Data Protection Declaration

Privacy policy

This website is an offer of Ocean Drive ApS. With this data protection information we inform you about the processing of personal data in connection with the use of this website.

1. Who is responsible for data processing and who can I contact?

Responsible is:

Mysnus AB

c/o Accountor AB

Box 1126

11181 Stockholm

Sweden

Email: contact@mysnus.com

Phone:

2. What sources and data do we use?

When you visit our website, our server automatically stores the name of your Internet service provider, the IP address, name and version of the browser you use, the operating system used, the date and time of your visit, and the website from which you access the website (referrer URL) ("log files"). We process this data to ensure the functionality of our website, to optimize our website and to guarantee the security of our systems. The log files are deleted after the end of the respective browser session, at the latest after seven days.

In addition, we process personal data that we receive from you in the context of our business relationship or in the context of enquiries.

The relevant personal data of customers who use our services are: Name, title, address, e-mail address, telephone number, company details.

3. For what purpose and on what legal basis do we process your data?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

3.1 For the performance of contracts (Art. 6 para. 1 lit. b GDPR)

The processing of personal data (Art. 4 No. 2 GDPR) takes place for the provision of services, for the provision of pre-contractual measures and for answering your questions.

3.2 For legitimate interests (Art. 6 para. 1 lit. f GDPR)

If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or of third parties, for example in the following cases:

  • Answering your questions outside of a contract or pre-contractual measures;
  • advertising or market and opinion research, unless you have objected to the use of your data;
  • operation and optimization of the website;
  • enforcement of legal claims and defence in legal disputes;
  • ensuring our IT security and IT operations;
  • prevention and investigation of criminal offences.

3.3 On the basis of your consent (Art. 6 para. 1 lit. a GDPR)

If you have given us your consent to process personal data for specific purposes, this processing is legal on the basis of your consent.

You can withdraw your consent at any time. This also applies to the revocation of declarations of consent issued to us prior to the validity of the GDPR, i.e. before May 25, 2018.

Please note that the withdrawal will only take effect for the future. Processing that took place before the withdrawal is not affected by this.

3.4 Due to legal requirements (Art. 6 para. 1 lit. c GDPR)

In addition, we are subject to various legal obligations, i.e. legal requirements. The purposes of the processing include, among other things, the fulfilment of retention periods under commercial and tax law.

4. Cookies

[Anmerkung: Wir empfehlen, mit einem Cookie-Banner über die Nutzung von Cookies aufzuklären und die – nach Auffassung der Aufsichtsbehörden (Positionsbestimmung der Konferenz der unabhängigen Datenschutzbehörden des Bundes und der Länder vom 26. April 2018, S. 3 unter 9.) – für Tracking-Cookies erforderliche Einwilligung einzuholen. Hier ein Formulierungsvorschlag:

We use technically necessary cookies. If you click on "OK", we also use tracking cookies for web analysis and pass the data on to our reliable partners for web analysis. More information [Deep Link zu Ziffer 4 dieser Privacy Policy] OK [Button]

Bitte beachten Sie, dass keine Tracking-Cookies gesetzt oder andere Tracking-Technologien (z. B. Pixel) aktiviert werden dürfen, bevor der Nutzer auf „OK“ klickt. Sollte eine Umsetzung bis zum 25.5.2018 nicht mehr möglich sein, empfehlen wir, vorerst auf den Einsatz von Tracking Cookies (d.h. insbesondere Google Analytics) zu verzichten, bis ein Cookie-Banner eingerichtet ist.]

We use cookies on our website that collect your data using pseudonyms. Cookies are small text files that a website generates and which your Internet browser stores on your hard drive when you visit the website. You can prevent the use of cookies at any time by setting your Internet browser so that it does not accept new cookies (especially third party cookies) or notifies you of new cookies. You can also delete cookies that have already been saved in your Internet browser settings. You can get help on how to change your cookie settings in the help function of your Internet browser, for example. Further information on this and on cookies in general can be found, e.g., at http://www.allaboutcookies.org/ and http://www.youronlinechoices.com/. Please note that you may not be able to use some features of our website if you do not accept cookies.

On our website we use technically necessary cookies and web analysis cookies:

Technically necessary cookies

Most of the cookies we use are technically necessary to enable you to use our website and the services offered on it (e.g. secure login, adding products to the shopping cart in the order process) (“session cookies”). Our legitimate interest in data processing lies in these purposes; the legal basis is Art. 6 (1) (f) GDPR. The data will not be combined with other personal data and will not be used for advertising purposes. Session cookies are deleted after the end of the respective browser session, at the latest after seven days.

4.2 Web analysis cookies (Google Analytics)

If you have given your consent on our website, we also use cookies to create pseudonymous user profiles for the purpose of web analysis (“web analysis cookies”). These cookies enable us to identify returning users (device owners), analyze their behavior on our website, optimize our website and measure its reach. The legal basis for such data processing is Art. 6 (1) (a) GDPR. You give your consent to this tracking on our website by clicking on “OK” in our cookie banner; no web analysis cookies are set before this happens. We do not combine the data with other personal data and we do not use it for the targeted addressing of individual users for advertising purposes. The web analysis cookies are deleted after 14 months at the latest or if you withdraw your consent beforehand.

[Anmerkung: Wegen des datenschutzrechtlichen Grundsatzes der Datenminimierung empfehlen wir, Cookies nicht übermäßig lange – oder gar endlos – zu speichern. Einheitliche Vorgaben gibt es nicht, aber die französische Datenschutzbehörde empfiehlt z. B. eine Speicherdauer von höchstens 13 Monaten. Nach einer statistischen Erhebung beträgt die durchschnittliche Speicherdauer für Cookies in der EU 1-2 Jahre. Die gewählte Speicherdauer sollte sich also – je nach Bedarf an den Daten und angestrebtem Compliance-Level – in diesem Rahmen bewegen. Die hier zunächst vorgeschlagene Speicherdauer von 14 Monaten entspricht der Mindestspeicherdauer bei Google Analytics. Wir empfehlen, die durchschnittliche Obergrenze von zwei Jahren nicht auszureizen.]

For this web analysis we use the service Google Analytics, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Analytics uses cookies which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of the website (browser type/version, operating system used, referrer URL, host name of the accessing computer (IP address), date and time of the server request) are generally transferred to a Google server in the USA and stored there. On our website, we have extended Google Analytics with the code “anonymizeIp()” to guarantee an anonymous collection of IP addresses (so-called IP masking). Google will therefore reduce your IP address by the last octet within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The transfer of your information to a third country outside the EU is covered by an adequacy decision of the Commission (C/2016/4176 of 12 July 2016 – http://data.europa.eu/eli/dec_impl/2016/1250/oj) within the meaning of Article 45 GDPR, because Google has undertaken to comply with the principles of the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

On our behalf, Google uses this information as a processor within the meaning of Art. 28 GDPR to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website use and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You can prevent the use of cookies by selecting the appropriate settings on your browser (see above); however, please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google for all websites by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.

You can also – especially with browsers on mobile devices – prevent Google Analytics from collecting and processing your data by clicking here. [Bitte Opt-out-Link einfügen, dazu: https://developers.google.com/analytics/devguides/collection/analyticsjs/user-opt-out?hl=en).] An opt-out cookie will be set to prevent future collection of your data by Google Analytics when you visit this website. Please note that this opt-out cookie only applies to this browser and this website and will be deleted if you delete all cookies in your browser.

For more information on Google Analytics’ Terms of Use and Privacy Policy, please visit https://www.google.com/analytics/terms/gb.html and https://support.google.com/analytics/answer/6004245?hl=en.

5. E-mail marketing

If you have registered to receive the newsletter with information about the company, your consent will be recorded.

The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time, e.g. by clicking on the link at the end of an e-mail or by sending an e-mail to contact@mysnus.de. In this case your e-mail address will be deleted from the newsletter distribution list and added to our blacklist.

6. Who gets access to my data?

Within our organisation, those departments or individuals get access to your data who need it in order to fulfil our contractual and legal obligations.

Processors (Art. 28 GDPR) we use may also receive data for the aforementioned purposes. These are companies in the categories IT services, logistics, printing services, telecommunications, consulting and sales and marketing.

We pass on your personal data to third parties if this is necessary for the provision of our services, for billing purposes or for processing the contractual relationship between you and us (Art. 6 Para. 1 lit. b GDPR).

In addition, your personal data will be disclosed or transmitted if required to do so by law (Art. 6 para. 1 lit. c GDPR) or if you have given your consent (Art. 6 para. 1 lit. a GDPR).

Under these conditions, recipients of personal data can be, for example:

  • Subcontractors used to provide our services.
  • Payment services.
  • Public authorities and institutions in the event of a legal obligation or official order.

7. How long will my data be stored?

If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract. It should be noted that our business relationship is often a long-term relationship that is designed to last for years.

In addition, we are subject to various storage and documentation obligations.

Moreover, the storage period also depends on the statutory limitation periods.

After expiry of the storage and documentation obligations, we delete the data.

Log files are deleted within the deadlines mentioned above.

8. Is data transferred to a third country or an international organisation?

Data will only be transmitted to third countries (countries outside the European Economic Area (EEA)) if this is required for the execution of contracts or required by law or if you have given us your consent. We will inform you separately about details, if required by law.

9. What data protection rights do I have?

You have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to limitation of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). The restrictions according to Sec. 34 and 35 BDSG apply to the right of access and the right of cancellation. You also have the right to object to data processing by us (Art. 21 GDPR). If our processing of your personal data is based on consent (Art. 6 Para. 1 S. 1 lit. a GDPR), you can withdraw this at any time; the legality of data processing based on the consent until withdrawal remains unaffected by this.

To assert these rights and for further questions on the subject of personal data, you may contact our data protection officer or use our general contact data at any time.

Regardless of this, you have the right to file a complaint with a supervisory authority – in particular in the EU Member State where you are staying, working or allegedly infringed – if you believe that the processing of personal data concerning you violates the GDPR or other applicable data protection laws (Art. 77 GDPR, Sec. 19 BDSG).

10. Is there an obligation to provide data?

In the context of our business relationship you only have to provide the personal data which is necessary for the establishment, execution and termination of a business relationship or which we are legally obliged to collect. Without this data we will usually have to refuse the conclusion of the contract or the execution of the order or we will no longer be able to execute an existing contract and may have to terminate it.

11. To what extent is there automated decision making in individual cases?

We do not use fully automated decision making according to Art. 22 GDPR for the establishment and implementation of a business relationship. Should we use these procedures in individual cases, we will inform you separately, insofar as this is required by law.

12. To what extent is my data used for profile development (scoring)?

We do not process personal data automatically with the aim of evaluating certain personal aspects (profiling).