Skip to Content (Press Enter) Skip to Footer (Press Enter)
It looks like you are in another country. Do you want to update your location?

I. Privacy Notice on the processing of your personal data in the context of user tests, interviews according to Art 13 GDPR
 

1. Identity of the controller

CYBEX GmbH / CYBEX Retail GmbH

Riedingerstraße 18

95448 Bayreuth, Germany

Phone: +49 921 7 78511 – 0

2. Contact details of the data protection officer

Data Protection Officer

c/o activeMind.legal Rechtsanwaltsgesellschaft mbH

Potsdamer Straße 3

80802 München

Phone: +49 89 / 919 294 – 900

E-Mail: datenschutz@cybex-online.com

3. Data Subjects‘ Rights

You have the following rights according to Art. 15 to 22 GDPR, if the legal requirements are met:

  • Right to information
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability

4. Right to withdraw consent

Insofar as the processing of the data is based on your consent, this can be withdrawn at any time by informal declaration to the controller (e.g. by e-mail to customerinsights@cybex-online.com) with effect for the future. The withdrawal of consent has no negative effects for you.

5. Right to object

In case we process your data based on our legitimate interests, the following applies: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

6. Right to complain to the competent Supervisory Authority

As a data subject, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you believe that the processing violates data protection law. The supervisory authority responsible for us is:

Landesamt für Datenschutzaufsicht

Promenade 18, 91522 Ansbach, Germany

Phone/Telefon: +49 (0) 981 180093-0

Fax: +49 (0) 981 180093-800

E-Mail: poststelle@lda.bayern.de

7. Information on Joint Controllership

The controllers identified above act as joint controllers for the processing in question. We have concluded a join controllership agreement for this purpose that governs the rights and responsibilities of the involved parties. Regardless of that, you may reach to any of the controllers if you want to exercise your data subject rights or obtain additional information.

8. Third Country Transfers

We may transfer data to third country providers (eg. our service providers). In this case we make sure that transfers are carried out only if an adequacy decision has been issued by the European Commission pursuant to Art. 45 (1) GDPR. In other cases such transfer will be subject to the EU standard contractual clauses, including a Transfer Impact Assessment (TIA) or Binding Corporate Rules to ensure an appropriate level of protection for data processing in the relevant third country.

II. Provision of the platform
 

1. Purpose of the Processing

Ensure a smooth presentation and optimization of the platform where the application and booking for testing and interviews is to be submitted.

2. Legal Basis of the Processing

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in providing the website and ensuring system security and abuse detection.

3. Recipients of the Data

Your personal data will be shared with the following recipients:

• UserInterviews: UserInterviews is a service provider that facilitates the recruitment of participants for user tests and interviews.

These service providers act as independent data controllers with respect to the provision and maintenance of their platforms, including the handling of your profile credentials and server log files.

Besides, the data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.

4. Duration of Storage

We will delete your data once the purpose has been fulfilled: the appointments are booked and interviews, tests are carried out.

5. Provision of personal data mandatory or required

The provision of the personal data in this context is neither legally nor contractually required. However, without the IP address and similar data, the service and functionality of our website is not guaranteed.

III. Application for and processing of a test/interview
 

1. Purpose of the Processing

Application for, and conducting, a test/interview and recording of the interview.

2. Legal Basis of the Processing

The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.

3. Recipients of the Data

The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.

4. Duration of Storage

We will delete your data when the purpose has been fulfilled or if you have withdrawn your consent.

5. Provision of personal data mandatory or required

The provision of your personal data is voluntary, based on your consent.

IV. Including in our data base for future tests
 

1. Purpose of the Processing

Inclusion in our database for future tests/interviews or similar campaigns.

2. Legal Basis of the Processing

The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.

3. Recipients of the Data

The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.

4. Duration of Storage

We will delete your data when the purpose has been fulfilled or if you have withdrawn your consent.

5. Provision of personal data mandatory or required

The provision of your personal data is voluntary, based on your consent.

V. Contact
 

1. Purpose of the Processing

Providing you the link to our platform, answering to any follow-up questions.

2. Legal Basis of the Processing

The legal basis for the processing is Art. 6 (1) (b) / (f) GDPR (legitimate interest in guaranteeing a smooth cooperation).

3. Recipients of the Data

The data is processed by the project organizers (internal employees of the controller). In addition, the data will be shared internally within the Cybex/Goodbaby Group in the EU. The data is also shared with third parties (processors) who process the data on our behalf.

4. Duration of Storage

We will delete your data once the purpose has been achieved.

5. Provision of personal data mandatory or required

The provision of your personal data is necessary for the performance of the contract with you.