Privacy Policy

Privacy policy

Welcome to our website! With this privacy policy we would like to inform you about how we process personal data within our cashback portal de.webgears-cashback.com. The protection of your privacy is of the utmost importance to us, so compliance with the legal provisions on data protection is a matter of course for us.

Webgears provides a cashback function for you via the cashback portal. As soon as you have selected a shop and entered your email address, you can start shopping in the shop you have selected. You will be directed to the respective shop via a special link and your user actions will be recorded and processed by us (e.g. by setting a cookie and processing online identifiers). In this way, we can later track whether you have actually made the purchase through us. If your purchase is successfully assigned, payment is made via PayPal, whereby we transfer the amount directly to your PayPal account (via your email address).

Name and contact details of the controller

Webgears GmbH

Am Garnmarkt 4
6840 Götzis
Austria

Telefon: +49 (0) 30 - 398 215 34
Email: US.support@webgears-group.com

Data Protection Officer

If you have any questions regarding our data protection measures, the processing of your data or regarding the protection of your data subject rights, you can reach us and our data protection officer as follows:

External data protection officer

ePrivacy GmbH

represented by Prof. Dr. Christoph Bauer

Große Bleichen 21, 20354 Hamburg

For all questions and concerns regarding your data, please contact us at datenschutz@webgears-group.com

If you wish to communicate directly with our data protection officer (for example, because you have a particularly sensitive request), please contact him or her by mail, as communication by email can always have security vulnerabilities. Please indicate in the request that your concern relates to the company Webgears.

Personal data

Personal data is any information relating to an identified or identifiable individual. This includes the following categories of personal data that we process:

Your contact information (such as first and last name, email address, address),

Your correspondence with us,

Log files containing information about your visit to our website,

Information about your purchase (such as purchase amount, purchase date, partner shop, etc.),

Payment details for cashback payout (such as Paypal email address),

Online identifiers (such as cookie IDs, IP addresses, advertising IDs),

Browser and device information,

Information about the use of our website

Location data

Cookies use

General information about cookies

Cookies are data records that are stored in the browser's databases. This gives users an identification number that is transmitted to the user's computer and stored there together with the other data actually requested when using the website. The file is kept there for later access and serves to authenticate the user.

Session cookies

Session cookies are used for the duration of a session and then automatically deleted when the executing browser is closed. They ensure, for example, that video and audio files can be played, your user input is temporarily stored during the input time and thus the user experience is improved.

Persistent cookies

Persistent cookies remain on your terminal device after you close the browser. These cookies can, for example, save your user preferences, such as language settings, and analyze user behavior on our website. The storage period of persistent cookies corresponds to the respective runtime of the individual cookie. Afterwards, they are automatically deleted.

Revocation of consent for cookies

The change of consent or revocation of consent for the setting of cookies can be made in your browser settings.

Purpose

We process your data for the following purposes :

To provide our cashback feature and tracking via purchase as proof of service provided,

for advertising purposes, such as sending our newsletter,

for correspondence with you,

for the processing of contracts with you,

for quality assurance and statistics,

to improve/customize our service,

Legal basis

We rely on the following legal bases for processing your data:

Your consent, if you have given us such consent (Art. 6 para. 1 lit. a) DSGVO),

the initiation or execution of a contract with you (Art. 6 para. 1 lit. b) DSGVO),

the fulfillment of legal obligations (Art. 6 para. 1 lit. c) DSGVO),

the implementation of our legitimate interests (Art. 6 para. 1 lit. f) DSGVO)

Legitimate interests

The purpose of processing your data is to protect the following legitimate interests:

the improvement of our offer,

the protection of our systems against misuse,

the compilation of statistics,

Marketing purposes,

the storage of our correspondence with you,

Requirement or obligation to provide data

Unless expressly stated, the provision of your data is not required or obligatory.

Data sources

Unless we obtain the information from you, or through the devices you use, it comes from the following sources:

from affiliate networks and advertisers

Storage duration

We store your data,

if you have consented to the processing, at most until you withdraw your consent;

if we need the data to perform a contract, at most for as long as the contractual relationship with you exists;

if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymization does not prevail;

if statutory retention obligations exist, until the end of the retention periods.

Data recipient

In processing your data, we cooperate with the following categories of data recipients who have access to your data:

Web hosting and web development providers,

Service provider for IT development services,

Payment service provider,

Affiliate networks and advertisers.

Furthermore, we cooperate with the following service providers in the processing of your data, who have access to your data:

Amazon Web Services Cloud

We use the cloud service or cloud infrastructure of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, for the flexible provision of IT services and for the secure storage or exchange of digital content and information. In particular, the following data or categories of data are processed: Master and contact data, data on transactions and contracts, and communication and usage data.

Further information about the provider can be found at: https://aws.amazon.com/compliance/gdpr-center/?nc1=h_ls

Akamai

We use the CDN provider Akamai of Akamai Technologies International AG (Grafenauweg 8, Zug CH-6300, Switzerland) for providing image content and optimising the loading speed of our website. Large files can be played out quickly for you. For this purpose, your browser establishes a connection to the CDN network. This records visits to the website, information about the content you call up and visitor data such as the IP address.

For more information about the provider, please visit https://www.akamai.com/legal/privacy-and-policies/privacy-statement.

Consentmanager

We use the service consentmanager of the provider consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, to request and manage your consent for the use of cookies and similar information.

The following personal data will be collected: IP address, timestamp, consent information, user agent, referrer URL (website visited), country.

You can revoke your consent at any time with effect for the future here: Link to CMP.

You can find more information about the provider under https://www.consentmanager.de/datenschutz/

Google reCaptcha

We use the service reCaptcha of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).

The query serves to distinguish whether the input is made by a human being or abusively by automated, machine processing. The service includes sending the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google. The use is made in accordance with art. 6(1) lit. f GDPR based on our legitimate interest in establishing individual ownership on the internet and preventing abuse and spam. If the data processing is based on our legitimate interest, you can object to the processing at any time with effect for the future. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection provisions of the Google company apply to this data.

For more information about the provider, please visit: https://www.google.com/intl/de/policies/privacy/.

Google Web Fonts

We use external fonts, so-called Google Fonts, on our website. Google Fonts is a service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The integration of the web fonts takes place locally on our web server and not on Google's servers. Therefore, there is no connection to Google servers and no data transfer takes place.

Zendesk

We use the service of Zendesk Inc. (989 Market Street, San Francisco, California, 94103, USA) to improve our customer service. The following data can be collected: first and last name, email address, title, position, employer, contact information (company, email, phone numbers, physical address), date of birth, gender, communications (telephone recordings, voicemail) and customer service information.

For more information about the provider in English, please visit: https://www.zendesk.co.uk/company/agreements-and-terms/privacy-notice/

Google Analytics

We use the service Google Analytics of the provider Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter "Google") to measure and analyze the behavior of our website’s visitors. This involves collecting data in the form of online identifiers, IP addresses, device information and information on interaction with our website.

For more information about the provider, please visit: https://policies.google.com/privacy?hl=en.

Google-Tag-Manager

On our website we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool is responsible for activating other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

For more information about the provider, please visit: https://policies.google.com/privacy?hl=de

Mailchimp

We use the Mailchimp service of the provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to send our newsletter and measure open and click-through rates. Mailchimp is a US service and we have agreed to appropriate standard contractual clauses as part of the order processing agreement with Mailchimp (Rocket Science Group, LLC) to ensure an adequate level of data protection when processing personal data. If you have subscribed to our newsletter, we will in particular forward your email address to MailChimp (Rocket Science Group, LLC).

You can find more information about the provider at https://mailchimp.com/legal/data-processing-addendum/

Sentry

We use the service Sentry of Functional Software, Inc. d/b/a Sentry (45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) for error tracking on our website. The following data is collected, among others: Browser and device information, error log, event ID, URL and other request data.

For more information about the provider, please visit: https://sentry.io/privacy/?original_referrer=https%3A%2F%2Fsentry.io%2Flegal%2Fdpa%2F

PayPal

We use the payment provider PayPal of PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg) to carry out the payment transaction. The following data is collected, among others: email address, name, payment data.

For more information about the provider, please visit: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#2

Transfer to third countries

There is a data transfer to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards.

USA (standard contractual clauses)

Your rights

As a data subject, you have the following rights:

request information about the processing of your data and to receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data that are processed, the recipients of the data (if a transfer takes place), the duration of the storage or the criteria for determining the duration;

receive the personal data concerning you in a structured, common and machine-readable format or to transfer it to another controller;

to rectify your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of processing;

Have your data deleted or blocked;

to have the processing restricted;

to object to the processing of your data;

revoke your consent to the processing of your data for the future

and

complain to the competent supervisory authority about unlawful data processing.

Automated decision making including profiling

We do not perform automated decision making or profiling.

Status of the privacy policy

If our processes change, we adjust the information.

Status of this privacy policy: 01.06.2023