Privacy Policy - Invincible Brands

Information about the processing of your data

In accordance with Art. 12 of the General Data Protection Regulation (hereinafter referred to as the GDPR), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data and about your legal rights in this regard.

We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law.

We recommend that you read this privacy policy from time to time and take a printout or a copy for your documents.

Definitions

In the following, website means all of the controller’s pages at https://www.invinciblebrands.com/;
personal data means any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified, either directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data is therefore, for example, a person’s name, email address and telephone number, but may also include information about preferences, hobbies and memberships;
processing means operations or sets of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction;
pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person;
consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes in a particular case by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Google means Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.

Scope

This privacy policy applies to all pages of https://www.invinciblebrands.com/. It does not cover any linked websites of other providers.

Responsible provider

The following party is responsible for the processing of personal data within the scope of this privacy policy:

Invincible Brands GmbH
Friedrichstr. 79
10117 Berlin
Email: hello@invinciblebrands.com

Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Spirit Legal LLP Rechtsanwälte
Attorney-at-law and data protection officer
Peter Hense

Postal address:

Data protection officer
c/o Invincible Brands GmbH
Friedrichstr. 79
10117 Berlin

Contact via encrypted online form:

Contact data protection officer

Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.

Your rights

You have the following rights with regard to the personal data concerning you that you can assert against us:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to object to processing (Art. 21 GDPR)
right to withdraw your consent (Art. 7(3) GDPR)
right to receive the data in a structured, commonly used, machine-readable format (data portability) and the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR).

You can assert your rights by informing us using the contact details specified above under ‘Responsible provider’ or by contacting the data protection officer designated by us.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

Use of the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:

browser type/browser version
operating system used
language and version of the browser software
hostname of the accessing device
IP address
website from which the request comes
content of the request (specific page)
date and time of the server request
access status/HTTP status code
referrer URL (website visited before)
volume of data transferred
time zone difference from Greenwich Mean Time (GMT).

Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR.

The access data is not used to identify individual users and is not combined with other data sources. The access data is erased when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.

The recording of data for the provision of the website is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing. You may send us your objection using the contact details specified under ‘Responsible provider’ above.

Contacting our company

When contacting our company, e.g. by email or using the contact form on the website, we will process the personal data provided by you so that we can respond to your request.

In order for us to process enquiries submitted via the contact form on the website, it is essential that you provide a name or pseudonym and a valid email address. At the moment when you submit the message to us, the following data will also be processed:

IP address.

The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If it is necessary to provide your data in order to conclude a contract, it may be impossible to conclude or implement a contract or to process the request if the data is not provided.

Processing the personal data from the form allows us alone to process the contact you make with us. Where you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems.

The data will not be transmitted to third parties in this context. The data is only processed in order to process the conversation. As soon as processing is no longer necessary, we erase the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.

Processing and transmission of personal data for contractual purposes

We process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with our company. The legal basis of this results from Art. 6(1) Sentence 1(b) GDPR. If processing the data is necessary in order to conclude a contract, it may be impossible to conclude or implement a contract and/or to end a legal transaction with our company if the data is not provided.

Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or erased, unless we are entitled to retain the data for a longer period and process it as required in the respective context on the basis of a consent granted by you (e.g. consent to the processing of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct marketing) or on the basis of justified interests (e.g. retention for asserting claims).

Your personal data will be passed on if

it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you) (Art. 6(1) Sentence 1(b) GDPR), or
a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are expressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or
there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR), or
there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR), or
we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR), or
the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR), or
this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6(1) Sentence 1(e) GDPR), or
we are authorised or even obliged to pursue overriding legitimate interests (Art. 6(1) Sentence 1(f) GDPR).

Your personal data will not be transmitted to other persons, companies or bodies unless you have effectively consented to such transmission. The legal basis of the processing is then Art. 6(1) Sentence 1(a) GDPR.

Application process

We are pleased that you are interested in us and that you wish to apply or have already applied for a position in our company. In the following, we would like to provide you with information about the processing of your personal data in connection with your application. We process the data necessary for the online application process (name, email address, IP address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or any other vacancies within our company) and to carry out the application process.

The legal basis for the processing of your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) as amended on 25 May 2018. It allows the processing of data required in connection with hiring decisions. Should the data be required for the assertion of legal rights after completion of the application process, data may be processed on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6(1)(f) GDPR. In such cases, our interest is in asserting or defending claims.

In the event of a rejection, candidate data will be deleted after six months. In the event that you have agreed to further storage of your personal data, we will add your data to our applicant pool. There the data will be deleted after two years. If you are offered a job in the context of the application process, the data from the applicant data system will be transferred to our HR information system.

We use a specialist software provider for the application process. It acts as a service provider for us and may also become aware of your personal data in the context of system maintenance and support. We have concluded what’s known as a data processing agreement with this provider, which ensures that data processing is carried out in a permissible manner.

Upon receipt of your application, your application data will be reviewed by the HR department. Suitable applications are then forwarded internally to the department heads for the respective vacancies. The next steps to be taken are then agreed upon. In principle, only those persons in the company have access to your data who need this for the regular conduct of our application process.

Hosting

We use external hosting services for the provision of the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. This involves processing all data necessary for the operation and use of our website.

We use external hosting services to run this website. By using external hosting services, we aim to make the provision of our website efficient and secure. The legal basis for the processing is Art. 6(1)(f) GDPR.

The recording of data for the provision and use of the website and the processing of data using external web hosting services is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing. You may send us your objection using the contact details specified under ‘Responsible provider’ above.

Integration of third-party content

The website integrates third-party content such as videos, maps, RSS feeds and graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of users. This is because without the IP address they would not be able to send the content to the browser of the respective user. As such, the IP address is required to display this content.

We endeavour to only use content from third-party providers who process the IP address solely for delivering the content. We do however have no influence over whether the third-party providers process the IP addresses, e.g. for statistical purposes. If we are aware of such activity, we inform you of this in the following.

Some of the third-party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plug-in NoScript (www.noscript.net) or disabling JavaScript in your browser. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).

Google Maps

This website also uses the Google Maps service from Google to display maps or sections of maps, thus enabling you to conveniently use the map function on the website.

By visiting the website, Google receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under ‘Access data’ is transferred to Google. This occurs regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your Google profile, you must log out before activating the button.

Google stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.

The legal basis for the processing is Art. 6(1)(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long Google stores data and have no way of influencing this.

For more information about the purpose and scope of processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: http://www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

For more information about the Google Maps terms of use, please refer to: https://www.google.com/intl/de_de/help/terms_maps.html

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening your browser in ‘private mode’. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

Google reCAPTCHA

We use Google reCAPTCHA (hereinafter referred to as reCAPTCHA) on our website. This service is provided by Google.

reCAPTCHA is used to check whether data entered on the website (e.g. in a contact form) is provided by a person or by an automated program. To do this, reCAPTCHA analyses various aspects of the way in which the visitor to the website behaves. This analysis starts automatically as soon as the user accesses the website. For this analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. In the event that Google processes the data in the USA, Google has subjected itself to the EU-US Privacy Shield and thus committed to complying with European data protection standards:https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

reCAPTCHA analyses run completely in the background. You will not be notified that an analysis is taking place.

The processing occurs on the basis of Art. 6(1) Sentence 1(f) GDPR. We have a legitimate interest in protecting our website from abusive automated spying and unsolicited email advertising (spam). We have no knowledge of how long reCAPTCHA stores data and have no way of influencing this.

For more information about reCAPTCHA and Google’s Privacy Policy, please go to https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

workable

Via https://invinciblebrands.workable.com/, we use the application tool from workable (Workable Software Limited, 21a Kingly Street, 2nd Floor, London). workable processes the data you enter when applying. workable processes this data within the European Union. We integrate this tool in order to enhance our website and offer you a better service. The legal basis for the data processing is Art. 6(1) Sentence 1(f) GDPR. For further information about privacy at workable, please refer to: https://www.workable.com/privacy. We have no knowledge of how long workable processes data and have no way of influencing this.

When applying via the application tool, you can also use and integrate the data you have stored with LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043). If you select this feature, LinkedIn will learn that you are accessing LinkedIn from https://invinciblebrands.workable.com/. This will involve sending data about you to LinkedIn. In addition, the data you have stored with LinkedIn (profile data, such as names, photos, profile slogans, work experience, education, knowledge and recommendations as well as your email address, telephone numbers and other contact data linked to your LinkedIn account) will be transferred to workable. This data transfer from LinkedIn to workable occurs on the basis of the consent granted by you based on Art. 6(1) Sentence 1(a) GDPR. The transfer of your IP address to LinkedIn occurs on the basis of Art. 6(1) Sentence 1(f) GDPR. The purpose of this processing is also to improve our services as well as the to make our website more attractive and applicant-friendly. LinkedIn also processes data outside the European Union. However, it has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active), thus offering a guarantee that it complies with European data protection standards.

We have no knowledge of how long data is stored by LinkedIn and have no way of influencing this. For further information about privacy at LinkedIn, please refer to: https://www.linkedin.com/legal/privacy-policy. For more information on data usage by applications, click here: https://www.linkedin.com/help/linkedin/answer/1207?lang=de

You can withdraw your consent to the processing of your LinkedIn data at any time by sending us a message (see the contact details specified under ‘Responsible provider’ above). This does not affect the lawfulness of processing that has occurred based on the consent up until the point of your withdrawal (Art. 13(2)(c) GDPR).

You can cancel the synchronisation of the data in your LinkedIn settings at https://www.linkedin.com/psettings/permitted-services.

In addition, you have the right to object to the processing of your other data. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).

Services for statistical, analysis and marketing purposes

We use services from third parties for statistical, analysis and marketing purposes. This enables us to offer you a user-friendly, optimised experience when visiting the website. The third-party providers use cookies to control their services (see ‘Cookies’ above). Unless otherwise explained below, this does not involve the processing of personal data.

Some of the third-party providers offer users the option of directly objecting to the use of the respective feature, e.g. by placing an opt-out cookie.

If you activate such an opt-out cookie, the third-party provider will no longer process data about your usage behaviour in the future. It is also possible to merely object individually to a partial selection of external services. If you change the browser or device used or delete all cookies, you will be required to set the opt-out cookie again.

Furthermore, you can also object directly to the use of cookies via the opt-out platform of the organisation Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/.

More information about usage-based advertising and opt-out options can also be viewed via the following link: http://www.youronlinechoices.com/de/

You can also prevent the use of cookies by opening your browser in ‘private mode’.

In the following, we inform you about the services from external providers currently in use on our website, about the purpose and scope of the respective processing in each case, and about how you can object.

Google Analytics

In order to tailor our website perfectly to your interests, we use Google Analytics, a web analytics service from Google. Google Analytics uses cookies (see ‘Cookies’ above), which are stored on your device to enable the analysis of how you use the website. The information generated in this way about your use of this website is transferred to a Google server and processed there.

However, if IP anonymisation is activated on this website, then within European Union Member States or in other member states of the European Economic Area Google will shorten your IP address before transferring it. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of this website, compiling reports for us on website activity, and providing us with other services relating to website usage and internet usage.

Google will not associate your browser’s IP address transmitted for Google Analytics purposes with any other data held by Google.

This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in abbreviated form, meaning that any association with individual persons can be ruled out. As far as the data collected about you relates to you personally, that relation is therefore excluded immediately and the personal data thus erased without delay.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield,https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis of the processing by Google Analytics is Art. 6(1) Sentence 1(f) GDPR.The Analytics cookies are erased after 14 months at the latest.

For more information about the third-party provider Google, please refer to: http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/en/policies/privacy.

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. We will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can prevent the storage of cookies using the corresponding settings in your browser software; however, we would like to point out that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the recording of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en. You can also prevent the use of cookies by opening your browser in ‘private mode’.