your Personal Data to Third parties.
The parties to which we may disclose your information include:
- other affiliates or subsidiaries of companies in the Boost group of companies, e.g., to provide basic technology to support the services we provide;
- our service providers, e.g., for managing or hosting services and/or enabling technology for the services we provide;
- our business partners, to the extent you have purchased or expressed interest in a product or service from such business partner, interacted with such business partner, or otherwise consented to the disclosure of your Personal Data to such business partner;
- cooperating partners or organizations, for example, to provide usage information to companies that provide you access to our services, if you access our products through such companies;
- a buyer or successor in interest in a sale or other corporate transaction involving part or all of our business;
- other parties, e.g., as needed for external audits, compliance, risk management, corporate development and/or corporate governance matters; or government entities and government agencies, as required by applicable law.
- Google (in case of Google Analytics).
Whenever we share Personal Data internally or with Third Parties in other countries, we will implement appropriate safeguards in accordance with applicable data protection laws, including, where applicable, the EU Standard Contractual Clauses when transferring data to countries outside the European Union or the European Economic Area. As required by applicable law, Third Parties must use appropriate safeguards to protect Personal Data and may only access Personal Data as needed to perform their respective tasks.
- you have given your express consent to this;
- the disclosure is necessary to safeguard our legitimate interests (e.g. data transfer within the group of companies) or to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data;
- in the event that there is a legal obligation to pass it on, and;
- this is legally permissible and necessary for the processing of contractual relationships with you.
The security of your Personal Data is important to us, but please remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We also use appropriate technical and organizational security measures to protect your Personal Data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by Third Parties. Our security measures are continuously improving to keep pace with technological developments.
While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Data Subject Rights
As a Data Subject, you are afforded the rights listed below, which you may assert against us at any time:
- Right of appeal
You have the right to lodge a complaint with the supervisory authority of your usual place of residence or place of work or our registered office, should you be of the opinion that the Processing of Personal Data concerning you violates the applicable legislation.
- Right to confirmation
You have the right to request confirmation from us at any time concerning our Processing of your Personal Data.
- Right to information
You also have the right to obtain information from us at any time and free of charge about the Personal Data that we retain about you.
- Right to rectification
You have the right to demand the immediate correction of any inaccuracies in your Personal Data. Furthermore, you have the right to request the completion of incomplete Personal Data - including by means of a supplementary declaration - taking the purposes of the Processing into account.
- Right to erasure (right to be forgotten).
Under Art. 17 GDPR, you may also request that your Personal Data be erased without undue delay.
- Right to restrict Processing
You are entitled to request restriction of Processing in case of specific conditions:
- Right to data portability
You have the right to receive any Personal Data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, pursuant to the relevant legislation.
- Right of objection
Furthermore, you have the right, at any time and for reasons arising from your particular situation, to object to the Processing of Personal Data relating to you. This also applies to Profiling based on these provisions. If we process Personal Data for the purpose of direct marketing, you have the right to object at any time to the processing of Personal Data for such purpose. This also applies to Profiling, insofar as it is associated with such direct marketing.
- Automated decisions in individual cases including Profiling
You also have the right not to be subject to a decision-based solely on automated processing - including Profiling.
- Right to withdraw Consent under data protection law.
To clarify, we explicitly reiterate that you have the right to withdraw your Consent to the Processing of Personal Data at any time.
If you would like to exercise one of the rights to which you are entitled, please contact our Data Protection Officer referred to in this policy.