In order to secure the ordering process against fraudulent and/or abusive behaviour, we automatically check during the ordering process whether there are any anomalies in the specific order for the contract. For this reason, the 1) data for the execution of the contract (e.g. object of purchase, name, postal address, email address, delivery address, payment method and bank information) and 2) usage data of the website visits of this online shop (e.g. details on the beginning, end and scope of the visited websites as well as click paths) together with a cookie and/or a visitor ID, each of which may contain anonymous data about the end devices used when visiting the websites (e.g. the screen resolution or the operating system version) and which has some probability of being recognised via the end devices on future visits, are processed by this ROSE BIKES online shop with the purpose of enabling your user account to be used in the future. The ROSE BIKES online shop processes this data for the purpose of managing your user account, the websites that you visit and the services that you use on the website at [https://www. rosebikes.com] against fraud (e.g. through the takeover of user accounts, the automated creation of fake user accounts by bots, the use of stolen identities or payment data or incorrect ratings for services), for product optimisation and further development, or against misuse (e.g. through attacks on the IT infrastructure, "man-in-the-middle" attacks, brute force attacks or the use of malware) on the basis of legitimate interest pursuant to Art. 6 Section 1 f) of the EU GDPR in conjunction with Recital 47. The ROSE BIKES online shop also transmits the previously named data to the Device Transaction Pool (DTP) and stores it there. The purpose of the DTP is to protect the member companies participating in the DTP from abuse and from bad debts due to fraud, which can occur while providing commercial, remunerated telecommunications services or telemedia services to contract partners who are unwilling or unable to pay, especially due to fraud. In the case of a request from a member company to the DTP, only the results of the suspicion check on the request are transmitted to this member company. Positive data can also be used, meaning, for example, that an end device used to make frequent and punctual payments can be rated positively. Results data for individual member companies, beyond the specific case of an particular use, are not stored. The DTP is operated by infoscore Profile Tracking GmbH (IPT), Kaistraße 7, 40221 Düsseldorf, Germany as the data processing company of the member company. The data is automatically deleted after five months. The ROSE BIKES online shop has contracted infoscore Tracking Solutions GmbH, Kaistraße 7, 40221 Düsseldorf, Germany with conducting the fraud prevention and abuse detection measures in accordance with Art. 28 of the EU GDPR. Recipients of the data are exclusively contractual partners of the ROSE BIKES online shop. In this case, the recipients are infoscore Tracking Solutions GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; infoscore Profile Tracking GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; infoscore Tracking Technology GmbH, Kaistraße 7, 40221 Düsseldorf, Germany; as well as data centre service providers that are tasked with storing the data. If fraud or misuse is suspected, a ROSE BIKES employee examines the results and the evidence on which they are based. If a contract is declined, this will be communicated to you and also, if requested, the principal reasons for this decision. You then have the opportunity to make your case by contacting info@rosebikes.com, whereupon a ROSE BIKES employee will reexamine the decision.

You have the right at any time, within the framework of the applicable legal provisions and at no extra cost, to receive information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data.

You have the right to have data that is automatically processed on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to the restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data held by us, we will usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.


• If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.


• If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.


• If you have lodged an objection pursuant to Art. 21 (1) DSGVO, then an assessment must be conducted weighing your interests versus our own. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.


• If you have restricted the processing of your personal data, those data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

With our free newsletter you can stay-up-to-date on our latest offers, customer events, prize draws and trade shows.
We use the ‘double opt-in’ process for newsletter subscription, which means that we will only send you a newsletter, if you click the confirmation link in the confirmation email to confirm your subscription. Please note that we need your email address for subscription. You will only receive a personalised newsletter, if you share your personal data when registering as a new customer. We only ask for your title and name to personally address you in the newsletter. You can unsubscribe at any time. You can find a respective unsubscribe link in every newsletter email. Alternatively, you can get in touch with us using the provided contact data.
By confirming your newsletter subscription, you also agree to the analysis of your newsletter usage behaviour. For the analysis of such usage data, our emails have an embedded tracking pixel to track open rates. A tracking pixel is an image file measuring one pixel by one pixel and creating a link to our website to allow us to analyse data on the usage of the newsletter. Therefore, we use the data entered for newsletter subscription as well as the tracking pixels that are assigned to your email address and linked to a unique ID. This data is combined with data about your use of our website. To make sure the newsletter is displayed correctly, we collect information about the type of device you use to open the newsletter. Based on the links you click and the open rates of the newsletter emails, we can determine which topics you are interested in. The data collected serves to create personal user profiles. In this way, we try to continuously improve our newsletter and to provide you with more individual topics about ROSE Bikes.
The information collected is stored by the newsletter provider Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany (“Inxmail”) on their server in Germany. The tracking mechanism is not supported when images are disabled in your emails by default. However in this case, the newsletter is not displayed correctly and you may not be able to use all functions. If you manually click on ‘display images’, tracking is supported, unless you have objected to the analysis of usage data. The legal ground for processing personal data is your consent in accordance with Art. 6 Section 1 a) of the EU GDPR. You may object to the analysis of your newsletter usage data in writing at any time. Simply use the contact information provided.

For our newsletter, we use software from epoq internet services GmbH, Am Rüppurer Schloß 1, 76199 Karlsruhe, Germany („epoq“). With the software from epoq, we are able to offer you targeted and individual product recommendations within the scope of our newsletter. The product recommendations are displayed on the basis of an analysis of previous and current click and purchase behaviour. Provided the information collected is personally identifiable, it can be processed in accordance with Art. 6 Section 1 f) of the EU GDPR based on our justified interest in displaying personalized advertising and conducting market analysis. You can object to this advertisement at any time in the newsletter by clicking on the opt-out link or by sending us a message. As a result of the opt-out, individual product recommendations will no longer be displayed.

Once you’ve submitted your order, you will receive an email asking you to write a product review (please note that only reviews related to the product can be published). You will receive this email regardless of whether you have subscribed to our newsletter or not. Please note that these emails comply strictly with the legal regulations of the Protection Against Unfair Competition Act (UC). We will use the provided email address to promote own products you’ve already bought from us. By writing a review or leaving a comment, the data is transferred back to us and stored. We may use your email address to assign a product review, contact you for verification or to react to complaints.
The product review is published with your first name and the first letter of your last name. By submitting a review and/or a comment you grant ROSE BIKES GmbH a non-exclusive, royalty-free, perpetual and irrevocable right to use, reproduce, modify, adapt, translate, distribute, publish, create derivative works from and publicly display such review and/or comment on- or offline. This means, for example, that ROSE BIKES may publish the comment and use the review for advertising/marketing purposes. Please note that all product reviews are analysed to make sure we can offer you new and even better products.

ROSE Bikes GmbH
Schersweide 4
46395 Bocholt
Germany

info@rosebikes.com

Management: Erwin Rose, Stefanie Rose, Thorsten Heckrath-Rose.

DataCo GmbH
Dachauer Str. 63
80335 Munich, Germany
Germany

Email: datenschutz@dataguard.de
Phone: +49 (0)89 7400 45840

If you have questions concerning the collection, processing or use of your personal data, or if you want to provide information, correct, block, delete data or revoke consent, please contact: ROSE Bikes GmbH, Data Protection, Schersweide 4, 46395 Bocholt, phone: +49 2871-275533, email: datenschutz@rosebikes.com or simply click on the "Submit Data Subject Request" button below.

1. Scope of processing personal data
We use functionalities of the data protection plug-in „DSR“ of DataCo GmbH, Dachauer Str. 65, 80335, Munich, Bavaria, Germany (hereinafter referred to as: DataCo).

By using the button „Submit Data Subject Request“, all visitors of our website have the opportunity to make use of their data subject rights. To do so, you specify your relationship to our company, which data subject right you wish to exercise, provide further optional information and, if necessary, identify yourself with further characteristics. The data subject request will then be processed by us.

The following personal data will be processed by DataCo:

• First and last name
• Relationship to the controller (employee, customer, interested party, etc.)
• E-mail address
• Further voluntarily communicated personal data

For further information on the processing of data by DataCo, please click here: https://www.dataguard.com/privacy-policy

In addition, to ensure technical functionality, logfiles may be forwarded to DataCo GmbH, which include the following:

• Browser type and version used
• The user’s operation system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user's system made the request

The use of DSR serves to protect the data protection rights of our website visitors. We enable you to make use of your data subject rights and to contact us quickly and easily.

The legal basis for the use of the DSR tool and the processing of corresponding data is your declaration of consent in accordance with art. 6 para. 1 s. 1 lit. a GDPR.

The legal basis for the use of the logfiles is our legitimate interest in ensuring the technical functionality of the tool according to art. 6 para. 1 s. 1 lit. f GDPR.

Data will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

The user has the possibility to revoke the consent to the processing of their personal data or object the processing of logfiles at any time by contacting the data controller by mail or by using the DSR tool.

You have the right to appeal to the supervisory authority/authorities; e.g. to the
North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information
PO Box 20 04 44
40102 Düsseldorf Germany
Phone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de

All notes on the processing of personal data when using the ROSE Bike Alarm App can be found here.