Privacy Policy

DATA PROTECTION

Cookies management

Content:

I. Persons responsible for the purposes of data protection laws

II. Data Protection Officer

III. General information about data processing

IV. Automatic data processing when calling the website www.butterfly.tt

V. Use of cookies

VI. Processing of personal data via the contact form

VII. Processing of personal data when setting up a customer account

VIII. Processing of personal data when establishing a customer account during the order and completion of the order

IX. Processing of personal data when completing an order as a guest (without setting up a customer account)

X. Newsletter

XI. Processing of personal data via e-mail

XII. Processing of personal data via telephone

XIII. Processing of personal data via fax

XIV. Processing of personal data in the context of the application procedure

XV. Rights of the person concerned

Data processing by us

When using the website www.butterfly.tt, its functionalities, your contact and a request, you provide us with personal data that we process for the purpose of processing your requests. These data are treated strictly strictly bound by our privacy laws.

I. Person responsible in the sense of the data protection laws is:

Tamasu Butterfly Europe GmbH

Kommunikationsstr. 8th

47807 Krefeld

Germany

Telephone number: + 49-2151-935670

E-Mail: cs[at]butterfly.tt

Represented by the CEO:

Takako Osawa, Taisei Imamura

II. Data Protection Officer

Statutory Data Protection Officer:

We have appointed a data protection officer for our company.

RDP Röhl Dehm & Partner Attorneys at Law mbB

Moritzplatz 6

86150 Augsburg

dsb@butterfly.tt

III. General information about data processing

Scope of processing of personal data in general

Basically, we process personal data only to the extent necessary for the provision of a functioning website and our content and services.

Legal basis for the processing of personal data:

The respective legal basis for the processing of personal data arises from the General Data Protection Regulation, which is set out in Article 6 para. 1 lit. a) - f) EU-GDPR.

With the consent of the data subject, Art. 6 para. 1 lit. a) EU-GDPR Legal basis.

Art. 6 para. 1 lit. b) EU-GDPR is the legal basis for the processing of personal data necessary for the performance of a contract of which the data subject is a party or processing operations in the case of pre-contractual measures.

If processing to fulfill a legal obligation of the person responsible is required, Art. 6 para. 1 lit. c) EU-GDPR Legal basis.

If vital interests of the data subject or another natural person require processing, Art. 6 para. 1 lit. d) EU-GDPR Legal basis.

If the processing is necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the controller, the legal basis is Article 6 (1) lit. e) EU-GDPR.

If the processing is necessary to safeguard the legitimate interests of our company and the interests, freedoms or fundamental rights of the data subject do not prevail, the legal basis is Art. 6 (1) lit. f) EU-GDPR.

For the conclusion of a contract or the provision of personal data required by statutory retention requirements

When you contact us, we collect personal information. These data are stored by us partly due to legal regulations, partly they are necessary for the conclusion of a contract. If you want to contract with us, you must provide us with your information so that we can provide our services to you. In addition, statutory retention requirements arise for us from a tax and commercial point of view, which we must comply with. Otherwise we may u.U. our service to you does not yield.

Before providing your personal data, you are welcome to inform your respective contact person in our company whether we need your data to conclude a contract and / or our statutory storage obligations and what the consequences are if you do not provide us with the data Make available.

Data erasure and storage duration

We store your personal data as long as this is necessary to fulfill the purpose or if storage is required by law, Art. 6 (1) lit. c) EU-GDPR.

If the purpose for storing personal data ceased to exist, this data will be deleted or limited in processing after 6 months, unless there is a need for further storage of the data for a contract conclusion or performance.

Any further storage will only take place if this has been provided for by the European or national legislator.

SSL or TLS encryption

On the whole website, we use SSL or TLS encryption for security reasons and to protect your confidential data.

Through this encryption, confidential data, such as requests or orders you submit to us, can not be viewed by third parties.

You can detect an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and a green lock symbol is displayed in the address bar.

IV. Automatic data processing when calling the website www.butterfly.tt

IP address

1. Description and scope of data processing

When this page is called, requests are sent to the server, which must answer it. For this, your IP address must be collected and processed in order to be able to answer the corresponding server requests.

2. Legal basis for data processing

The legal basis for the processing of this data is Art. 6 (1) lit. f) EU-GDPR.

3. Purpose of the data processing

The purpose of the processing of your IP address is the functionality of the website and the provision of the technical retrieval option.

4. Legitimate interest

The legitimate interest in the temporary storage of the IP address is that the functionality and provision of the technical retrieval ability of the website without them is not possible.

5. Duration of storage

The data will be deleted again as soon as the further storage is no longer necessary due to the need for an error.

This is the case when the data for providing the web page is collected when the retrieval process is completed.

6. Recipients of personal data

The IP address is determined by the following hosting provider on behalf of on the basis of an order processing agreement gem. Art. 28 (2) (4) EU-GDPR processes:

domain factory GmbH

Oscar Messter-Str. 33

85737 Ismaning

Germany

hosting

1. Description and scope of data processing

We use the services of our hosting service provider for the technical realization of the website and its availability as well as its technical maintenance.

This includes the provision of storage and database services as well as their maintenance and care.

2. Legal basis for data processing

The legal basis for the processing of this data is Art. 6 (1) lit. f) EU-GDPR.

3. Purpose of the data processing

The purpose of the processing is the realization of the online offer as well as the detection of malfunctioning and break-in attempts.

4. Legitimate interest

The legitimate interest in commissioning the hosting service provider is the external technical competence and the provision of a functional and uncompromised technical web site environment.

5. Recipients of personal data and data categories:

The following hosting provider is commissioned on the basis of a contract processing agreement. Art. 28 para. 2, para. 4 EU-GDPR acting for us:

domain factory GmbH

Oscar Messter-Str. 33

85737 Ismaning

Germany

Affected data categories are:

user data

communications data

contact details

contract data

Server log files

1. Description and scope of data processing

The IP addresses collected when accessing this page are also stored in so-called server log files in order to detect technical faults and / or manipulation and break-in attempts in the server structure and to make them recoverable.

In addition, the hosting provider of this website automatically collects, stores and processes information in so-called server log files, which are automatically transmitted by your browser.

This information is:

Browser type and browser version

used operating system

Referrer URL

Host name of the accessing computer

Time of the server request

However, this information will not be merged with other data sources.

2. Legal basis for data processing

The legal basis for the processing of this data is Art. 6 (1) lit. f) GDPR.

3. Purpose of the data processing

The purpose of processing your IP address and the above information is to detect malfunctioning and intrusion attempts.

4. Legitimate interest

The legitimate interest in processing the IP address and the above information is to provide a functional and uncompromised technical web page environment.

5. Duration of storage

The data will be deleted within 7 days.

6. Recipients of personal data

The IP address and the above information will be provided by the following hosting provider on behalf of a job processing agreement pursuant to Art. Art. 28 (2) (4) EU-GDPR processes:

domain factory GmbH

Oscar Messter-Str. 33

85737 Ismaning

Germany

V. Use of cookies

1. Description and scope of data processing

The site www.butterfly.tt uses so-called "cookies". Cookies are text files that are stored in the memory and / or on a data carrier of your device used for site visits and that are processed by your Internet browser according to the settings stored there. We use a cookie to determine when you log in to your customer account. In addition, we use a shopping cart cookie in order to recognize and edit the products that you have put into the shopping cart as part of the ordering process.

Content of these cookies is:

SID - Checks if the user has logged in. Checks if a shopping cart has been created for the user and which articles have been deposited there

2. Legal basis for data processing

The legal basis for processing is Art. 6 para. 1 lit. b) and Art. 6 para. 1 lit. f) EU-GDPR.

3. Purpose of the data processing

These cookies contain technical information for the provision of website functionality as part of the order and customer account process. This enables the technical realization of the purchasing and customer account process.

4. Legitimate interest pursuant to Art. 6 para. 1 lit. f) EU-GDPR

Our legitimate interest lies in providing a technical environment that maps an online shopping process to our customers and users. The cookies used contain only technical data and product information which represents the completion of an online shopping by our customers on the initiative of our customers.

5. Duration of storage as well as possibilities of objection and elimination

The cookies used on this site are so-called "session cookies". These will automatically be deleted from the browser cache / memory at the end of your website visit and / or when you close your browser, provided that you have activated this functionality in your browser.

Please check the settings of your internet browser (eg Firefox, Internet Explorer, Edge, Chrome, Opera, Safari). Your internet browser also gives you the option to regulate the treatment of cookies or disable them completely. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all features of the website to the full.

Google Analytics
1. Description and scope of data processing
This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your device and allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. The "User ID" function for barrier-free tracking is deactivated.
Google uses this information to evaluate the use of the website on behalf of the operator of this website. Furthermore, this information is used to generate reports on the website activities and to provide the website operator with additional services related to website activity and internet usage.
Google Analytics will not be activated until you have given your consent to the web analytics service at the beginning of the page view. If you do not agree, there will be no exchange of data with Google or any other tracking via our website.

2. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. a) DS-GMO.
3. Purpose of the data processing
The purpose of the data processing is the web analysis and the provision of services by Google to the website operator.
4. Duration of storage
The information we submit to Google, including the data associated with cookies, will be automatically deleted after 14 months. Once the retention period has been reached, the deletion will be done automatically once a month.
5. Opposition and elimination possibilities
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the link below (http: // tools.google.com/dlpage/gaoptout?hl=en) to download and install the available browser plugin.
Data collection by Google Analytics can be prevented by clicking on the following link. This sets an opt-out cookie, which will prevent the collection of your data during the visit of the website in the future.

Google Analytics has been extended by the code "anonymizeIP" on this website.
This extension truncates IP addresses before transferring them to the United States to ensure anonymization. For more information about Google Analytics Terms of Service and Privacy, please visit http://www.google.com/analytics/terms/en.html
or https://www.google.com/intl/en/policies/.

6. Recipient of personal data
The IP address and usage data will be processed by Google on behalf of a commissioned processing agreement. Art. 28 para. 2, para. 3, para. 4 DS-GVO.
Google has joined the US privacy shield, this can be verified at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

7. Reports on demographics
This website uses the Google Analytics demographics reports, which use Google's interest-based advertising data and third-party visitor data (such as age, gender, and interests).
This data is not attributable to any particular person and can be disabled at any time through the ad settings in your Google Account, or you can generally prohibit Google Analytics data collection, as described in point 5 above.

1. Description and scope of data processing
We use a "two-click" solution to enable embedded "YouTube" videos. This means that by default, no data is sent to this service, but only a disabled image is displayed.
Only after activating the YouTube functionality do you consent to the exchange of data with YouTube. Then our website uses content and services provided by Google's YouTube site.
Site.youtube.com is operated by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland.
We use YouTube exclusively to streamline our online offering and provide you with a better, more engaging surfing experience.
When integrating this service, it is necessary that your IP address be transmitted to the operator of the service. Because without your IP address, the content can not be sent to your browser.
Through the services, cookies can also be set on the device of the user. These cookies may contain, among other things, technical information about your browser and operating system used, referring web pages, the visit time as well as other information for the use of our online offer.
Revocation:
You can revoke your consent at any time with future effect by changing the privacy settings and disabling the videos. This also updates the consent setting of cookies.
For more information about how to handle user information, please refer to the YouTube Privacy Policy at https://www.google.com/intl/en/policies/privacy.
2. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. a) and f) DS-GMO.
3. Purpose of the data processing
The purpose of data processing is to provide an attractive presentation of our online offer.
4. Duration of storage
The period of storage of the data on YouTube results from the YouTube privacy policy: https://www.google.de/intl/de/policies/privacy.
The duration of the storage of cookies depends on your browser settings. You can change these at any time and / or change your settings made with us.
5. Recipients of personal data
The IP address and usage data are processed by Google.
Google is a member of the Privacy Shield Agreement https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

VI. Processing of personal data via the contact form

1. Description and scope of data processing

On our website there is a contact form, which serves only the electronic contact recording. We process your personal data only insofar as you inform us when you contact us.

For inquiries via the contact form the following data will be processed:

Surname*

E-mail address*

phone

Comment*

The fields marked with an "*" symbol are mandatory fields, without which no request can be sent to us via this contact form.

Please enter the telephone number only if you wish us to contact you by telephone.

The indication of the name serves the personal address in the context of the processing of your inquiry.

When entering the data into the forms, no data will be transmitted to us, this will only happen after pressing the "Send" button.

At the time of sending the message, the following data is also processed:

Date and time of the request

2. Legal basis for data processing

The legal basis for the processing of personal data for processing and answering your inquiries is Art. 6 para. 1 lit. f) EU-GDPR.

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data via the contact form is solely for the purpose of establishing contact and enabling the informational approach of the customer by the company on the initiative of the customer.

Depending on the intention and content of your request, the purpose may also be the initiation and / or performance of a contractual relationship, in which case the purpose is also to maintain the customer relationship.

4. Legitimate interest

The legitimate interest in data processing lies in the possibility to process your request and to be able to respond to you according to your request. The collected data will be processed on the basis of a request from you. This processing is also in your interest to respond to your request as you expect.

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your data entered in the contact form, this is the case when the conversation with the user has ended.

In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

VII. Processing of personal data when setting up a customer account

1. Description and scope of data processing

You can create a customer account on our website to facilitate the ordering process. This account helps you to make the ordering process more efficient for you by automating the insertion of delivery data and managing your orders. For this purpose, we offer you a registration process in which you provide us with the following data:

First given name*

Surname*

company

E-mail address*

Date of birth

Password*

Confirm Password*

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data during the registration process is the purpose of the customer account, with which you can manage your orders and your contract data with ease.

4. Duration of storage

Your personal data will be deleted if you give us the order to delete your customer account. This does not apply if the data are subject to further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). In this case, processing will be restricted until the expiry of the retention period.

5. Recipient of personal data

The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

VIII. Processing of personal data when setting up a customer account during the order and completion of the order

1. Description and scope of data processing

First given name*

Surname*

company

E-mail address*

Address*

City*

Post Code*

Country*

phone

fax

Password*

Confirm Password*

Payment Information

If you are already a registered customer, only the following data for the billing address will be requested during the ordering process:

First given name*

Surname*

company

Address*

City*

Post Code*

Country*

phone

fax

Payment Information

If you would like to send the order to an address other than the billing address, the following data for the shipping address will also be requested:

First given name*

Surname*

company

Address*

City*

Post Code*

Country*

phone

fax

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data during the registration process is the purpose of the customer account, with which you can manage your orders and your contract data with ease.

The processing of personal data in the context of the order is the execution of the order, the payment, the delivery of the product and the possibility of any complaints, as well as the maintenance and maintenance of the customer relationship.

4. Duration of storage

5. Recipient of personal data

The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

Not applicable

IX. Processing of personal data upon completion of an order as a guest (without setting up a customer account)

1. Description and scope of data processing

On our website is an online shop functionality, which allows you to order our products online.

Here you can initiate the ordering of products on our shop, which we then deliver to you as part of our shipping process.

You can use the shop functions as a guest or as a registered customer after creating a customer account.

For the creation of a customer account, the information listed above under VII.

If you want to place the order as a guest, we charge:

First given name*

Surname*

company

E-mail address*

Address*

City*

Post Code*

Country*

phone

fax

Payment Information

If you would like to send the order to an address other than the billing address, the following data for the shipping address will also be requested:

First given name*

Surname*

company

Address*

City*

Post Code*

Country*

phone

fax

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

4. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). In this case, processing will be restricted until the expiry of the retention period.

5. Recipient of personal data

The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

Not applicable

The data will be processed by the following shipping service provider on the basis of an order processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

DHL Paket GmbH

Lane 10

53113 Bonn

The data is processed by the following payment service providers:

PayPal (Europe) S.à r.l. et Cie, S.C.A.

22-24 Boulevard Royal

L-2449 Luxembourg

EVO Payments International GmbH

Elsa-Brändström-Straße 10-12

50668 Cologne

X. Newsletter

1. Description and scope of data processing

We offer a newsletter with promotional information for our customers and interested parties. Signing up to our newsletter service uses the double-opt-in procedure to verify your registration.

Here you sign up via the newsletter form and receive an e-mail with a link after pressing the login button, which you can press to confirm and conclude the newsletter registration process. If you press this confirmation link, you will receive regular mailings with the content specifically described when you sign up for the newsletter. This registration process is also the process for obtaining your competition consent to send the newsletter within the meaning of the UWG. You can revoke this competitive consent at any time with effect for the future by pressing the unsubscribe link contained in each newsletter.

Our newsletter contains information about our offers, services and us.

We log every registration for our newsletter, so that we can provide proof of the registration in accordance with the statutory requirements.

The login and confirmation time as well as your IP address are saved.

At the same time, your data will also be logged and saved at our shipping service provider.

To register for our newsletter, it is sufficient if you provide your e-mail address in the registration form. However, we kindly ask you to give us a name so that we can personally address you in the newsletter.

For legally compliant administration of your consent, the data transmitted by you during the registration will be processed in our CRM system.

2. Legal basis for data processing

The legal basis for processing your personal data for sending the newsletter is Art. 6 para. 1 lit. f) EU-GDPR.

The legal basis for the processing and logging of the application procedure is Art. 6 para. 1 lit. f) EU-GDPR.

3. Purpose of the data processing

The purpose of data processing is solely to send out our newsletter and to document your registration in a legally secure manner, as well as to maintain the customer relationship.

4. Legitimate interest

Our legitimate interest lies in the customer- and user-friendly advertising approach for the purpose of direct advertising (recital 47 to the EU-GDPR) and the legally compliant logging of the registration process.

5. Duration of storage

The data provided by you when registering for the newsletter will be deleted by us at the latest 6 months after you have unsubscribed from the newsletter.

6. Recipient of personal data

Sendinblue S.a.r.l

55 rue d'Amsterdam, 75008 Paris

Our shipping service provider works for us on behalf of and on the basis of a contract processing agreement in accordance with Art. 28 para. 2, 4 EU-GDPR.

Our shipping service provider will not use your information to write to you.

XI. Processing of personal data via e-mail

1. Description and scope of data processing

For requests by e-mail, personal data will be processed depending on the content of your e-mail:

This is in any case your e-mail address, date and time as well as the content of the message. Too, depending on the content of your e-mail, for example, the following personal data are processed:

First name Last Name

phone number

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

On the basis of the user's express request via e-mail, the legal basis for the processing of the data is Art. 6 para. 1 lit. f) EU-GDPR. If the establishment of contact by e-mail also aims to conclude and / or execute a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data via your e-mail request is solely for the purpose of contacting and facilitating the customer's informational approach to the customer at the initiative of the customer.

Purpose may also be the initiation and / or performance of a contractual relationship, depending on the intention and content of your request.

4. Legitimate interest

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your email, this is the case when the conversation with the user ends.

In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

XII. Processing of personal data via telephone

1. Description and scope of data processing

For telephone inquiries, depending on the content of the call, personal data is processed:

This may also include the following personal information, depending on the information you provide during the call:

First name Last Name

phone number

customer number

payment data

contract data

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

On the basis of the user's express request via telephone, the legal basis for the processing of data is Art. 6 para. 1 lit. f) EU-GDPR. If contacting by telephone also aims to conclude and / or execute a contract, additional legal basis for processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data by telephone is solely for the purpose of establishing contact and enabling the customer to informally address the customer at the initiative of the customer.

Depending on the intention and content of your request, the purpose may also be the initiation and / or performance of a contractual relationship, as well as the maintenance of the customer relationship.

4. Legitimate interest

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your email, this is the case when the conversation with the user ends.

In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

XIII. Processing of personal data via fax

1. Description and scope of data processing

For requests by fax, personal data will be processed, depending on the content of your message:

This is in any case your fax number, date and time as well as the content of the message. Additionally, depending on the content of your message, e.g. the following personal data are processed:

First name Last Name

phone number

customer number

payment data

contract data

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

Due to the express request of the user via fax, the legal basis for the processing of the data is Art. 6 para. 1 lit. f) EU-GDPR. If the establishment of contact by fax also aims to conclude and / or execute a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data about your inquiry by fax is solely for the purpose of contacting and facilitating the informational approach of the customer by the company at the initiative of the customer.

Purpose may also be the initiation and / or performance of a contractual relationship, depending on the intention and content of your request.

4. Legitimate interest

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For the fax request this is the case when the respective conversation with the user has ended.

In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

XIV. Processing of personal data in the context of the application procedure

1. Description and scope of data processing

In job advertisements or as part of our website we regularly inform you about current vacancies. You have the opportunity to apply for these positions. You can send us this application data either by post or by e-mail.

Data that you submit to us during the application process can be:

- Name, address and contact details

- CV including all other information

- Personal cover letter

- qualifications

- Interests

If you send us your data by e-mail, we also process your e-mail address, date and time as well as the content of the message. In addition, depending on the content of your email, e.g. the following personal data are processed:

First name Last Name

phone number

The data will be used exclusively in the context of the application process to decide on the staffing.

2. Legal basis for data processing

The legal basis for processing the data in the application process is Art. 6 para. 1 lit. b) DS-GVO, § 26 Abs. 1 BDSG.

Insofar as you provide us with special categories of personal data in the context of the application process, such as If you report any existing disability or health information that is needed to assess your applicability to a particular job, you will be processed in accordance with your informed consent in accordance with Art. 9 (2) lit. b), lit. h) DS-GVO, § 26 Abs.3 BDSG.

3. Purpose of the data processing

The processing of personal data in the context of the application process is solely for the purpose of personnel planning and the establishment of employment relationships.

4. Legitimate interest

The legitimate interest in data processing lies in the need to fill vacancies with qualified candidates as part of sound human resources planning and management.

5. Duration of storage

The data in case of rejection of an application will be deleted within 6 months after cancellation. Data from successful applications are subject to the retention obligations resulting from labor law and social legislation, the AO and the HGB.

6. Recipients of personal data

The address data are processed by no service provider on behalf.

XV. Rights of the person concerned

If personal data is processed by you, you are the data subject in the sense of the General Data Protection Regulation. Therefore, you have the following rights to the person responsible.

To exercise your rights to us as the person in charge, please contact us at the following e-mail address: dsb@butterfly.tt

1. Right to information - Art. 15 EU-GDPR

You have the right to ask the person in charge to confirm that you are processing personal data in question.

If such processing is available, you have a right to information about such personal data and the following information:

• the purposes for which the personal data are processed;

• the categories of personal data being processed;

• the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed;

• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining the duration of the storage;

• the right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

• the existence of a right of appeal to a supervisory authority;

• all available information on the origin of the data, if the personal data are not collected from the data subject;

• the existence of automated decision-making including profiling under Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information on the logic involved and the implications and intended effects of such processing on the affected party Person.

In addition, you have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can also request the appropriate guarantees in accordance with. Art. 46 DS-BER in connection with the transmission of information.

2. Right to rectification - Art. 16 DS-BER

You have the right to immediate correction and / or completion of the data concerning you, provided that the personal data processed is incorrect or incomplete.

3. Right to cancellation - Art. 17 DS-BER

Deletion obligations:

You have the right to demand the immediate deletion of your personal data at any time, provided that one of the following reasons is met:

• the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;

• You have revoked your consent to the processing in accordance with. Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) based on DS-BER and there is no other legal basis for processing;

• In accordance with Art. 21 (1), you have filed an objection against the processing and there are no legitimate reasons for the processing, or you objected to the processing pursuant to Art. 21 (2) EU-GDPR;

• the personal data relating to you have been processed unlawfully;

• the deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law, to which the controller is subject;

• the personal data relating to you were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.

exceptions:

There is no right to erasure if processing is required

to exercise the right to freedom of expression and information;

to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority which has been entrusted to the controller ;

for reasons of public interest in the field of public health as referred to in Article 9 (2) (h) and (i) and Article 9 (3);

for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes under Article 89

Paragraph 1 of the GDPR, in so far as the law referred to in subparagraph (a) is likely to render impossible or seriously prejudice the achievement of the objectives of that processing; or

to assert, exercise or defend legal claims.

4. Right to restriction of processing - Article 18 of the GDPR

You have the right under the following conditions to demand the restriction of your personal data:

• if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of the personal information;

• if the processing is illegal and you refuse to delete the personal data and instead request the restriction of the use of the personal data;

• if the controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims, or

• if you object to the processing pursuant to Art. 21 para. 1 EU-GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data may only be used, with the exception of storage, for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or be processed for reasons of important public interest of the Union or of a Member State.

If the restriction on processing has been restricted due to the above conditions, you will be notified by the person responsible before the restriction is lifted.

5. Right to information - Art. 19 DS-BER

If you have claimed any of your rights to rectification, erasure or restriction of processing, we shall be obliged to notify all recipients of the personal data you have disclosed about the correction, erasure or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

In addition, you have the right to be informed about these recipients.

6. Right to Data Portability - Art. 20 DS-BER

You have the right to receive personally identifiable information relating to you provided to the Responsible in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

a) the processing on a consent acc. Art. 6 para. 1 lit. a) EU-GDPR or Art. 9 para. 2 lit. a) EU-GDPR or on a contract in accordance with. Art. 6 para. 1 lit. b) EU-GDPR is based and

b) the processing is done by automated means.

In exercising this right to data transferability, you also have the right to obtain that personal data concerning you are transmitted directly from one controller to another party, as far as technically feasible.

7. Right of objection - Art. 21 EU-GDPR

You have the right at any time, for reasons arising from your particular situation, to prevent the processing of personal data relating to you which, on the basis of Article 6 (1) lit. e) or f) EU-GDPR takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for assertion, exercise or defense of legal claims.

If personal data is processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of Information Society Services, of exercising your right to opt-out by means of automated procedures that use technical specifications.

8. Right to revoke the data protection consent declaration

You have the right to withdraw your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Right to complain to a supervisory authority - Art. 77 DS-BER

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its habitual residence, place of work or place of alleged infringement, if you believe that the processing of the Your personal data violates the General Data Protection Regulation.

The supervisory authority to which you are complaining must inform you as the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DS-BER.

Processing of personally identifiable data when contacting customers and suppliers and issuing business cards

1. Description and scope of data processing

We process personal data of the contact persons and employees involved within the scope of establishing contact, issuing business cards or carrying out the business and customer relationship. In most cases, these are the contact details of the internal contact persons provided to us by our customers.

This data is entered into our CRM and processed in the Outlook address book.

This data can be:

Surname, forename

Company

Email address

Telephone number, mobile number

Position in the company

2. Legal basis for data processing and legitimate interest

The legal basis for the processing is Art. 6(1)(b) GDPR, insofar as the data is processed for the initiation or execution of a contractual relationship.

In addition, the legal basis for employees as contact persons is Art. 6(1)(f) GDPR, as the processing takes place with a legitimate interest.

This legitimate interest results from the fact that the data was handed over to us for the care of contacts and for a subsequent establishment of contact. In addition, the processing of contact data is necessary to maintain a business relationship

3. Purpose of data processing

This data is processed exclusively for the purpose for which the data was provided to us (by handing over the business card, naming the responsible contact person, etc.).

Purposes can be, for example:

When a business card is handed over, the purpose is to establish contact later in order to discuss common business interests.

The purpose of nomination as a contact person is to implement concrete contractual measures.

4. Duration of storage

The data is deleted within 6 months after it is no longer necessary for the purpose of its collection or is not subject to any further legal retention obligations (e.g. 10 years according to the German Fiscal Code (AO), 6 years according to German Commercial Code (HGB)).

5. Recipients of personally identifiable data

The data provided to us for establishing contact will not be disclosed to third parties.

Administrative access to the data within the scope of maintenance and services:

IT service providers and CRM support providers

Our service providers act on our behalf and on the basis of a processing agreement pursuant to Art. 28 (2) - (4) GDPR.

6. Transfer of personal data to a third country

There are no plans to transfer personal data to a third country or to an international organisation.

These privacy notices are updated at regular intervals.

GUME

DRVA ZA REKETE

ODJEĆA

TORBE I FUTROLE

Privacy Policy

DATA PROTECTION