In order to secure the ordering process against fraudulent and/or abusive behaviour, we automatically check during the ordering process whether there are any anomalies in the specific order for the contract. For this reason, the 1) data for the execution of the contract (e.g. object of purchase, name, postal address, email address, delivery address, payment method and bank information) and 2) usage data of the website visits of this online shop (e.g. details on the beginning, end and scope of the visited websites as well as click paths) together with a cookie and/or a visitor ID, each of which may contain anonymous data about the end devices used when visiting the websites (e.g. the screen resolution or the operating system version) and which has some probability of being recognised via the end devices on future visits, are processed by this ROSE BIKES online shop with the purpose of enabling your user account to be used in the future. The ROSE BIKES online shop processes this data for the purpose of managing your user account, the websites that you visit and the services that you use on the website at [https://www. rosebikes.com] against fraud (e.g. through the takeover of user accounts, the automated creation of fake user accounts by bots, the use of stolen identities or payment data or incorrect ratings for services), for product optimisation and further development, or against misuse (e.g. through attacks on the IT infrastructure, "man-in-the-middle" attacks, brute force attacks or the use of malware) on the basis of legitimate interest pursuant to Art. 6 Section 1 f) of the EU GDPR in conjunction with Recital 47. The ROSE BIKES online shop also transmits the previously named data to the Device Transaction Pool (DTP) and stores it there. The purpose of the DTP is to protect the member companies participating in the DTP from abuse and from bad debts due to fraud, which can occur while providing commercial, remunerated telecommunications services or telemedia services to contract partners who are unwilling or unable to pay, especially due to fraud. In the case of a request from a member company to the DTP, only the results of the suspicion check on the request are transmitted to this member company. Positive data can also be used, meaning, for example, that an end device used to make frequent and punctual payments can be rated positively. Results data for individual member companies, beyond the specific case of an particular use, are not stored. The DTP is operated by infoscore Profile Tracking GmbH (IPT), Kaistraße 7, 40221 Düsseldorf, Germany as the data processing company of the member company. The data is automatically deleted after five months. The ROSE BIKES online shop has contracted infoscore Tracking Solutions GmbH, Kaistraße 7, 40221 Düsseldorf, Germany with conducting the fraud prevention and abuse detection measures in accordance with Art. 28 of the EU GDPR. Recipients of the data are exclusively contractual partners of the ROSE BIKES online shop. In this case, the recipients are infoscore Tracking Solutions GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; infoscore Profile Tracking GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; infoscore Tracking Technology GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; as well as data centre service providers that are tasked with storing the data. If fraud or misuse is suspected, a ROSE BIKES employee examines the results and the evidence on which they are based. If a contract is declined, this will be communicated to you and also, if requested, the principal reasons for this decision. You then have the opportunity to make your case by contacting info@rosebikes.com, whereupon a ROSE BIKES employee will reexamine the decision.

You have the right at any time, within the framework of the applicable legal provisions and at no extra cost, to receive information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data.

You have the right to have data that is automatically processed on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to the restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data held by us, we will usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.


• If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.


• If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.


• If you have lodged an objection pursuant to Art. 21 (1) DSGVO, then an assessment must be conducted weighing your interests versus our own. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.


• If you have restricted the processing of your personal data, those data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

With our free newsletter you can stay-up-to-date on our latest offers, customer events, prize draws and trade shows.
We use the ‘double opt-in’ process for newsletter subscription, which means that we will only send you a newsletter, if you click the confirmation link in the confirmation email to confirm your subscription. Please note that we need your email address for subscription. You will only receive a personalised newsletter, if you share your personal data when registering as a new customer. We only ask for your title and name to personally address you in the newsletter. You can unsubscribe at any time. You can find a respective unsubscribe link in every newsletter email. Alternatively, you can get in touch with us using the provided contact data.
By confirming your newsletter subscription, you also agree to the analysis of your newsletter usage behaviour. For the analysis of such usage data, our emails have an embedded tracking pixel to track open rates. A tracking pixel is an image file measuring one pixel by one pixel and creating a link to our website to allow us to analyse data on the usage of the newsletter. Therefore, we use the data entered for newsletter subscription as well as the tracking pixels that are assigned to your email address and linked to a unique ID. This data is combined with data about your use of our website. To make sure the newsletter is displayed correctly, we collect information about the type of device you use to open the newsletter. Based on the links you click and the open rates of the newsletter emails, we can determine which topics you are interested in. The data collected serves to create personal user profiles. In this way, we try to continuously improve our newsletter and to provide you with more individual topics about ROSE Bikes.
The information collected is stored by the newsletter provider Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany (“Inxmail”) on their server in Germany. The tracking mechanism is not supported when images are disabled in your emails by default. However in this case, the newsletter is not displayed correctly and you may not be able to use all functions. If you manually click on ‘display images’, tracking is supported, unless you have objected to the analysis of usage data. The legal ground for processing personal data is your consent in accordance with Art. 6 Section 1 a) of the EU GDPR. You may object to the analysis of your newsletter usage data in writing at any time. Simply use the contact information provided.

For our newsletter, we use software from epoq internet services GmbH, Am Rüppurer Schloß 1, 76199 Karlsruhe, Germany („epoq“). With the software from epoq, we are able to offer you targeted and individual product recommendations within the scope of our newsletter. The product recommendations are displayed on the basis of an analysis of previous and current click and purchase behaviour. Provided the information collected is personally identifiable, it can be processed in accordance with Art. 6 Section 1 f) of the EU GDPR based on our justified interest in displaying personalized advertising and conducting market analysis. You can object to this advertisement at any time in the newsletter by clicking on the opt-out link or by sending us a message. As a result of the opt-out, individual product recommendations will no longer be displayed.

Once you’ve submitted your order, you will receive an email asking you to write a product review (please note that only reviews related to the product can be published). You will receive this email regardless of whether you have subscribed to our newsletter or not. Please note that these emails comply strictly with the legal regulations of the Protection Against Unfair Competition Act (UC). We will use the provided email address to promote own products you’ve already bought from us. By writing a review or leaving a comment, the data is transferred back to us and stored. We may use your email address to assign a product review, contact you for verification or to react to complaints.
The product review is published with your first name and the first letter of your last name. By submitting a review and/or a comment you grant ROSE BIKES GmbH a non-exclusive, royalty-free, perpetual and irrevocable right to use, reproduce, modify, adapt, translate, distribute, publish, create derivative works from and publicly display such review and/or comment on- or offline. This means, for example, that ROSE BIKES may publish the comment and use the review for advertising/marketing purposes. Please note that all product reviews are analysed to make sure we can offer you new and even better products.

Thank you for your interest in our survey. As part of the survey, you have the opportunity to answer questions about our products and services. Your answers will be evaluated by us in order to optimise the quality of the services provided by Rose Bikes GmbH. We cannot guarantee complete anonymity of the survey due to the possibility of linking the individual answers with each other or, for example, with your IP address, which is processed when you call up the website with the survey. This means that a connection to your person cannot be completely ruled out. However, we would like to assure you that we do not actively make that kind of connection or plan on doing so. Your details will always be processed confidentially and in accordance with the provisions of the German Data Protection Regulation (DS-GVO/GDPR) and the German Federal Data Protection Act (BDSG). If you have any further questions about the protection of your personal data, you can contact us at any time using the contact details provided.

I. Processing of your personal data within the framework of our survey
We use Microsoft Forms to conduct the survey. Microsoft Forms is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and its agent in the European Union: Microsoft Ireland Operations, Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P52) (hereinafter: called Microsoft).

The survey results are evaluated on the basis of the anonymous responses. Nevertheless, we cannot rule out the possibility that the linking of the personal data listed below will enable a connection to your person:

• IP address
• Day and time you tried to reach us (optional)
• Your age
• Your personal data, which you voluntarily provide in the context of the question (optional information)
• Microsoft account details (only if you are logged in with a Microsoft account while completing the survey form. To minimise the risk of establishing a personal connection, we recommend that you log out of your Microsoft account before completing the survey questionnaire.)

We would like to ask you not to enter any personal data in the free text field of our survey. Personal data of the participants entered in the free text field will not be taken into account by us within the framework of the evaluation.

For more information on how Microsoft processes your personal data, click here:
https://privacy.microsoft.com/de-DE/privacystatement#mainnoticetoendusersmodule

II. Purpose and legal basis for data processing
1. Your personal data will be processed for the following purposes:
• Our entrepreneurial interest to optimise the quality of our services and products
• Our entrepreneurial interest in determining the individual needs as well as the general satisfaction of our customers with our services and products
• For market research

2. Legal basis for the data processing:
Processing on the basis of consent. Your participation in our survey is voluntary. Your data will only be evaluated if you give your express consent in advance. The legal basis in this case is Art. 6 para. 1 sentence 1 lit. a in conjunction with Art. 7 GDPR. For the possible transfer of your personal data to other Microsoft locations in third countries (including the USA), we use Art. 49 (1) lit. a GDPR).

III. Recipients of your personal data
Within our company, only those departments and employees will have access to your personal data who need it to fulfil the stated purposes.
An active transfer of your personal data to a third country or to an international organisation does not take place and is not planned. Please note, however, that Microsoft may process your personal data through the Forms application in countries outside the EU/EEA, such as the USA. In particular, this means that it cannot be ruled out that third parties (such as the responsible regulatory authorities in the USA) could have unrestricted access to your personal data. For the data processing in the USA, there is no cooperation agreement with the European Commission pursuant to Art. 45 GDPR. We have concluded an order processing agreement with Microsoft in accordance with Art. 28 GDPR and appropriate safeguards in the form of EU standard data protection clauses, Art. 46 (2) lit. c GDPR.

IV. Duration of the storage of your personal data
We will delete your personal data as soon as the stated purposes for storing it no longer apply. This will be done at the latest with the final evaluation of the results from our survey. Furthermore, we will delete your personal data if you revoke your previously given consent.