Privacy.
Data protection information of the website windlounge.de, the Jibe Wear UG (limited liability)
(Version 3; as of 08.12.2021)
Since May 25, 2018, the requirements of the EU General Data Protection Regulation (hereinafter: GDPR) have applied throughout Europe.
In the following, we would like to inform you about the processing of personal data carried out by Jibe Wear UG (haftungsbeschränkt) on the website windlounge.de in accordance with this new regulation (compare Article 13 DSGVO).
Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the email address given under point two (2.).
The following data protection information informs you about the type and scope of the processing of so-called personal data by Jibe Wear UG (haftungsbeschränkt). Personal data is information that can be directly or indirectly assigned to your person or can be assigned.
Data processing by Jibe Wear UG (haftungsbeschränkt) can essentially be divided into three categories:
For the purpose of contract processing, all data required for the execution of a contract with Jibe Wear UG (haftungsbeschränkt) will be processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent necessary in each case.
We do not use the data collected from you in the course of processing the contract for any purpose other than processing the contract.
When calling up websites of Jibe Wear UG (haftungsbeschränkt), various information is exchanged between your end device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimize our website.
In accordance with the provisions of the GDPR, you have various rights that you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes.
If you have any questions about our data protection information, you are welcome to contact our company data protection officer at any time. You will find the contact details below.
2. name and contact details of the controller and the company data protection officer.
This data protection information applies to data processing by Jibe Wear UG (haftungsbeschränkt, Dammstraße 4, 04416 Markkleeberg, Germany ("responsible party") and to the following websites: windlounge.de, jibewear.de, MyWindsurfGadget.de.
The company data protection officer of Jibe Wear UG (haftungsbeschränkt) can be contacted at the above-mentioned address.
Address, in the name of Christopher Jansen / Management / Data Protection or at christopher@jibewear.de or +4915168809182.
3. purposes of data processing, legal basis and legitimate interests pursued by Jibe Wear UG (limited liability) or a third party, as well as categories of recipients.
3.1 Calling up our website / application
When you access our website/application, the browser used on your end device automatically sends information to the server of our website/application and temporarily stores it in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until automatic deletion:
the IP address of the requesting Internet-enabled device,
the date and time of access,
the name and URL of the retrieved file,
the website/application from which the access was made (referrer URL), the browser you use and, if applicable, the operating system of your Internet-enabled device as well as the name of your access provider.
The legal basis for the processing of the IP address is Article 6(1)(f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we are not able to draw any direct conclusions about your identity from the collected data and that we will not do so.
The IP address of your terminal device and the other data listed above are used by us for the following purposes:
Ensure smooth connection establishment,
Ensuring a comfortable use of our website,
Evaluation of system security and stability.
The data is stored for a period of 6 months and then automatically deleted. Furthermore, we may use so-called cookies, tracking tools, targeting methods and social media plug-ins for our website. The exact procedures involved and how your data is used for this purpose are explained in more detail below in section 3.4.
If you have consented to geolocation in your browser or operating system or other settings on your terminal device, we may use this function to offer you individual services based on your current location. We process your location data processed in this way exclusively for this function. If you end the use, the data will be deleted.
3.2 Conclusion, execution or termination of a contract
3.2.1 Data processing upon conclusion of the contract
The object of activity of Jibe Wear UG (haftungsbeschränkt) is the distance selling of goods and services and the serial production of the goods to be offered. In this context, we process the data required for the conclusion, execution or termination of a contract with you. This includes:
First name, last name
Invoice and delivery address
E-mail address, if applicable
Invoice and payment data
Date of birth, if applicable
Telephone number, if applicable
The legal basis for this is Article 6(1)(b) DSGVO, i.e. you provide us with the data on the basis of the contractual relationship between you and us. We are also obliged to process your e-mail address and/or telephone number due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation (Article 6(1)(c) DSGVO). Insofar as we do not use your contact data for advertising purposes (see 3.3 below), we store the data collected for the purpose of contract processing until the expiry of the statutory or possible contractual warranty and guarantee rights. After expiration of this period, we keep the information of the contractual relationship required by commercial and tax law for the legally determined periods on the basis of Art. 6 para. 1 lit. c) in blocked form. For this period (regularly six or ten years after the end of the year in which the contract was concluded), the data is processed again solely in the event of an audit by the tax authorities.
Furthermore, the following data processing is required for the execution of the purchase contract:
If you have selected a payment method other than prepayment, we will pass on the necessary payment data to a payment service provider commissioned by us. We will pass on information about your delivery address to a logistics company commissioned by us for the purpose of processing the purchase contract. If you agree, we will transmit your e-mail address and, if applicable, your telephone number to the logistics company commissioned by us in order to ensure that the delivery of the goods is carried out according to your wishes. The logistics company will contact you in advance of the delivery to inform you of the delivery time or to coordinate details of the delivery with you. The data will be transmitted solely for this purpose and deleted after delivery.
3.2.2 Identity, creditworthiness and transmission to credit agencies
Where necessary, we verify your identity by using information from service providers.
The legal basis for this is Article 6 (1) (b) and (f) DSGVO. The authorization for this results from the protection of your identity and the prevention of fraud attempts at our expense. The circumstance and the result of our inquiry will be added to your customer account or your guest account for the duration of the contractual relationship.
In the course of the ordering process, we also check your creditworthiness in order to be able to show you only the payment methods that can be used by you. For this purpose, we transmit the following types of data to so-called credit agencies cooperating with us: Name, address, date of birth. The legal basis for this is the following declaration of consent by you within the meaning of Article 6(1)(a) DSGVO:
I hereby consent to the verification of my creditworthiness by Jibe Wear UG (haftungsbeschränkt). I am aware that the check is already carried out at the beginning of the ordering process and that I can revoke my consent at any time.
You can revoke your consent at any time with effect for the future by sending a declaration to the address given under "Contact". The revocation of consent does not affect the lawfulness of the personal data processed until the revocation. If you do not want to give the above consent, please give us before you initiate the completion of your purchase a corresponding note or use the option of guest ordering. In this case, however, we can only offer you payment methods that are not associated with a credit risk for Jibe Wear UG (haftungsbeschränkt). The circumstance and the result of our request will be added to your customer account for the duration of the contractual relationship.
If you have already made a purchase from us, the data we have stored about you may be supplemented by so-called score values. Scoring is understood to be the creation of a forecast about future events based on collected information and experience from the past. Such processing is based on Article 6(1)(f) DSGVO. The creation of such forecasts is to be considered a legitimate interest within the meaning of the aforementioned provision. Based on the data stored about your person, an allocation to statistical groups of persons with similar entries in the past is made. The underlying method used is a well-founded mathematical-statistical method for forecasting risk probabilities, which has been tried and tested in practice for a long time.
In the event of a delay in payment, we will transmit the necessary data to a company commissioned to enforce the claim if the other legal requirements are met. The legal bases for this are both Article 6(1)(b) and Article 6(1)(f) DSGVO. The assertion of a contractual claim is considered a legitimate interest within the meaning of the second-mentioned provision. We also transmit information about the delay in payment or a possible bad debt to credit agencies cooperating with us if the other legal requirements are met. The legal basis for this is Article 6 (1) (f) DSGVO. The legitimate interest required here results from our interest and the interest of third parties in reducing contractual risks for future contracts.
3.3 Data processing for advertising purposes
The following statements relate to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6(1)(f) to be conceivable in principle and a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is necessary for the advertising approach. At Jibe Wear UG (haftungsbeschränkt), we also follow the principle of deleting data for commercial use after 6 months. Please refer to section 3.3.3 for information on how to proceed in the event of an objection.
3.3.1 Advertising purposes of Jibe Wear UG (hauftungsbeschränkt) and third parties
If you have concluded a contract with us, we will treat you as an existing customer. In this case, we do not process your postal contact data outside the existence of a specific consent further than is necessary for the provision of our service. (Dispatch of shipping instructions, invoice, information about the order and shipment of goods via DHL or Deutsche Post).
3.3.2 Advertising in line with interests
We refrain from interest-based and personalized advertising.
3.3.3 Right of objection
You can object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact details mentioned under 2.
If you object, the contact address concerned will be blocked from further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time of advertisements and does not mean that we will not implement your objection. Thank you for your understanding.
3.3.4 Newsletter dispatch
On our website we offer you the possibility to register for our newsletter. To ensure that no mistakes are made when entering the email address, we use the so-called double opt-in process: After you have entered your email address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your email address be added to our distribution list. At this point, the processing of your electronic contact data is based solely on your consent (Article 6(1)(a) DSGVO). You can revoke your consent thus declared at any time with effect for the future. To do so, simply send a short note by email to the email address given under 2. or click on the "unsubscribe" button at the end of each newsletter.
3.4 Online presence and website optimization
3.4.1 Cookies - General information
We reserve the right to use so-called cookies on our website. If these cookies are personal data, they are used on the basis of Article 6 (1) letter f DSGVO. Our interest in optimizing our website is to be regarded as legitimate in the sense of the aforementioned provision. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your customer account. These are automatically deleted after you leave our site. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made, so that you do not have to enter them again.
If you have a customer account with Jibe Wear UG (haftungsbeschränkt) and are logged in or activate the "stay logged in" function, the information stored in cookies will be added to your customer account.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. The storage period of cookies depends on their purpose and is not the same for all.
3.4.2 Shopify
Our website is hosted by Shopify. Shopify places non-personalized cookies to collect website visit statistics and provide them to us.
At this point, we would like to point out once again that we are not able to draw any direct conclusions about your identity from the data collected, nor will we be able to do so.
3.5 Customer account
In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data in a password-protected customer account. The creation of the customer account is voluntary and is based on your consent within the meaning of Article 6 (1) (a) DSGVO. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.
In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This serves together with your e-mail address for access to your customer account. Please treat your personal access data confidentially and in particular do not make them accessible to unauthorized third parties. We cannot accept any liability for misused passwords, unless we are responsible for the misuse. Please note that even after leaving our website, you will automatically remain logged in, unless you actively log out. You have the option to delete your customer account at any time. Please note, however, that this does not simultaneously delete the data that can be viewed in the customer account.
3.6 Contact form
We offer visitors to our website the opportunity to contact us via a contact form. We use the information you provide via the contact form (mandatory information is marked with an asterisk) exclusively for the purpose of processing your request. The legal basis for this is both your consent within the meaning of Article 6(1)(a) DSGVO and Article 6(1)(f) DSGVO. The proper processing of your concerns is considered a legitimate interest within the meaning of the DSGVO. If your contact is made in connection with a contractual relationship between you and us, Article 6(1)(b) DSGVO, i.e. this contractual relationship, is also the legal basis for data processing. You can revoke your consent to the use of data explained above at any time with effect for the future free of charge by sending a short message to the contact details given under 1. The lawfulness of the processing based on your consent until the time of your revocation is not affected by this. However, we would like to point out that from the time of a possible revocation, processing of your request is no longer possible. Outside of the existence of a revocation, your data related to the request will be deleted after your request has been processed. How we proceed in the event of the exercise of data subject rights is explained below.
3.7 Overview of the possible recipients of your data
3.7.1 DHL & Deutsche Post AG, DHL-Express, UPS, TNT, FedEx
Customer Names, Email Addresses, Phone Numbers, Physical Addresses, Geolocations, IP Addresses and Browser User Agents, Shopify Account Physical Addresses and Phone Numbers.
3.7.2 Shopify
Customer names, email addresses, phone numbers, physical addresses, geo-locations, IP addresses, and browser user agents.
Shopify account Physical addresses and phone numbers
3.7.3 LexOffice
Customer names, email addresses, phone numbers, physical addresses, geo-locations, IP addresses, and browser user agents.
3.7.4 Monday.com
Customer Names, Email Addresses, Phone Numbers, Physical Addresses
3.7.5 Z-Fins
Full name and address for custom fin delivery.
3.7.6 Liquid Sports
Full name and address for delivery of FutureFly items.
3.7.5 Jumingo
Full name and address for the delivery of goods. Decisive is the destination and package size. For express delivery abroad and/or longer > 200cm, we use Jumingo for shipping by default.
3.7.8 Cargoboard
Full name, address and phone number for delivery of bulky goods and oversized deliveries (> 2m length).
3.7.9 Finish Fins
Full name and address for custom fin delivery.
3.7.10 Point 7 / AV Boards
Full name and address for delivery of Point7 items or AV Boards.
3.7.11 Equipe Trading B.V.
Full name and address for direct delivery of items from the range of Unifiber, PLKB, CrossKites, Select Fins, SkyWatch.
3.7.12 NoerStick
Full name and address for direct delivery carried out by NoerStick.
3.7.13 FutureFly Boards
Transmission of the customer file (name and board) for inventory reconciliation. Transmission of personal data also takes place for special consulting requests.
3.7.14 GELExpress
Full name, address and phone number for delivery of bulky goods and oversized deliveries (> 2m length).
4. recipients outside the EU
With the exception of the processing described in section 3, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing operations described in section 3 result in the transfer of data to the servers of the providers of tracking and targeting technologies commissioned by us. These servers are located in the USA and Canada. The data transfer takes place in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.
5. your rights
5.1 Overview
In addition to the right to revoke the consent you have given to us, you have the following additional rights if the respective legal requirements are met:
Right to information about your personal data stored by us pursuant to Art. 15 DSGVO; in particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the origin of your data, if it has not been collected directly from you.
Right to rectification of inaccurate data or completion of correct data according to Art. 16 DSGVO.
Right to delete your data stored by us in accordance with Art. 17 DSGVO insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed.
Right to restrict the processing of your data pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure; the controller no longer requires the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
Right to data portability according to Art. 20 DSGVO, i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another responsible party.
Right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
5.2 Right of objection
Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to for reasons arising from the particular situation of the data subject.
The above general right to object applies to all processing purposes described in this Privacy Notice that are processed on the basis of Article 6(1)(f) of the GDPR. Unlike the specific right of objection directed at data processing for advertising purposes (compare XXX above), under the GDPR we are only obliged to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). In addition, you have the option of contacting the supervisory authority responsible for Jibe Wear UG (haftungsbeschränkt) or the data protection officer.
If you assert one or more of the data subject rights listed above against us, we store this circumstance in anonymized form on the basis of Article 6 (1) (f) DSGVO. The fact that we can also prove proper compliance with your request in cases of doubt is to be regarded as a legitimate interest within the meaning of this provision. Deletion of this anonymized information, i.e. information that can no longer be linked to your person, does not take place.
The privacy policy of Jibe Wear UG (haftungsbeschränkt) is based on a sample of the Bundesverband E-Commerce und Versandhandel Deutschland e.V., Friedrichstr. 60, 10117 Berlin.