Now shipping to the UK!
German engineered
1 - 3 working days delivery time
Shipping with DHL GoGreen

  • TWIST is the beginning of the revolution that freed the bottle from its old-fashioned cage!

  • Two strong, invisible forces combined for a secure and ingenious connection to attach your phone to the bike.

  • Action-packed video from multiple perspectives. Change the action cam in seconds without changing the camera angle.

  • The HERMETIC dry bags with patented Gooper® technology are the only hermetic self-sealing bags that fasten with a magnetic latching system.

  • Innovative FIDGUARD technology inhibits bacterial growth in the residual moisture on the inside of the bottle.

Privacy

Protecting your privacy is an important concern to us. We therefore urgently ask you to carefully read the following summary of how our website www.fidlock.com and other web presences, such as FIDLOCK Talks, function. The privacy policy presented here complies with the requirements of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). It is intended to inform you about the nature, purpose and use of personal data by the website operator FIDLOCK GmbH. Although our web presences are equipped with various security measures, complete protection of your data cannot be guaranteed, as security vulnerabilities on the Internet cannot be ruled out. If you have any concerns regarding the collection of your data, you will find the relevant contact details under Section I.

I. Name and Address of the Controller

The controller within the meaning of the GDPR and other national data protection laws of the member states, as well as other data protection regulations, is:

FIDLOCK GmbH, Kirchhorster Straße 39, 30659 Hannover
Tel.: +49 511 961 593 10 (Components) / +49 511 961 593 50 (Consumer Products),
Fax: +49 511 961 593 29
E-mail: info@fidlock.com (Components) / info@fidlock-bike.com (Consumer Products),
Web: www.fidlock.com

For questions, requests for information, applications, complaints or criticism regarding our data protection, you may contact the controller listed here.

II. Name and Address of the Data Protection Officer

The correct implementation of data protection is supported by an external data protection officer. If you have concerns regarding the processing of your personal data, you also have the option of contacting this person directly.

The controller's data protection officer is:

Mr. Christopher Lenz, employed by backoffice360 GmbH, Gustav-Adolf-Straße 30, 30167 Hannover
Tel.: +49 511 1247 220,
E-mail: cl@backoffice360.de

III. General Information on Data Processing

1. Scope of the Processing of Personal Data

We generally process the personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of our users' personal data regularly takes place only with the user's consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted or mandatorily prescribed by statutory provisions. We use your personal data only within our company. If personal data is passed on to service providers as part of commissioned data processing, we oblige them to comply with the GDPR and the BDSG. We only pass on your data to bodies entitled to receive information insofar as we are legally obliged to do so or are required to do so by court order.

2. Legal Bases for the Processing of Personal Data

Legal bases for data processing:

Art. 6 para. 1 lit. a) GDPR: Obtaining the consent of the data subject

Art. 6 para. 1 lit. b) GDPR: Data processing for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures

Art. 6 para. 1 lit. c) GDPR: Data processing for compliance with a legal obligation to which the controller is subject

Art. 6 para. 1 lit. d) GDPR: Data processing in order to protect the vital interests of the data subject or another natural person

Art. 6 para. 1 lit. f) GDPR: Data processing for the purposes of safeguarding the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data

3. Data Deletion and Storage Period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may take place beyond this period if this is provided for by the European or national legislator in regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

4. Obligation of Employees to Comply with Data Protection

The employees of FIDLOCK GmbH are contractually obliged to comply with data protection requirements.

IV. Data Processing When Using Our Online Shop

1. Description and Scope of Data Processing

a. Ordering Process

If you shop in our online store, we process the following personal data from you in order to process your order:

  • Order number
  • Last name, first name
  • Address (billing and delivery address)
  • Country
  • E-mail address
  • Telephone number
  • Payment data
  • Text entered by the user in the designated free-text field

As part of the ordering process, your consent to the processing of this data is obtained.

b. Credit Check

In order to prevent abusive behavior, we reserve the right to transmit your data to credit agencies for the purpose of carrying out a credit check. Our aim is to obtain information relevant to your creditworthiness regarding your previous payment behavior, information for assessing the risk of payment default on the basis of mathematical-statistical procedures using address data (scoring), as well as data for verifying your address (checking deliverability). We cooperate with heidelpay GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany. The legal basis for the credit check is Art. 6 para. 1 lit. f) GDPR. The following data about you is transmitted to the credit agency:

  • First name, last name
  • Address (billing and delivery address)
  • Country

We pass on your data to our partner companies to the extent permitted by law, which support us in the proper fulfillment of contracts. These companies are themselves obliged to comply with the applicable data protection regulations; in particular, these companies may process the data exclusively for the fulfillment of their tasks on our behalf and only according to our instructions.

2. Legal Basis for Data Processing

The legal basis for the processing and storage of personal data through the use of our online shop is Art. 6 para. 1 lit. b) GDPR.

3. Purpose of Data Processing

The collection, processing and storage of personal data takes place in order to identify you as our customer, to process, fulfill and handle your order, to correspond with you, to issue invoices, to handle any liability claims that may arise, to ensure the technical administration of our website and to manage our customer data.

4. Duration of Storage

The personal data collected by us for the processing of your order will be stored until the expiry of the statutory retention obligation and then deleted, unless you have consented to storage beyond this period pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.

5. Possibility of Objection and Removal

The collection, processing and storage of personal data is absolutely necessary for the operation of the online shop. Consequently, there is no possibility for the user to object.

V. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

  • Information about the browser type and the version used
  • The user's operating system
  • The user's Internet service provider
  • The user's IP address
  • Date and time of access
  • Websites from which the user's system reaches our website
  • Websites accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f) GDPR.

3. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f) GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of storing the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the users' IP addresses are deleted or altered so that the accessing client can no longer be assigned.

5. Possibility of Objection and Removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

VI. Use of Cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after changing pages. The following data is stored and transmitted in the cookies:

  • Language settings
  • Login information
  • Screen resolution

2. Legal Basis for Data Processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR.

3. Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized again after changing pages.

We require cookies for the following applications:

  • Language settings
  • Login information
  • Screen resolution
  • Cookie Accept (notice banner)

The user data collected through technically necessary cookies is not used to create user profiles. These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR.

4. Duration of Storage, Possibility of Objection and Removal

Cookies are stored on the user's computer and transmitted from there to our website. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Change Cookie Settings

VII. Newsletter

1. Description and Scope of Data Processing

It is possible to subscribe to a free newsletter. This regularly informs you by e-mail about new products, events and trade fairs, events by FIDLOCK Talks and other news from FIDLOCK. When registering for the newsletter, the data from the input form is transmitted to us.

Data collected:

  • E-mail address (mandatory)
  • First and last name (voluntary)
  • Company (voluntary)
  • Region or time zone (voluntary)

In addition, the following data is collected during registration: date and time of registration.

For statistical purposes, to identify reading habits and to personalize content, it is also recorded whether and when newsletters are opened and which links are clicked. As part of the registration process, your consent to the processing of the data is obtained using a so-called double opt-in procedure, and reference is made to this privacy policy. The double opt-in procedure means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering using someone else's e-mail address.

No data is passed on to third parties in connection with the processing of data for sending newsletters. The data you enter here is used solely to personalize and send the newsletter.

We use various service providers for sending newsletters. The newsletter for our B2B website fidlock.com/components is sent via the service provider CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany. You can view the service provider's privacy policy here: https://www.cleverreach.com/de/datenschutz/. A data processing agreement pursuant to Art. 28 para. 3 sentence 1 GDPR has been concluded with the service provider.

The newsletter for our online shop fidlock.com/consumer is sent via the service provider Sendiblue, Köpenicker Str. 126, 10179 Berlin, Germany. You can view the service provider's privacy policy here: https://de.sendinblue.com/datenschutz-uebersicht/. A data processing agreement pursuant to Art. 28 para. 3 sentence 1 GDPR has been concluded with the service provider.

We use the Google service reCaptcha to determine whether a human or a computer is making a specific entry in our newsletter form. Google checks the following data to determine whether you are a human or a computer: IP address of the device used, the website you visit and on which the Captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas, as well as tasks in which you have to identify images. The legal basis for the described data processing is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in this data processing, namely to ensure the security of our website and to protect ourselves against automated inputs (attacks).

2. Legal Basis for Data Processing

The legal basis for the processing of data after registration for the newsletter by the user, provided that the user has given consent, is Art. 6 para. 1 lit. a) GDPR. Giving your consent is voluntary. However, if you do not wish to give your consent, we cannot offer you the newsletter service.

3. Purpose of Data Processing

The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used. For statistical purposes, to identify reading habits and to personalize content, it is also recorded whether and when newsletters are opened and which links are clicked.

4. Duration of Storage

The data (e.g. opening and click rates) is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The other personal data of the user collected during the registration process will be deleted one month after receipt of the unsubscribe request and/or withdrawal of consent, unless statutory provisions or another legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR prevent deletion. In such a case, the processing of this data will be limited to the purpose of possible defense against claims. The same applies to personal data of users collected during the registration process who have started but not completed the double opt-in procedure. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

5. Possibility of Objection and Removal

The newsletter subscription can be canceled by the data subject at any time. For this purpose, each newsletter contains a corresponding link. This also enables the withdrawal of consent to the storage of the personal data collected during the registration process. In addition, unsubscribing, withdrawing consent and objecting to storage can be done by sending an e-mail to newsletter@fidlock.com.

VIII. Contact Form and E-Mail Contact

1. Description and Scope of Data Processing

Various contact forms are available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input form is transmitted to us and stored.

This data includes:

  • Salutation
  • Name
  • Indication of whether a company or private individual
  • Industry
  • E-mail
  • Country
  • Telephone
  • Message

At the time the message is sent, the following data is also stored: date and time of sending.

As part of the submission process, your consent to the processing of the data is obtained and reference is made to this privacy policy. Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail is stored. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing

If the user has given consent, the legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

3. Purpose of Data Processing

The processing of personal data from the input form serves us solely to process the contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input form of the contact form and that transmitted by e-mail, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the submission process is also deleted when the matter has been conclusively clarified.

5. Possibility of Objection and Removal

The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. Consent can be withdrawn and objection to storage can be made by sending an e-mail to info@fidlock.com. All personal data stored in the course of contacting us will then be deleted.

IX. Events

1. Description and Scope of Data Processing

We regularly offer interested parties digital events via our web presence FIDLOCK Talks. Participation in events requires a user account, which must be created by registering.

Data collected:

  • Salutation (mandatory)
  • First and last name (mandatory)
  • Company (voluntary)
  • E-mail (mandatory)
  • Password (mandatory)

In addition, the date and time of registration are collected.

After completing the registration process, you will receive an e-mail in which you must confirm the creation of your user account. This so-called double opt-in procedure is necessary to prevent unwanted registrations using third-party information.

Once the user account has been set up, you can register for events on FIDLOCK Talks. We will send you confirmation of participation as well as a reminder before the event begins by e-mail.

The events are conducted using the GoToWebinar tool provided by LogMeIn Ireland Limited. Your user account information is processed by GoToWebinar for your participation and for conducting the event. If you participate via the chat function or by speaking, this data will also be processed. Video images of participants are not transmitted or processed.

Additional information about GoToWebinar can be found from the provider in the LogMeIn Trust & Privacy Center at https://www.logmein.com/de/trust

For FIDLOCK Talks, we have concluded a data processing agreement with the provider LogMeIn Ireland Limited. For completed events, we offer you resources relating to past events in a media library.

2. Legal Basis for Data Processing

The legal basis for the processing of data when registering a user account and participating in events, provided that consent has been given, is Art. 6 para. 1 lit. a) GDPR.

3. Purpose of Data Processing

The collection of mandatory information when registering a user account serves to plan and organize events and to inform interested parties. The registration itself serves to prevent misuse of the event platform. The processing of data in connection with events serves exclusively to provide and conduct the event.

4. Duration of Storage

The data of the user account and registration are stored for as long as the user account is used. Upon request, the user account and the data contained therein can be deleted. Further storage only takes place if statutory provisions require this or a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR prevents deletion. Instead of deletion, the data may then be blocked. A legitimate interest as a purpose is limited to the possible defense against claims.

The user account will be deleted within 14 days.

Data collected during an event is stored only for the duration of the event. Any further processing of the data only takes place with the consent of the data subject.

5. Possibility of Objection and Removal

The user account can be canceled by the data subject at any time. To request deletion, you can contact talks@fidlock.com. This also enables the withdrawal of consent to the storage of the personal data collected during the registration process.

X. E-Mail Applications

1. Description and Scope of Data Processing

As a result of an e-mail application initiated by you, we process personal data that you provide to us electronically for the purpose of your application. All personal data is treated strictly confidentially and exclusively for the specific purpose of processing your e-mail application in accordance with the applicable statutory data protection regulations.

As part of your e-mail application, we collect and process the following personal data:

  • Name, first name
  • Address
  • Telephone number
  • E-mail address
  • Application documents (cover letter, CV, references, certificates, photo, etc.)

The personal data and files you submit will not be passed on to third parties unless you have expressly consented to the transfer beforehand or there is a statutory obligation to transfer them.

2. Legal Basis for Data Processing

The legal basis for data processing after receipt of your e-mail application is Art. 6 para. 1 lit. b) GDPR in conjunction with § 26 para. 1 BDSG new version.

3. Purpose of Data Processing

The collection and processing of your personal application data is carried out exclusively for the purpose of filling positions within our company. Your data is generally only forwarded to the internal departments and specialist departments of our company responsible for the specific application procedure. If your application is successful, the data and files you provide may be used for administrative matters in connection with employment.

4. Duration of Storage

If the application is unsuccessful, we store the personal data and files submitted for six months in our applicant database in order to be able to answer subsequent questions about the application. After six months, the data and files are deleted. This does not apply if statutory provisions prevent deletion, further storage is necessary for evidentiary purposes, or you have expressly agreed to longer storage.

If we are unable to offer you a position currently available, but based on your profile we believe that your application might be of interest for future vacancies, we will store your personal application data beyond the six-month period, provided that you have expressly consented to such storage and use.

5. Data Security

We attach great importance to the security of our system and use modern data storage and security technologies to protect your data as effectively as possible. All systems in which your personal data is stored are protected against access by third parties and are accessible only to a specific group of persons responsible for personnel matters. We would like to point out that complete data security cannot be guaranteed by us when communicating by e-mail.

6. Possibility of Objection and Removal

As part of the e-mail application, you may request at any time that individual personal data or files submitted by you be deleted. However, we reserve the right to store a limited amount of your data for a limited period of six months in order to comply with statutory provisions, in particular obligations to provide evidence under the General Equal Treatment Act (AGG). The same applies if you wish to withdraw your application. Consent can be withdrawn and objection to storage can be made by sending an e-mail to fidlock-gmbh-jobs@m.personio.de.

XI. Web Analysis by Google Analytics

1. Scope of the Processing of Personal Data

We use the Google Analytics software tool on our website www.fidlock.com and other web presences to analyze the surfing behavior of our users. The software places a cookie on the user's computer (see above for cookies). When individual pages of our web presences are accessed, the following data is stored:

  • Two bytes of the IP address of the user's accessing system
  • The website accessed
  • The website from which the user reached the website accessed (referrer)
  • The subpages accessed from the website accessed
  • The time spent on the website
  • The frequency of access to the website
  • Information about the browser type and the version used
  • The user's operating system

The web presences use Google Analytics reports on demographic characteristics, which use data from interest-based advertising by Google, as well as visitor data from third parties (e.g. age, gender and interests). This data cannot be attributed to a specific person and can be deactivated at any time via the ad settings.

The information generated by the cookie about your use of these websites (including your IP address) is transmitted to and stored on a Google server in the USA. Google will use this information to evaluate your use of the web presences, to compile reports on website activities for the website operators and to provide further services associated with website use and Internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on Google's behalf. Google will in no case associate your IP address with other Google data.

You can prevent the installation of cookies by making the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of these websites to their full extent.

The software is configured so that the IP addresses are not stored in full, but two bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the accessing computer.

2. Legal Basis for the Processing of Personal Data

The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f) GDPR.

3. Purpose of Data Processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data collected, we are able to compile information about the use of the individual components of our web presences. This helps us to continuously improve our websites and their user-friendliness. These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6 para. 1 lit. f) GDPR. The anonymization of the IP address adequately takes into account the users' interest in protecting their personal data.

4. Duration of Storage

After the IP address has been altered/masked, it is no longer considered personal data. Therefore, these masked IP addresses are not automatically deleted.

5. Possibility of Objection and Removal

You can also prevent Google from collecting the data generated by the cookie and related to your use of the websites (including your IP address), as well as prevent Google from processing this data, by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

An opt-out cookie is set which prevents the future collection of your data when visiting this website. Further information can be found at http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).

We would like to point out that Google Analytics on this website has been extended by the code “gat._anonymizeIp();” to ensure anonymized collection of IP addresses (so-called IP masking).

XII. Use of Facebook Remarketing

Within our online offering, the so-called “Facebook Pixel” of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used based on our legitimate interests in the analysis, optimization and economic operation of our online offering and for these purposes. The processing is based on Art. 6 para. 1 lit. a) GDPR arising from the legitimate interest in the aforementioned purpose.

With the help of the Facebook Pixel, Facebook is able, on the one hand, to determine visitors to our online offering as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”).

With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and are not annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advertisement (so-called “conversion”).

The Facebook Pixel is integrated directly by Facebook when our websites are accessed and may store a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, the visit to our offering is recorded in your profile.

The data collected about you is anonymous to us and therefore does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, meaning that a connection to the respective user profile is possible. The processing of data by Facebook takes place within the framework of Facebook's data usage policy.

Accordingly, you can find further information on how the remarketing pixel works and on the display of Facebook Ads generally in Facebook's data usage policy: https://www.facebook.com/policy.php.

You can revoke the collection by the Facebook Pixel and the use of your data for displaying Facebook Ads here. To set which types of advertisements are displayed to you within Facebook, you can access the page provided by Facebook and follow the instructions for setting usage-based advertising:

https://www.facebook.com/settings?tab=ads

The settings are platform-independent, meaning that they apply to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative:

http://optout.networkadvertising.org/

and additionally via the US website:

http://www.aboutads.info/choices

or the European website:

http://www.youronlinechoices.com/uk/your-ad-choices/

XIII. Use of Social Media

Our websites use plugins from various social networks (“Facebook”, “Twitter”, “Instagram”, “YouTube”, “Xing”). The buttons are marked with the logo of the respective social network.

When you visit our websites, the corresponding buttons are deactivated or merely linked, so that no data is sent to the social networks without clicking the respective buttons. After activation, a direct connection to the respective social networks is established.

If you are logged in to a social network, the provider may assign the visit to your account. If you do not want this, we recommend that you log out of your account beforehand.

Even if you are not a member of a social network, it is still possible that the provider may obtain and store your IP address, for example. If you do not want this, you should not click the button.

FIDLOCK has no influence on the purpose and scope of data collection or the further processing and use of the data by the social networks. You should refer to the respective privacy policies of the social networks for regulations concerning data protection and your rights in this regard.

XIV. DoubleClick

DoubleClick is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick uses cookies to present you with relevant advertisements. A pseudonymous identification number (ID) is assigned to your browser in order to check which advertisements were displayed in your browser and which advertisements were accessed.

The use of DoubleClick cookies enables Google and its partner websites to display advertisements based on previous visits to our websites or other websites on the Internet.

You can permanently deactivate this cookie at:

https://www.google.com/settings/ads/plugin?hl=de

We have integrated YouTube videos into our online offering that are stored on www.youtube.com and can be played directly from our website. We use the so-called “Enhanced Privacy Mode” of the YouTube provider to embed videos.

According to YouTube, no information about visitors to our website is stored in this case unless they watch the video. Despite the use of the Enhanced Privacy Mode, however, it cannot be ruled out that Google may set a DoubleClick cookie for advertising purposes. You can permanently deactivate this cookie at:

https://www.google.com/settings/ads/plugin?hl=de

XV. Installation of Third-Party Programs

If additional programs such as Java Script, Flash® (Adobe), etc. are required for the correct display of the websites or the media service, such programs must first be installed by you in your capacity as a visitor to the websites or the media service.

No automatic installation of required software takes place without consent. However, FIDLOCK GmbH reserves the right to offer such additional programs to the visitor without installing them on the visitor's computer without their consent.

FIDLOCK GmbH is under no obligation to ensure the correct display of the web presences.

XVI. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

1. Right of Access

You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing exists, you may request information from the controller about:

  • the purposes for which the personal data is processed;
  • the categories of personal data being processed;
  • the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
  • the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  • the existence of a right to rectification or deletion of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the source of the data, if the personal data is not collected from the data subject;
  • the existence of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject. (Currently not used.)

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to Rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without undue delay.

3. Right to Restriction of Processing

Under the following conditions, you may request restriction of the processing of personal data concerning you:

  • if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • if the processing is unlawful and you refuse the deletion of the personal data and instead request restriction of the use of the personal data;
  • if the controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise or defense of legal claims; or
  • if you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override your reasons.

If the processing of personal data concerning you has been restricted, such data may – apart from its storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted according to the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.

4. Right to Erasure

a. Obligation to Erase

You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without undue delay if one of the following reasons applies:

  • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent, on which the processing pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR was based, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
  • The personal data concerning you has been unlawfully processed.
  • The deletion of the personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

Information to Third Parties

If the controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, the controller shall, taking account of available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the deletion by such controllers of all links to, or copies or replications of, this personal data.

b. Exceptions

The right to erasure does not exist insofar as processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defense of legal claims.

5. Right to Information

If you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

6. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.

You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible.

The freedoms and rights of other persons must not be adversely affected by this.

The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

8. Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent under data protection law at any time.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

9. Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

  • is necessary for entering into or performing a contract between you and the controller;
  • is authorized by Union or Member State law to which the controller is subject and that law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
  • is based on your explicit consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (1) and (3), the controller shall take reasonable measures to safeguard your rights and freedoms as well as your legitimate interests, which shall include at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

10. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Competent Supervisory Authority:

The State Commissioner for Data Protection of Lower Saxony
Barbara Thiel, Prinzenstraße 5, 30159 Hannover
Tel.: +49 511 120 45 00, Fax: +49 511 120 45 99
E-mail: poststelle@lfd.niedersachsen.de

XVII. Amendment of the Privacy Policy

We, as the controller, reserve the right to amend the privacy policy at any time with regard to applicable data protection regulations.

Status: May 2022