General Data Protection Information (Art 13 GDPR) for Survey Respondents

1. Who is responsible for the Data Processing and who can you turn to?

bitiba GmbH, Herzog-Wilhelm-Straße 12, 80331 Munich, Germany Tel.: 01865 951302; email: service@bitiba.co.uk.

2. Can I object to the data processing or withdraw my consent, and if so, how?

You can, at any time, revoke the consent for the processing of your data. If you wish to withdraw from the participation in surveys, please send an email to service@bitiba.co.uk indicating your revocation. Please note that we may anonymise your data after analysis, and we may no longer be able to identify you for the purpose of honouring your data subject rights afterwards.

3. What data is being processed and for what purpose?

Customer Information

Recipient ID, Customer ID, Order ID & Email address, Purchase Behaviour (if you have previously purchased with us)

This data will be use to communicate and / or send the incentives to the winners/participants. In some cases, this data will also be used to perform further data analysis for the purpose of creating customer segments.

Art 6(1)(a) of GDPR (Consent)

Customer Information

Recipient ID, Customer ID, Order ID & Email address, Purchase Behaviour (if you have previously purchased with us)

This data will be use to communicate and / or send the incentives to the winners/participants. In some cases, this data will also be used to perform further data analysis for the purpose of creating customer segments.

Art 6(1)(a) of GDPR (Consent)

Socio-demographic data

This information will be used to create a segmentation of the clients, based on a group data analysis focused on exploring similarities among the participants. No sensitive personal data is collected.

Art 6(1)(a) of GDPR (Consent)

Socio-demographic data

This information will be used to create a segmentation of the clients, based on a group data analysis focused on exploring similarities among the participants. No sensitive personal data is collected.

Art 6(1)(a) of GDPR (Consent)

Preferences & opinions

The data will be processed with the purpose of creating a profile for different customer segments. The analysis will be carried on only on a group level.

Art 6(1)(a) of GDPR (Consent)

Preferences & opinions

The data will be processed with the purpose of creating a profile for different customer segments. The analysis will be carried on only on a group level.

Art 6(1)(a) of GDPR (Consent)

4. To whom do we give the data further and for what purpose?

All the above-mentioned data will be shared with the following service providers:

quantilope GmbH Charlottenstrasse 26 20357 Hamburg Germany

Online survey programming, provision of survey links, survey hosting, provision of survey data.

Qualtrics Ireland Limited, Costello House, 1 Clarendon Row, Dublin 2, D02 TA43, Ireland.

Online survey programming, provision of survey links, survey hosting, provision of survey data.

Optimal Workshop, Level 2, 2-12 Allen St, Te Aro, Wellington 6011, New Zealand

Online survey programming, provision of survey links, survey hosting, provision of survey data.

5. Is there a transfer of data to a third country?

No

6. How long do we save your data?

The results of the survey may be used for analysis in combination with your personal data (Recipient ID/Customer ID/email address/purchase behaviour) unless your consent is withdrawn in this time, and may then be anonymised afterwards for long term storage.

In certain surveys, Order ID may be collected and this will not be anonymized for long-term storage.

7. Is the provision of personal data necessary for legal or contractual reasons?

No

8. Is there any automated decision-making on the basis of your personal data or Profiling under Art 22?

No

9. What rights do you have?

You have the right at any time to request a confirmation from zooplus about whether we are processing your personal data and the right to information about this personal data. You also have the right to rectification, erasure and restriction of data processing, as well as the right at any time to object to the processing of personal data or to revoke your consent for the processing of data or to request the transfer of data. For any information needs or requests, revocations or objections to the processing of data, please send an email to our Data Protection Officer or to the contact details above. In addition, you have the right to complain to a supervisory authority when violations of privacy occur.

10. Special Information about the right to object

1. Case-specific right of objection

You have the right, for reasons of your own situation, to object at any time to the processing of personal data pursuant to Article 6 (1) (f) GDPR (data processing based on a balance of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. for customer consultation and customer service and for sales purposes. If you file an objection, your personal data will no longer be processed unless zooplus proves compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

2. Right to object to the processing of data for direct marketing purposes

Bitiba can also process your data for direct marketing insofar as we are allowed to under the law. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, without incurring other than the transmission costs according to the basic rates. This also applies to the profiling, as far as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made free of form. The contact details can be found in section 1.

11. How can I reach the Data Protection Officer?

Dr. Philipp Herrmann, HWData GmbH, Leonrodstrasse 54, 80636 Munich, email: ph@hwdata.de.