1. Controller and contact details of the data protection officer
We, BananaBlitz, are responsible for all processing of personal data in Germany. We are located at Mosczinskystr 12 in 01069 Dresden. You can reach us by email at w55115994@gmail.com.
2. Purposes and legal bases of data processing
All the data we collect from you is collected for a specific purpose. Below you will find all the purposes and categories of data we collect for each purpose.
2.1. Automatically collected access data
When you visit our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes, in particular, the IP address of the requesting device, the date and time of the request, the address of the website called up and the requesting website, technical information about the browser used and the operating system as well as online identifiers (e.g. device identifiers, session IDs).
In the case of merely informational use of the app, i.e. even before registration, we only collect the personal data that is required for the use of the app.
This includes:
The processing of this access data is based on our legitimate interests: To enable the visit of the website or app, to ensure the permanent functionality and security of our systems, as well as to generally administratively maintain our website and apps.
2.2. Contact us
You have the option of contacting us via various channels. In this context, we process your personal data exclusively for the purpose of communicating with you. Either to fulfil or initiate a contract with you, or to be able to answer your enquiry based on our legitimate interest.
2.3. Registration and login
You have the option of registering for our login area in order to be able to use the full range of functions of our services. The minimum data you must enter (first and last name, e-mail address, telephone number, password) are marked as mandatory fields. Registration is not possible without this data. We process this data in order to fulfil or initiate a contract with you and also on the basis of our legitimate interest to enable you to create an account and to provide other related services, which are named in this data protection declaration.
2.4. Orders
If you place an order, we collect the mandatory data necessary for the processing of the contract. This includes your first and last name, email address, telephone number, password and the delivery addresses provided. We process this data in order to fulfil a contract with you
In order to process payments (e.g. SEPA direct debit, PayPal), we use the service provider Paypal, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in order to fulfil the contract. Your personal data will only be passed on for the purpose of payment processing with Paypal.
2.5. Product recommendations and existing customer advertising
Based on the purchase history of your ordered products and your favourite products, we may offer you suitable product recommendations for the same or similar products by email, push notification, pop-up message and within the website / app.
For push notifications and pop-up messages, the legal basis is your consent. The legal basis for product recommendations within the website / app is our legitimate interest in showing you product recommendations for the purpose of direct advertising.
If we send you e-mails and/or text messages with product recommendations based on your purchases from us, the data processing is based on Art. 6 Para. 1 lit. f GDPR in conjunction with Section 7 Para. 3 UWG ("existing customer advertising"). You can object to the use of your data for advertising purposes at any time by using a corresponding link in the e-mails or a message by text message or by notifying the above-mentioned contact details (e.g. by e-mail or letter), without incurring any costs other than the transmission costs according to the basic rates.
2.6. Applications
You can apply online via the application page for bike couriers for open positions. The purpose of the data collection is the selection of applicants for the possible establishment of an employment relationship. Further information can be found in our data protection declaration for applicants.
3. Use of cookies and similar technologies
We use cookies and similar technologies (collectively, "Tools") provided either by ourselves or by third parties.
We have categorised our Tools as Essential, Functional, Marketing and Analytics and Advertising.
Tools in the Essential category are enabled by default and cannot be disabled as you will not be able to use our services without the Essential Tools. All other cookies are only used with your consent. You can give and revoke this consent here.
3.1. Essential tools
We use certain tools to enable the basic functions of our services ("necessary tools"). Without these tools, we could not provide our service. Therefore, Necessary Tools are used without consent on the basis of our legitimate interests, to fulfil a contract or to carry out pre-contractual measures.
3.1.1. Own cookies
We store the following information in particular in our own necessary cookies to provide the basic functions of our services: login authentication, language, shopping cart contents, checkout fields for completing the order, address selected/entered, device location data, payment method selected, order history and search history.
3.1.2. Segment Consent Manager
To obtain and manage your consents, we use the Segment Consent Manager, which we have built into our website as an open source application. This generates a banner that informs you about the data processing on our website and gives you the option to consent to all, some or none of the data processing through optional tools. This banner will appear (i) the first time you visit our website and (ii) when you revisit your choice of settings to change them or to withdraw your consent. The banner will also appear on subsequent visits to our website if you have disabled the storage of cookies.
The Segment Consent Manager sets a necessary cookie ("tracking-preferences") in order to store your consents and revocations. If you delete the cookie or it expires after 365 days, we will ask you again for your express consent when you visit the site at a later date.
The setting of the cookie is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis for using this tool is our legitimate interest in fulfilling the legal requirements for consent management.
3.1.3. Typeform
Our website uses the Hostinger service provided by Hostinger S.L. Typeform is used to collect feedback from our customers and to inform them by email when our services are also available in the customer's area. To do this, Typeform collects your email address and postcode. You can decide yourself whether to send us your data for these purposes. The transmission takes place as soon as you press the send button.
3.2. Functional tools
We also use tools to improve the user experience on our website and to provide you with more features ("functional tools"). Although these are not strictly necessary for the basic functionality of the website, they can bring you as a user some advantages, in particular with regard to user-friendliness and the provision of additional communication, presentation or payment channels.
The legal basis for the functional tools is your express consent.
3.2.1. Braze
We use the Braze Android and iOS SDK from Braze, Inc., 318 West 39th Street, 5th Floor New York, NY 10018, USA ("Braze") to deliver notifications and recommendations via email, push notification, pop-up message and within the app or website (in-app message).
Braze processes the following data in particular to control the sending of notifications and to analyse user interaction for this purpose: Email address, push token, usage information, campaign information, in particular regarding notifications already received, and device information, in particular the IP address, user agent, operating system, resolution, language and device model. In addition, Braze may also store information in the end device.
3.2.2. Intercom
We use the Intercom Messenger service provided by Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland with servers located in the USA ("Intercom"). It is a customer service platform for interaction via chat or email between visitors/customers and Flink for the purpose of support and rapid communication. In this way, we can provide you with prompt assistance in the event of questions arising. The following data is processed by Intercom: If provided by you: First and last name, e-mail address, telephone number; technical information about your device, browser, operating system and selected language, IP address including the outgoing location, usage data when using the live chat tool: Time and duration of use, links clicked and pages viewed as well as the information you entered in the chat.
Intercom also sets cookies and stores information in local storage to implement the functionality of the customer service platform.
3.2.3. Optimizely
We use Optimizely, a service provided by Optimizely Inc, 631 Howard Street, Suite 100, San Francisco, CA 94105, USA ("Optimizely"), to test different versions, new features and designs of our website. This also includes a usage analysis in order to evaluate the effects of changed designs or features, in particular with regard to the conversion rate. In particular, technical device data and usage data on visitor behaviour and the triggering of certain events are processed for this purpose. In addition, Optimizely is also used for debugging by detecting and correcting errors on the website.
Optimizely also sets cookies and stores information in local storage.
3.3. Marketing und analytical tools
In order to improve our website, we use tools for the statistical collection and analysis of general usage behaviour based on access data ("analysis tools"). We also use analytics services to evaluate the use of our various marketing channels.
The legal basis for the analysis tools is your explicit consent.
3.3.1. Google Analytics
Our website uses the web analytics service Google Analytics, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East and Africa (EMEA) and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together "Google") for all other users. We integrate Google Analytics into our website using the Segment tool (see section 3.4.1).
Google Analytics uses cookies and similar technologies to analyse and improve our website based on your user behaviour. Google processes the data to compile reports on website activity for the website operator and to provide other services related to website activity and internet usage. Your IP address is anonymised before further processing so that no conclusions can be drawn about your identity.
In particular, the following data may be processed by Google Analytics: Anonymised IP address, referrer URL (previously visited page), pages viewed (date, time, URL, title, duration of visit), files downloaded, links clicked to other websites, achievement of certain goals (conversions), technical information: Operating system; browser type, version and language; device type, brand, model and resolution; and your approximate location (country and city, if applicable, based on anonymised IP address).
The data processing of Google Analytics may also take place on servers in the USA. We have concluded an data processing agreement with Google for the use of Google Analytics as well as so-called standard contractual clauses in the event that personal data is transferred to the USA or other third countries.
3.4. Advertising tools
We also use tools for advertising purposes ("marketing tools"). Some of the access data collected when you use our website is used for interest-based advertising. By analysing and evaluating this access data, we are able to display personalised advertising, i.e. advertising that corresponds to your actual interests and needs, on our website / app and on the websites and apps of other providers.
The legal basis for such marketing tools is your express consent.
In the following section, we would like to explain these technologies and the providers used for this purpose in more detail. The data collected may include in particular: the IP address of the device, the identification number of a cookie, the device identifier of mobile devices (device ID), referrer URL (previously visited page), pages visited (date, time, URL, title, duration of visit), files downloaded, links clicked to other websites, if applicable, achievement of certain goals (conversions), technical information: Operating system; Browser type, version and language; Device type, brand, model and resolution, Approximate location (country and city if applicable).
However, the collected data is only stored pseudonymously, so that no direct conclusions can be drawn about individuals.
3.4.1. Segment
We use the Segment service of Segment Inc, 55 2nd St, 4th Fl., San Francisco, CA 94105, USA ("Segment"). Segment is our central tool for collecting and analysing usage data and for playing interest-based personalised advertising. For this purpose, Segment is used to integrate all of our other tracking and marketing services, in particular Google Analytics, Google Ads, Facebook Pixel and Adjust. The data collected by Segment is passed on to these services.
For this purpose, Segment stores the following information in particular in local storage:
3.4.2. Facebook-Pixel
For marketing purposes, our websites use the "Facebook Pixel" service of the social network Meta, a service offered by Facebook Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland for users outside the USA and Canada and by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (together "Facebook") for all other users. We integrate Facebook Pixel into our website using the Segment tool (see section 3.4.1).
We use Facebook Pixel to play you individualised advertising messages for our products based on your interests ("retargeting"). This also includes target group remarketing through Custom Audience. For this purpose, Facebook processes data that the service collects via cookies, web beacons and comparable storage technologies on our websites.
The data collected in this context may be transferred by Facebook to a server in the USA for analysis and stored there. In the event that personal data is transferred to the USA, we have concluded so-called standard contractual clauses with Facebook.
If you are a Facebook member and have given Facebook permission to do so via the privacy settings of your account, Facebook can link the information collected about your visit to us with your member account and use it to target Facebook ads.
3.4.3. Google Ads-Conversion-Tracking and Ads-Remarketing (formerly AdWords)
Our websites use the "Google Ads" service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google") for all other users. We integrate Google Ads into our website using the Segment tool (see section 3.4.1).
With Google Ads, customer actions defined by us (such as clicking on an ad, page views, downloads) are recorded and analysed using "Google Ads conversion tracking". We use Google Ads remarketing to display individualised advertising messages for our products on Google partner websites. Both services use cookies and similar technologies for this purpose.
The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, we have concluded so-called standard contractual clauses with Google.
If you use a Google account, Google may link your web and app browsing history to your Google account and use information from your Google account to personalise ads, depending on the settings stored in your Google account. If you do not wish such an association with your Google account, it is necessary to log out of Google before accessing our website.
If you have not consented to the use of Google Ads, Google will only display general advertising that has not been selected on the basis of the information collected about you on this website.
3.5. Google Maps
Our website uses the map service Google Maps, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google") for all other users.
In order for the Google map material used by us to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server, which may also be located in the USA, when you call up our website.
By integrating the map material, Google receives the information that a page of our website was called up from the IP address of your device. If you call up the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our site. Google stores your data and uses it for purposes of advertising, market research and personalised presentation of Google Maps.
The legal basis for this is our legitimate interest in improving your user experience through integrated maps.
4. Disclosure of Data
The data we collect will only be disclosed if you have given your express consent, the disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, we are legally obliged to disclose your data or this is legally permissible and necessary for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.
Some of the data processing may be carried out by our service providers. These may include, in particular, data centres that store our website and databases, software providers, IT service providers that maintain our systems, agencies, market research companies, other Flink companies and consulting companies. If we pass on personal data to our service providers, they may only use the data to fulfil their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organisational measures in place to protect the rights of the data subjects and are regularly monitored by us.
In addition, disclosure may take place in connection with official enquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.
5. Transfer of data to third countries
In some cases, we use services whose providers are located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the so-called standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the transfer of data on exceptions to Article 49 of the GDPR, in particular on your express consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.
6. Retention period
In general, we only store personal data for as long as necessary to fulfil the purposes for which we collected the data. Thereafter, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for civil law claims or due to the existence of statutory retention obligations.
7. Your rights
If the legal requirements are met, you have the right to request information from us about which of your personal data we process. You may also request the rectification, erasure and/or restriction of the processing of your personal data and have the right to receive your personal data in a structured, commonly used and machine-readable format.
If we process your personal data on the basis of overriding legitimate interests, you have the right to object to the processing of your personal data on grounds relating to your particular situation. If it is a matter of objecting to the processing of data for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons.
You have the right to revoke your consent at any time. This means that we will no longer process the data based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
If you believe that we are processing your data unlawfully, you have the right to complain to a supervisory authority. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.
Any enquiries regarding the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, for the assertion, exercise or defence of legal claims even longer. The legal basis for this is our interest in defending against any civil claims, avoiding fines and fulfilling our accountability obligations.
8. Amendment of the privacy policy
From time to time, we may update this privacy policy, for example, if we make changes to our website or if legal or regulatory requirements change.
Last edit: March 2024
