1. Identity of the controller

share GmbH, Erkelenzdamm 59-61, 10999 Berlin

2. Contact details

Telephone: 030 629 380 135
Email: legal@share.eu

3. Data Protection Officer

Our data protection officer can be contacted via heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, email: datenschutz@heydata.eu.

4. Purposes of processing personal data

The processing of your data is carried out for the purpose of conducting product tests with voluntary participants. Personal data is used for contacting participants, processing agreed services, and selecting suitable testers. Anonymized feedback is used for publications. The test results may be used for marketing and research purposes.

5. Special categories of personal data (Art. 9 GDPR)

As part of the application process, information about dietary requirements, daily routine, and any allergies is collected on a voluntary basis. This data is processed exclusively on the basis of explicit consent in accordance with Article 9 Paragraph 2 Letter a of the GDPR.

6. Legal basis for data processing

a) Registration, profile creation and product testing

The data processing serves solely the purpose of conducting the product test. The legal basis for the processing of personal data is...

Consent (Art. 6 para. 1a GDPR or

legitimate interest (Art. 6 para. 1f GDPR)

b) Assortment and product optimization

We evaluate the results of the product test in order to optimize both our product range and product design by means of the evaluation of the participants.

The legal basis for the described data processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR) (balancing of interests, based on our interest in measuring customer ratings of individual products). Information regarding your right to withdraw consent can be found below.

c) Product test mailings

As part of the application process for and the execution of product tests, we will send you various emails. The legal basis for the described data processing is Article 6(1)(a) GDPR.

d) Statistical analyses

The processing of data within the framework of statistical evaluation (point 3. h.) is based on the legal basis Art. 6 para. 1 sentence 1 lit. f) General Data Protection Regulation (balancing of interests, based on our interest in evaluating and optimizing participation in product tests).

e) Recipients of personal data

The data we collect is generally not passed on to unauthorized third parties.

We send newsletters using the Klaviyo tool from the provider Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111, USA. The provider processes content, usage, meta/communication data, and contact data in the USA. Further information can be found in the provider's privacy policy at https://www.klaviyo.com/privacy/policy.

7. Recipients / Categories of Recipients

The data is processed exclusively within our company. It will not be shared with third parties without your explicit consent.

a) Appinio

We use Appinio for product analysis and marketing campaigns. The provider is Appinio GmbH, Ballindamm 3, 20095 Hamburg, Germany. The provider processes usage data (e.g., websites visited, interest in content, access times) and meta/communication data (e.g., device information, IP addresses) within the EU.

The legal basis for processing is Article 6(1)(a) GDPR. Processing is based on consent. Data subjects can withdraw their consent at any time by contacting us, for example, using the contact details provided in our privacy policy. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The data will be deleted when the purpose for its collection no longer applies and there is no legal obligation to retain it. Further information can be found in the provider's privacy policy at https://www.appinio.com/de/datenschutz.

1. Typeform

We use Typeform for questionnaires and forms. The provider is Typeform SL, C/ Can Rabia 3-5, 4th floor, 08017 – Barcelona, ​​Spain. The provider processes content data (e.g., entries in online forms) and meta/communication data (e.g., device information, IP addresses) in the USA.

The legal basis for processing is Article 6(1)(a) GDPR. Processing is based on consent. Data subjects can withdraw their consent at any time by contacting us, for example, using the contact details provided in our privacy policy. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The transfer of personal data to a country outside the EEA is based on standard contractual clauses. The security of the data transferred to the third country (i.e., a country outside the EEA) is ensured by standard data protection clauses adopted in accordance with the review procedure pursuant to Article 93(2) GDPR (Article 46(2)(c) GDPR), which we have agreed upon with the provider.

The data will be deleted when the purpose for its collection no longer applies and there is no legal obligation to retain it. Further information can be found in the provider's privacy policy at https://admin.typeform.com/to/dwk6gt.

8. Transfer to a third country

Transfer to a third country is not planned.

9. Storage duration

Personal data is stored for up to 24 months after the last product test. If there is no further participation or response within this period, the data will be deleted or anonymized. Data based on consent (e.g., feedback, images) is stored until consent is withdrawn or for a maximum of 3 years.

10. Information on the online survey

When using our application form, technical data such as IP address, timestamp, and browser used may be collected. This data is used solely for system security and fraud prevention.

11. Consent

Consent is actively given in the application form (e.g., by ticking a checkbox). Participation is not possible without this consent. Consent can be withdrawn at any time with effect for the future.

12. Publication of feedback

Feedback is published exclusively in anonymized form, so that no conclusions can be drawn about your identity.

13. Voluntariness

Participation in product tests is voluntary. Non-participation has no negative consequences.

14. Rights of data subjects

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21), data portability (Art. 20) and withdrawal of consent (Art. 7 para. 3).

15. Revocation of consent

You can withdraw your consent at any time with effect for the future. The withdrawal should be sent to legal@share.eu

16. Right to lodge a complaint with the supervisory authority

Berlin Commissioner for Data Protection and Information Security

Alt-Moabit 59-61

10555 Berlin

Entrance: Alt-Moabit 60

Tel.: +49 30 13889-0

Fax: +49 30 2155050

mailbox@datenschutz-berlin.de

You can find our general privacy policy here.