Privacy Policy (Privacy and Cookie Policy)
1. Who is responsible for data protection and how can I contact someone?
BIGPLAYER
Norman Graudenz
An den Fördertürmen 24
59075 Hamm
E-Mail: info@bigplayer.com
Business owner: Norman Graudenz
If you have any questions about the processing of your personal data, you can contact us by email at info@bigplayer.de or by letter at the above address.
2. Rights as a data subject
Every data subject has the following rights:
- Right to information (Art. 15 GDPR).
- Correction of incorrect data (Art. 16 GDPR).
- Right to erasure (Art. 17 GDPR).
- Right to restrict the processing of personal data (Article 18 GDPR).
- Data portability right (Art. 20 GDPR).
You can object to the processing of personal data for advertising and analysis purposes at any time without giving reasons.
In general, the person concerned has a right of objection (cf. Art. 21 Paragraph 1 GDPR). In this case, the objection to data processing must be justified. If the data processing takes place on the basis of the consent, this can be revoked at any time for the future.
For the application of the data subject rights you can contact info@bigplayer.de. You also have the right to lodge a complaint with your data protection supervisory authority.
3. The processing of personal data by our website
In the following, we would like to give you an overview of how we protect your personal data when you access our website and which of your data we process for what purpose and scope.
Data processing when accessing our website / log files
When our website is accessed, information of a general nature is recorded. Information (server log files) such as the type of web browser, the operating system used, the domain name of your internet service provider and the like are recorded. When you use our website, your IP address is transmitted and used to use the service you have requested. In general, this information is technically required in order to correctly deliver the content you have requested from the website and is necessary for using the Internet.
Our IT security concept stores the log file data over a period of two weeks, e.g. to recognize and analyze attacks against our website. The legal basis for the data processing is Art. 1 S. 1 Letter f GDPR.
Inquiries from you and the processing when using our website
If you send us an inquiry by e-mail or via customer service, we will save your data / information so that we can process and answer your request. For verification purposes, this data is stored for up to two years on the legal basis of Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.
Subscription to our email newsletter
After entering your email address in our newsletter, your email address will be saved until you unsubscribe from the newsletter. The purpose of saving the email address is to be able to send you regular news / advertising by email. When registering for and confirming the newsletter, your IP address and the time of your registration are stored in order to be able to provide evidence that the newsletter has been sent correctly and to prevent misuse of your personal data. The processing of your personal data is based on the legal basis of Article 6. Paragraph 1 Clause 1 Letter a GDPR.
To receive the newsletter, you only need to provide your email address. You can withdraw from receiving our newsletter at any time without giving reasons. The legality of the processing of your personal data remains unaffected until you withdraw your consent. In every newsletter there is a link where you can unsubscribe from receiving the newsletter by clicking on the link, alternatively you can send us an email to: info@bigplayer.de to cancel.
Data security
We take technical and operational security precautions on our website to protect the personal data stored by us from being accessed by third parties, to protect it from loss or misuse and to ensure a secure data transfer.
In general, it must be pointed out that the structure of the Internet can lead to unintentional access to data by third parties. It is therefore our responsibility to protect your data against misuse, e.g. through encryption. If no protective measures are in place, it can be read by third parties, especially when transmitting unencrypted data, even if this is done by email.
4. Cookie Policy
Use of cookies
Our website uses cookies (small text files) that are stored on your device and stored in your browser. The cookies serve to make our offers more user-friendly, more effective and safer. Temporary cookies are used, which are automatically deleted after you close your browser, and persistent (permanent) cookies are used.
In order to be able to use the full range of our website, we recommend that you accept all cookies, but you have the option of allowing cookies to be set. You can make changes in your browser settings. For example, all cookies can be allowed, you can be informed when cookies are set or all cookies can be rejected. If you reject all cookies, you may not be able to take full advantage of our offer.
A distinction must be made between cookies, which are absolutely necessary, and cookies for further purposes (measurement of access numbers, advertising purposes).
Cookies that are essential for using our website
We use session cookies on our website, which are absolutely necessary for the use of our website. These include cookies that enable us to recognize you when you visit our website as part of a single session. The session cookies contribute to the secure use of our offer and support a secure processing of the shopping cart function and the payment process.
With your consent to the use of cookies
Below you will find an overview of the cookies that we use after you have given your consent to start using our website. You will find an opt-out option for each presentation of the mission. These are cookies to record the usage behavior of our website and cookies that are used for advertising purposes.
Cookies for recording usage behavior (Tracking)
When users come to our website again, tracking cookies enable us to recognize this user and to assign the usage processes to an internally assigned pseudonym code. This enables us to analyze and record repeated access to our website.
These tracking cookies are used:
Google Analytics Tracking
Our website uses Google Analytics, a web analysis service provided by Google Inc. Google Analytics uses cookies (text files) that are stored on your computer, which enable the use of the website to be analyzed. The information generated by the cookies about the use of our website is usually saved by Google on a server in the USA. By activating the IP anonymization on this website, your IP address will be shortened beforehand by Google within the European Union and its member states and other contracting states across the European Economic Area. In exceptional cases, the full IP address will be sent to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to our website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can prevent the storage of cookies by making a setting in your browser. Please note that if you prevent the storage of cookies, you may no longer be able to use this website in full. In addition, by installing the browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de, you can prevent Google from processing your personal data through the use of cookies. We use Google Analytics to analyze and improve the use of our website. The statistics provided enable us to improve our offer for users. In the exceptional cases where the personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the exceptional cases where the data is transferred to the USA is the consent given (Art. 6 Para. 1 S. 1 lit. a GDPR). The further evaluation of the data collected by Google Analytics takes place over a period of 26 months on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR.
We implement Google Analytics via the Google Tag Manager. The Google Tag Manager enables us to manage website tags via an interface. The Google Tag Manager is also a product from Google. The Tag Manager does not collect any personal data but requires an IP address transfer. The Tag Manager triggers other tags that may collect data again. The Google Tag Manager does not access this data. If a deactivation has been carried out at Google or domain level, this also applies to the tracking tags that have been implemented via Google Tag Manager. A measurement is made via the use and use of the Tag Manager. Anonymization was activated before the IP address was forwarded to Google. The legal basis for data processing is Art. 6 Para. 1 S. 1 f) GDPR]. The data will be deleted after 2 years. You can find more information on this at http://tools.google.com/dlpage/gaoptout?hl=de and https://www.google.de/intl/de/policies/privacy/ (general information about Google Analytics / data protection).
Use of cookies for advertising purposes
In order to display advertising to a website visitor, cookies are set for marketing purposes. The cookies are also used to limit the frequency of an advertisement and to analyze the effectiveness of an advertisement. This records which articles and websites are clicked on. This enables us to analyze usage habits and display interest-based advertising. This information is shared with third parties and in this case the cookies are set regularly by our advertising partners.
The following cookies are set:
Google Adwords
With our partner for display ads Google Adwords, we can show you ads on other websites through your interaction with bigplayer.de. The procedure serves to show you advertising that may be of interest to you, to make our website more interesting and to achieve fair advertising costs. We can use the data from the advertising campaign to determine how successful the respective campaign was. Google's advertising media are delivered via so-called ad servers. We use ad server cookies for this purpose, through which certain parameters for measuring success, such as the insertion of advertisements or clicks by the user, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. Various analysis values and opt-out information (marking that you no longer want to be addressed) are stored for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. This means that cookies cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures, but only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you are visiting the corresponding part of our website have accessed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. You can not only prevent participation in this tracking process via your browser settings, but also via the URLs https://www.google.de/settings/ads and http://www.aboutads.info/choices
5. Integration of third-party services
Social plugins
Various plug-ins are used on our homepage such as Facebook.com, Twitter.com, these plug-ins are used to enable you to interact with your contacts in order to disseminate possibly interesting information.
If you click on such a plug-in, your browser will establish a direct connection with the server of the respective network. The content of the plug-in is transmitted to your browser through the network and integrated into the website. If the networks are based outside the EU / EEA, it cannot be ruled out that your data will be sent to a server outside the EU / EEA and processed there. In this case, we have no influence on the scope and usage period of the data from the respective network with the help of the plug-in. To the best of our knowledge, this information is collected:
By integrating the plug-in, the network receives the information that you have accessed our homepage. If you are logged into this network, the network can assign this to your profile. If you do not want the network to be informed about your visit to our homepage, you should log out of the respective network beforehand. There is still the possibility that the network will find out your IP address and save it, even though you are not registered or logged in there. We do not have any data on whether and when the data will be deleted from the network by the plug-in in this case. Your data is saved by the plug-in as a user profile and is usually used for advertising, market research, and website design. This evaluation, even for users who are not logged in, serves to display needs-based advertising and to inform other users about your activity on our website. You can lodge an objection with the respective service provider against this creation of the usage profile.
The legal basis for the use of plug-ins is Art. 6 Paragraph 1 Sentence 1 lit. The purpose, duration and scope of the data collection and its further processing and general use of your data, as well as your own rights and options for the protection of your privacy can be found in the data protection information of the respective network:
- Facebook: http://www.facebook.com/policy.php;
- Twitter: https://twitter.com/privacy?lang=de.
6. Appearance on social media
Facebook fan page
For the information services offered here, we use the technical platform of Facebook Ireland Ltd., 4 Grand Canal Squre Grand Canal Harbor, Dublin 2, Ireland. Please note that you use our Facebook page, which can be accessed at https://www.facebook.com/BIGPLAYER.COM, at your own risk. This applies in particular to the use of the interaction function such as commenting, sharing, rating, etc.
When you visit our Facebook page, Facebook will collect your IP address and other data that will be saved as cookies on your PC. Facebook collects this data in order to provide us with statistical information about the use of our Facebook page (Facebook “Insight”). More information on this is available from Facebook via the link: http://de-de.facebook.com/help/pages/insights. The data collected from you may be transferred by Facebook outside of the European Union, usually to the USA. The company Facebook is certified according to the EU-US Privacy Shield (www.privacyshield.gov), which is intended to ensure the same level of data protection as the EU.
Facebook generally describes what information is received and how it is processed in its data usage guidelines. There are also contact options for Facebook and setting options for advertisements. The data usage guidelines can be found under the link:: http://de-de.facebook.com/about/privacy. Under this link: https://de-de.facebook.com/full_data_use_policy you can find the complete data guidelines of Facebook. Further information on how to manage your existing data and e.g. delete it can be found at: https://de-de.facebook.com/about/privacy#.
How Facebook uses the data when you use a Facebook page, how activities are assigned to individual users, how long the data is stored and whether the data is passed on to third parties by Facebook is not clearly described by Facebook and is therefore not known to us. The respective data processing can probably differ whether you use Facebook pages when you are registered and logged in there or not registered and not logged in.
If you use a Facebook page or make a post, the IP address assigned to you will be transmitted to Facebook. Facebook provides information that German IP addresses are anonymized and deleted after 90 days. Facebook also stores information about its users' devices, e.g. in the registration notification function, which can lead to Facebook being able to assign an IP address to individual users. If you are currently logged into Facebook as a user, there is a cookie with your Facebook ID on your device. This enables Facebook to understand that you have visited this Facebook page and how you have used the page. This also applies to other Facebook pages that you have visited. Facebook can use integrated Facebook buttons to understand that you have visited the website and to assign them to your user profile. In this way, Facebook can send content and advertising tailored to you.
If you want to avoid this, you should log out of Facebook or deactivate the Stay logged in function, delete the cookies on your device and restart your browser. Facebook information is deleted in such a way that you can be recognized. This gives you the opportunity to use our Facebook page without a Facebook ID. As soon as you access interactive functions, e.g. like, comment, share, news, etc., Facebook requires you to register. If you then log in, you can be recognized by Facebook as a user.
As an information service, we only process the data from your use of our services, which you provide to us and which require interaction. This is the case if, for example, you ask us a question and we answer it by email, then your information / data will be stored in accordance with the general principles of our data processing, which is described in this data protection declaration. The legal basis for processing your data on our Facebook page is: Art. 6 Para. 1 S. 1 lit.f GDPR.
If you are exercising your rights as a data subject, you can contact us or Facebook. If we are not responsible for this area, we will try to forward your request to the responsible authority / partner. If you have any questions about creating a profile or processing your data when using the website / Insight, please contact Facebook directly. If you have any questions about your interaction with us, the processing of your data or questions about the information offered, you can contact us at info@bigplayer.de. At www.youngdata.de you will find further information on how you can protect your data and further information on Facebook and other social networks.
Other social media platforms
Name Address |
Link data protection |
Twitter International Company |
https://twitter.com /de/privacy |
YouTube, Inc., YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA |
https://policies.google.com/privacy?hl=de |
Linkedin, Inc., 1000 W Maude Ave, Sunnyvale, CA 94085, USA |
https://www.linkedin.com/legal/privacy-policy |
Instagram., Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland |
https://help.instagram.com/519522125107875 |
Xing SE, Dammtorstraße 30 |
https://privacy.xing.com/de/datenschutzerklaerung |
Pinterest Europe Ltd. |
https://policy.pinterest.com/de/privacy-policy |
For information services of this kind, we use the technical platforms and services of the aforementioned providers. Please note that you use our appearances on the respective social media platform on your own responsibility, in particular for functions such as commenting, sharing, rating, etc. When you visit our website, the social media platforms record e.g. your IP address and a lot of other information, which is saved as a cookie on your PC. The data is made available to us as the operator of the account, e.g. for statistical information about the interaction with us.
As already shown several times, it also applies here that your data can be sent to the USA. All providers mentioned are certified according to the EU US Privacy Shield (www.privacyshield.gov) except Xing. Xing is headquartered in the EU. It is not clear to us in which way the social media platforms use your data for their own purposes through your visit to our account and contributions. It is also not clear to us how long this data is stored and whether it may be passed on to third parties. During data processing, a distinction can be made between whether one is registered and logged in to a network or not registered and not logged in. When using a contribution or an account, your assigned IP address will be sent to the platform provider. If you are logged in as a user, a cookie that is stored on your device can be used to track how you have navigated the Internet. Avoidance is possible if you log out of the respective provider, delete all cookies and restart your browser.
As an information service, we only process the data from your use of our services, which you provide to us and which require interaction. This is the case if, for example, you ask us a question and we answer it by email, then your information / data will be stored in accordance with the general principles of our data processing, which is described in this data protection declaration. The legal basis for processing your data on our Facebook page is: Art. 6 Para. 1 S. 1 lit.f GDPR.
If you are exercising your rights as a data subject, you can contact us or Facebook. If we are not responsible for this area, we will try to forward your request to the responsible authority / partner. If you have any questions about creating a profile or processing your data when using the website / Insight, please contact Facebook directly. If you have any questions about your interaction with us, the processing of your data or questions about the information offered, you can contact us at info@bigplayer.de. What information the various social media platforms receive through your visit and how this is used in detail can be found in the respective data protection declarations; the links to it are in the table above. There you can also find information about contacting the respective network and setting options for advertisements. Another way to get more information about social networks, especially on the subject of protecting your data, can be found at www.youngdata.de.
7. Data processing when participating in our competitions via social media platforms
We regularly announce competitions via social media platforms. Information on data protection and conditions for participation will be published with the respective competition.
8. Data processing of personal data when purchasing goods on our website
From the starting point of your order process to payment and receipt of the item, the following data is passed on to third parties who have been commissioned by us to process your data:
Data processing when concluding a sales contract
Who process data that we receive through your inquiry or an existing contractual relationship. This includes, for example, your contact details, e-mails, orders, inquiries, payment data, etc. In business relationships, you must provide personal data so that we can process your order, for example, or where processing is legally required. Without this data, we cannot fulfill any orders for you.
We process the data that you have given us when placing the order in order to fulfill the order; we may commission monitored specialist service providers for this. The processing of your data as part of the performance of the contract is used to provide the contractually owed service, which also includes the processing of any warranty claims. Further information on this purpose can be found in the respective contract documents. The data processing takes place on the basis of Art. 6 Para. 1 Clause 1 Letter b GDPR.
You can open a customer account when you buy from us in the online store. In your customer account you can enter your delivery addresses, for example, see an overview of your orders and many other options. You can save all the data required for the purchase in your customer account, such as address, payment details, etc., in order to be able to process an order quickly.
The data that arise when making a purchase on our online store or when using a service can be forwarded to external auditors / tax consultants for advisory and auditing purposes, for example. The collected data will be stored by us as long as warranty claims exist or other purposes mentioned here exist. In the further course of the process, the data will be archived in accordance with the retention requirements according to §§ 146 ff. Tax Code or § 257 Commercial Code and deleted after the retention requirements have expired. As a rule, all other data are deleted, unless there are other purposes that are described in this declaration. The processing of the data takes place on the basis of the warranty claims of Art. 6 Para. 1 S. 1 Letter b GDPR, as well as Art. 6 Para. 1 S. 1 Letter c GDPR to fulfill legal obligations.
If your payment is made via PayPal, the payment data will be processed by PayPal (Europe) S.à r.l. & Cie, S.C.A. ("PayPal Europe"), 5ème Etage, 22-24 Boulevard Royal, L-2449, Luxembourg. After you have paid, we receive this information and PayPal transfers the amount to our e-commerce account. To use this payment option, you must register with PayPal, identify yourself and confirm the payment to us. There is also the general option of shopping in our online store as a guest; you can find more information about this during the ordering process. PayPal is responsible for processing payment data. The data is processed in accordance with Art. 6 Paragraph 1 Sentence 1 Letter b GDPR.
Credit check
The creditworthiness is checked regularly, especially when contracts are concluded with purchase on account and in some cases if there is a corrected interest. In this case, our contact person is Creditreform Boniversum GmbH, Hellersbergstrasse 11, 41460 Neuss, who can provide this data. On behalf of Creditreform Boniversum, we will provide you with the following information in accordance with Article 14 EU GDPR: Creditreform Boniversum GmbH is a consumer information agency. The Creditreform Boniversum operates a database where creditworthiness information about private individuals is stored.
In this way, Creditreform Boniversum can provide information about creditworthiness to your customers. There are various customers such as credit institutions, insurance companies, leasing providers, telecommunications service providers, wholesalers and retailers, receivables companies, etc., who are interested in a credit report. Within the legal framework, part of the data from the information database is used to supply other company databases, e.g. for use for address trading purposes.
The Creditreform Boniversum database contains, for example, this information: name, address, date of birth, e-mail addresses, payment history and ownership structure. The purpose of processing the stored data is to inquire about the creditworthiness of persons in accordance with the legal basis Art. 6 Para. 1f EU GDPR. Information may only be given if the customer has a legitimate interest in inquiring about and receiving this data. If stored data is sent to countries outside the EU, this is done on the basis of the standard contractual clauses. More information can be found under the following link or you can inquire there: http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE.
The data are stored for as long as knowledge makes it necessary to fulfill the purpose of data storage. As a rule, the storage period is initially 3 years. It is then checked whether data storage is still necessary or whether deletion takes place. If a matter is settled, a deletion takes place 3 years after the matter has been settled. An entry in the debtor register according to § 882e ZPO will be deleted after 3 years.
Legitimate interests according to Art. 6 Para. 1 f EU GDPR can be e.g .: credit decisions, planned business relationships, planned investments, general claims, enforcement information, credit checks, insurance contracts. You have the right to information from Creditreform Boniversum about what data about you is stored there. If the stored data is not correct, you have the right to have it deleted or corrected. If it cannot be clarified immediately whether the stored data is correct or incorrect, there is a claim to block the account until clarification. If the stored data is incomplete, you can request it to be completed.
If you have given Creditreform your consent to process your data, you can revoke this consent at any time. In the event of a revocation, the legality of the data processing carried out until the revocation is not affected.
If you have any objections, complaints or queries about data protection, you can contact the Creditreform data protection officer. The data protection officer will help you with questions about data protection. If you do not agree to the processing of the data by Boniversum, you can contact the responsible state data protection officer in your federal state and lodge a complaint there.
The data stored about you at Creditreform Boniversum come from publicly accessible sources, debt collection companies and their customers.
Creditreform Boniversum creates a score from your data in order to show your creditworthiness. There is data in the score such as age, gender, address and possibly experience of your payment data. These data are weighted differently in the score calculation. Creditreform customers use this data (score value), e.g. when making credit decisions.
Right to object
The data processing of the stored data at Creditreform Boniversum takes place for reasons of the protection of the creditors and credits, which regularly exceed your interests, rights and freedoms or serves to exercise or defend and assert legal claims. For special reasons and situations that can be proven by you, you can object to your data being processed. If such special reasons exist and can be proven, your data will no longer be processed. It is also possible to object to the processing of your data for advertising and marketing purposes, in which case your data will no longer be processed for these purposes.
According to Art. 4 No. 7 EU GDPR, the following is responsible: Creditreform Boniversum GmbH, Hellerbergstr. 11, 41460 Neuss, Tel: 02131-36845560, Fax: 02131-36845570, Selbstauskunft@boniversum.de, Data Protection Officer, Hellersbergstr. 11, 41460 Neuss, datenschutz@boniversum.de.
Collection of claims
We can use your personal data to collect outstanding debts if the payment has not been made by the due date. We commission Creditreform Dortmund / Witten Scharf KG, Phoenixseestr. 4, 44263 Dortmund as a debt collection company. In this case, the debt collection company uses your data and processes it on our behalf under these data protection guidelines and the necessary security measures. We pass on information such as name, address, purchase contract information, payment receipts, reminders, etc. to the collection company. The legal basis for debt collection is the execution of the concluded contract, Art. 6 Paragraph 1 Sentence 1 Letter b GDPR.
Data protection in payment transactions
The credit card details are collected directly by our payment service provider and are not stored by us. The payment that has been made is sent to us via a payment reference number, which does not contain any information about your credit card details. We protect our homepage and other systems from unauthorized persons with technical and organizational measures against access, destruction, modification and dissemination of customer data. Access to your customer account is only possible by entering your password. To protect yourself, you should always treat the access data confidentially. When you have finished shopping or the communication with us has ended, you should log out properly and then close the browser window.
Data processing based on legal obligations
Like every company in Europe, our company is subject to certain legal obligations such as checking customer data or data from business partners. We only process your data to the extent that it is necessary for legal requirements. In order to meet legal obligations, your data may be partially processed automatically in order to evaluate personal aspects. Automatic individual decisions are made if you are not expressly informed about them. In connection with the statutory provisions, the legal basis is Article 6, Paragraph 1, Clause 1, Letter c GDPR. Legal requirements include, for example: fraud prevention / money laundering prevention, tax control obligations / reporting obligations, assessing / controlling risks in the group and sanction lists.
9. Changes to our data protection declaration
Please note that we reserve the right to change our security measures and data protection measures at any time if this is necessary to meet the current technical requirements. Should a change take place, we will adjust our data protection guidelines accordingly.