DATA PROTECTION
Information on how tooz online services (websites, apps, social networks) collect and process your personal information.
Data processing at tooz (e.g. collection, processing, transfer) is performed in accordance with the law. The personal information needed from you for business transactions is stored by us and transferred to service providers contracted by tooz to the extent necessary to process the transactions.
Scope of Application
This data protection notice applies to websites, domains, social media platforms and applications belonging to tooz. In some cases, tooz websites also contain links to websites of third-party, tooz-external companies to which this data protection and legal notice does not apply.
General Data Protection Standard
tooz is a corporation operating on a global scale which has cross-border legally business processes, management structures, and technical systems.
When you visit our websites, data may be collected which may, in some cases, be of a personal nature. In this notice, we point out what personal information tooz collects during your visit to our websites, and how we handle this data.
We consider the protection of your personal information a very serious matter. Our processing of your personal information collected during your visit to our websites is carried out fully in accordance with the relevant legal stipulations. In addition, our approach to dealing with personal information is based on the EU data protection principles which provide for the greatest possible degree of transparency, observance of the right to choose, access rights and the transmission and lawful processing of personal information.
tooz complies with the data protection laws which are applicable in its own particular case. At the same time, we have instructed our employees to refer to and comply with our data protection rules wherever personal information is requested on any website. To the extent legally permissible and with due regard for your legitimate interests in excluding the transmission or use of information, we may forward your address and creditworthiness data to, or request this data from, credit agencies in order to run credit checks for orders.
For orders paid for by invoice, and installment purchases, we use address data in addition to other creditworthiness data to estimate the risk of payment defaults in individual cases.
Furthermore, tooz is permitted to collect and process address and order information for its own marketing purposes. This means, for example, that tooz may compare email addresses collected during order processes with Facebook Ireland Limited’s email address lists in order to display personalized advertisements to the owner of the address. Facebook Ireland Limited is not permitted, however, to use the email address for any purpose other than comparing it with its address list. Information is sent to third parties for advertising purposes only in cases where it is legally permissible to do so.
Notice
You may object to the use, processing and transfer of your personal information at any time by means of an informal written letter addressed to tooz or via email (dataprivacy@tooztech.com). Upon receipt of your objection, we will cease to use, process and transfer the information in question for any purpose other than carrying out the orders and tasks you have requested; we will also cease to send you advertising and promotional materials.
Disclosure or objection
Want to know which of your personal information is processed by tooz? Want to object to having your information used? Under Article 15 of the General Data Protection Regulation and § 34 of the German Federal Data Protection Act 2017 you have a legal right to this and we are happy to comply with your request. Get in touch with us via email dataprivacy@tooztech.com.
Gathering, Processing and Transfer of Personal Information
tooz wants to give you as much control as possible over your personal information. Normally, you can access tooz websites without providing any personal information.
However, in certain areas of the tooz websites you are requested to enter personal data in order to help us enhance the site for you and keep in contact with you. Any personal information you submit is treated as confidential and is saved and processed exclusively within the scope of the relationship between you and tooz. Your personal information will not be forwarded, published or otherwise made available to third parties for marketing purposes without your prior approval.
Your personal data may be disclosed to additional categories of recipients for the purposes described in this privacy policy and the respective legal basis stated. These are in particular carefully selected partners who provide services for us. These service providers only handle your personal data as so-called processors on our behalf and according to our instructions. When transferring personal information to these third parties, we restrict ourselves to the information which is necessary for the provision of the service in question and we ensure that this transfer is carried out in compliance with the required data security. tooz will only transfer your personal information to third parties which have committed themselves to data protection and to the processing of your information in compliance with the applicable laws.
In addition, tooz may be forced by court or official orders to disclose your data and associated information. Likewise, we reserve the right to use your information for the assertion of or defence against legal claims.
In the event of a takeover or merger with another company, it may be necessary to disclose or transfer your information to actual or potential buyers. In this case, tooz will aspire to the highest possible level of data protection and will comply with the legal stipulations.
Legal basis for processing personal data
We process your data only in compliance with the applicable laws. In particular, we will process your data in accordance with Article 6 and Article 9 of the General Data Protection Regulation (GDPR), as well as in accordance with the conditions for consent in Article 7 GDPR. We will process your data, among other things, upon the following legal bases. Please note that this is not a complete or exhaustive list of the legal bases. These are merely examples intended to render the legal foundations more transparent.
- Consent (Article 6, paragraph 1, sentence 1, letter a GDPR and Article 7 GDPR or Article 9, paragraph 2, letter a and Article 7 GDPR): we will only process certain data on the basis of your explicit and voluntary consent given in advance. You have the right to revoke your consent at any time with effect in the future.
- Performance of a contract / pre-contractual measures (Article 6, paragraph 1, sentence 1, letter b GDPR): we need access to certain data to initiate or perform your contract with tooz.
- Compliance with a legal obligation (Article 6, paragraph 1, sentence 1, letter c GDPR): tooz is subject to a series of legal requirements. In order to meet these requirements, we must process specific data.
- Protection of legitimate interests (Article 6, paragraph 1, sentence 1, letter f): tooz will process specific data to protect its interests or those of third parties. However, this only applies if your interests in the individual case do not override other legitimate interests.
Rights of those affected
You are entitled to request information regarding the personal data we process at any time; you may also object to the processing of this information as well as request that the extent to which your personal information is processed be limited, that information be corrected or that information be deleted. Please note that tooz may only delete your personal information in the event that no legal stipulations exist which require this information to be stored, or in the event that tooz’ right to store this information does not take precedence over your right to have it deleted. Please also note that once you have requested to have your information deleted, or to have the processing of your information limited, or you have objected to the processing of your information, you may then no longer use tooz services, in part or in full, which require the use of your personal information.
If your personal information is being used by tooz because you have agreed to have it used, or because it is required for the fulfilment of a contract you have concluded with tooz, you may request a copy of the information that you have made available to tooz. Please send your request to dataprivacy@tooztech.com. Be sure to include which data or processing activities you are requesting information about, in what format you would like to receive this information, and whether the information should be sent to you or another recipient. tooz will carefully review your request and inform you of the best way to fulfil it.
Furthermore, in the following cases you can ask tooz to not share your personal information with others:
- If you claim that the personal information held by tooz is incorrect (however, the processing of information in this case will only be limited during the period of time needed by tooz to verify the accuracy of the personal information in question),
- If there is no legal basis for the processing of your personal information by tooz and you request that tooz cease processing your information,
- If tooz no longer needs your personal information, but you claim that tooz must store this information so that legal claims can be raised or exercised, or so that the claims of third parties can be defended, or
- If you object to the processing of your personal information by tooz (on the basis of tooz’ legitimate interest), for the length of time required to verify if tooz’ interest in processing your personal information takes precedence or if a legal requirement to store the information exists.
You have the right to complain to a supervisory authority or our data protection coordinator, in case you have a reason to complain. To exercise your rights against our company, please contact the contact person listed at the end of this privacy policy.
You can also contact the supervisory authority that is responsible for your place of residence or your state, or the supervisory authority that is responsible for us.
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart
Tel.: +49 711 6155410
Email: poststelle@lfdi.bwl.de
Personal data of children
tooz does not intentionally collect or process the information of children under the age of 16, or as required by local laws. tooz adheres to the applicable data protection laws on these websites.
Compliance with regulations
tooz and its products, services and technologies are subject to the export regulations of various countries, including those of the European Union and its member states and those of the United States. You acknowledge that tooz is required, per applicable export regulations, trade sanctions, and embargos, to take measures to prevent companies, organizations, and parties named in sanction party lists from acquiring certain products, technologies, and services through tooz websites or delivery channels controlled by tooz. These measures may include the following:
1. The automated comparison of user registration information described in this notice and other information related to the user’s identity with applicable sanction lists;
2. Regular and repeated comparisons of this information as sanction lists are updated or as the user updates his or her information;
3. The blocking of access to the services and systems of tooz if a user is potentially found in an applicable sanction list;
4. Establishing contact with the user in the event his or her information is found in a sanction list, in order to verify his or her identity.
Legitimate interest of tooz
Each of the items listed below presents a case in which tooz has a legitimate interest in processing and using your personal information. If you do not agree to having your information processed and used by tooz in these ways, you may object to these processing activities.
Questionnaires and surveys
tooz may invite you to participate in customer surveys. The questionnaires used for these surveys are designed in such a way that the questions can be answered without providing personal information. However, any personal information provided in a questionnaire or survey may be used by tooz to improve its products and services.
Generation of anonymized data sets
tooz may anonymize the personal information covered by this data protection statement to create anonymized data sets which can be used to improve tooz products and services.
To keep you informed about updates and collect feedback
Within the framework of tooz’ relationship with you as a customer, tooz may keep you informed, to the extent permitted by law, about its products and services which are similar to the products and services which you have already purchased from tooz or which you use, or products or services which are directly related. Moreover, tooz may contact you to collect feedback regarding products, services, seminars, webinars or events which you have purchased or attended for the purpose of improving the product, service, webinar, seminar, or event in question.
Information on data security
tooz knows how important it is that the information you provide to us is handled discreetly and is protected. Data security on our websites is a top priority. We have therefore made great efforts to ensure that our online security measures are effective. Essential data traffic on the tooz websites is therefore encrypted. tooz endeavors to update its encryption technology on a continuous basis in line with technical progress, in order to guarantee the confidential handling of the information you send us over the Internet.
To the extent technically possible, for example to measure the use and effectiveness of a web-page, as well as for authentication and simplification of navigation, we use various technologies including “cookies”. A cookie is a data item which a website sends to your browser. It is stored on your system and is used to identify it (see Cookies, Web Tracking and Web Analytics).
During a visit to our websites visitors’ IP addresses are captured for the analysis of malfunctions, for website administration, and for the establishment of demographic characteristics. Furthermore, we use the IP addresses and other information, made available to us by you on this website or by other means as required, to find out which of our websites are being visited and what topics interest our visitors.