General Terms and Conditions of <tc>Carrera</tc> Toys GmbH
Privacy Policy
We,
Personal data refers to any information relating to an identified or identifiable natural person. This includes, in particular, your name, address, and email address.
Please read this Privacy Policy carefully before using this website. We reserve the right to amend parts of this Privacy Policy at our discretion and in accordance with legal requirements. Therefore, please review this Privacy Policy regularly for changes.
1.
Website Provider and Data Protection OfficerThe provider of this website and the data controller under data protection law is
Rennbahn Allee
15, 412 Puch/Salzburg,
Austria. Authorized Managing Director: Mr. Stefan Krings
. Tel .: +43 662 88921-0. Email:shop@carrera-toys.com
krupna LEGALwww.krupna.legal
Email:datenschutz@carrera-toys.com
2. Data Processing to Enable Use of the Website
Each time you access content on our website, connection data is transmitted to our web server. This connection data includes:
· the IP address (Internet Protocol address) of the respective user,
· the date and time of the request,
· the referrer URL,
· device numbers such asz.B. UDID (Unique Device Identifier) and similar device numbers, device information (z.B . (device type) as well
as the browser type and version.
This connection data is not used to identify the user personally or combined with data from other sources; rather, it is used to provide the website. The legal basis for the processing of your data is Article 6(1)(f) of the GDPR. After no later than 7 days, the data is anonymized by truncating the IP address to the domain level.
3
. Data Processing at Your Initiative:
You can generally use our website without providing any personal data. You are under no obligation to visit this website or to provide personal data while doing so. Howeverz.B. , providing personal data is. required to receive newsletters or in the event of registration. If you do not provide us with personal data for the purposes listed below, you may You will not be able to use certain features of this website or individual services.
3.1. Provider and Data Protection Officer If
you register with us as a merchant and use the merchant service or the B2B portal on our website, we will process your information for this purpose. Details about the B2B portal can be found in the instructions on our portal underhttps://carrera-toys.com/dealer-portal.
“The processing of your personal data is based on Art. 6(1)(b) of the GDPR.”
3.2. News
letter The provider of the website and the data controller within the meaning of data protection law is
Allee
15 412 Puch/Salzburg
Austria Authorized Managing Director: Mr. Stefan Krings Tel
.: +43 662 88921-0 Email: shop@carrera-toys.com
krupna LEGALwww.krupna.legal
Email:datenschutz@carrera-toys.com
3.3. Customer Registration
: If you would like to register as a customer with us, we will collect the required information (name, country, email address, password), which is marked accordingly (*). Providing any additional personal information is optional.
Registration is not required, but it simplifies the ordering process for future orders, as you can reuse the information you have already saved. Alternatively, you can place an order as a guest. In this case, with the exception of a password, we collect the same information from you as we do during registration. However, this information is not stored in a customer account for you, so you will not have access to a customer account.
After registration, you can log in by entering your email address and password. Please be sure to log out before leaving the website.
When using a password, please ensure you take appropriate security measures. A password should be at least 8 characters long and, whenever possible, consist of a combination of uppercase and lowercase letters, numbers, and special characters. In this regard, common passwords such as “ABC” or keyboard sequences (z.B. “qwert” or “asdfgh”), all types of names (such as those of friends, acquaintances, coworkers, family members, or pets), city and building names, comic book characters, car brands, license plate numbers, terms, dates of birth, phone numbers, common abbreviations, etc.
The processing of your personal data is based on your consent in accordance with Art. 6(1)(a) of the GDPR. Please note that in the event of a withdrawal of consent, any bonus points that may have been collected will be forfeited without replacement. Furthermore, please refer to the relevant terms of use on our website regarding bonus points.
In addition, we store your IP address and the time of registration as part of the registration process. This is necessary to ensure the security of our IT systems. The legal basis for processing your data in this case is Article 6(1)(f) of the GDPR.
3.4.
Login If you are a registered customer, you can access your customer account via the login function on this website. You log in by entering your email address and password.
Login credentials must be kept strictly confidential. If they are nevertheless disclosed—for example, to allow third parties access to certain data in an emergency—the password must be changed immediately. For your own protection, you are prohibited from reusing passwords that have already been used.
In addition,when you log in, we store your IP address and the time of access. This is necessary to ensure the security of our information technology systems.
We also set a session cookie each time you log in. This session cookie prevents you from being automatically logged out while actively using your account or related services. After you log out, the session cookie is automatically deleted within a few minutes.
The legal basis for the processing of your data is Article 6(1)(f) of the GDPR and, insofar as your contractual relationship is concerned, Article 6(1)(b) and/or (f) of the GDPR.
3.5. Wish ListIf
you are logged in as a customer (see Section 3.4. f.), you can add individual products from the store to your wish list. You can access this wish list until you log out, where you will see all the products you have added. The legal basis for the processing of your data in this case is Article 6(1), first sentence, subparagraph (f) of the GDPR. When you cancel your customer account
, your wish list will be automatically deleted. 3.6. Ordering in the Store
When you place an order with us, we process the following data about you:
· Registration data from your customer account or your guest data,
· Purchase data (order/shopping cart),
· payment data (payment method, bank account and credit card information, billing addresses)
. The processing of your personal data is based on Article 6(1)(b) of the GDPR.
3.7. ContestsIf
you wish to participate in a contest offered by us via the website, you must first create an account. Providing your data is necessary for the purpose of conducting the contest. After the contest has ended, this data and the account will be deleted, provided there are no legal retention requirements.
Your personal data is processed on the basis of your consent pursuant to Article 6(1)(a) of the GDPR. There is no legal or contractual obligation to provide personal data. Failure to give consent will simply result in your inability to participate in the contest. You may revoke your consent at any time with future effect. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of revocation.
4.
4.1. Registering as
: Ifyou would like to register with us as a club member, you must first purchase a membership in our online store. We will then collect the required information (name, address, email address, password) to set up your member account so you can enjoy the club benefits.
After registration, you can log in by entering your club username and password in the club section of our website. Please be sure to log out before leaving the website.
When using a password, please take appropriate security measures. A password should be at least 8 characters long and, whenever possible, consist of a combination of uppercase and lowercase letters, numbers, and special characters. Trivial passwords such as “ABC” or keyboard sequences (z.B. “qwert” or “asdfgh”), all kinds of names (such as those of friends, acquaintances, coworkers, family members, and pets), city and building names, comic book characters, car brands, license plate numbers, terms, dates of birth, phone numbers, common abbreviations, etc.
The processing of your personal data is carried out for the purpose of fulfilling the contract. The legal basis is Article 6(1), first sentence, subparagraph (b) of the GDPR.
In addition, we store your IP address and the time of registration as part of the registration process. This is necessary to ensure the security of our IT systems. In this case, the legal basis for processing your data is Article 6(1), first sentence, letter f of the GDPR.
4.2 Login
If you are a club member, you can use the login function on this website to access specific information or features in our club area.
Login credentials must be kept strictly confidential. If they have nevertheless been disclosed—for example, to allow third parties access to certain data sets in an emergency—the password must be changed immediately. For your own protection, you are prohibited from reusing passwords that have already been used.
In addition, when you log in, we store your IP address and the time of access. This is necessary to ensure the security of our IT systems.
We also set a session cookie each time you log in. This session cookie prevents you from being automatically logged out while actively using your account or related services. After you log out, the session cookie is automatically deleted within a few minutes.
The legal basis for the processing of your data is Article 6(1)(f) of the GDPR and, insofar as your contractual relationship is concerned, Article 6( Article 1(1)(b) of the GDPR.
4.3 Member Account If
you have purchased a club membership, a member account will be created for you that is visible to other club members. Through the settings, you can choose which information about you should be visible to other club members.
If you already have a customer account in accordance with Section 2.3 et seq., the data from your existing customer account will be linked to your member account. This allows you to take advantage of club benefits when placing orders in our online store.
The legal basis for the processing of your personal data is Article 6(1)(b) of the GDPR.
4.4 Communication with Other Club Members/Club ForumAs
a club member, you have the option to chat with other club members in our club forum. The content of your forum posts (text, photos, or videos), as well as your username, is
If posts within the forum
the GDPR. 4.5 Payment for Club Membership
Please note the provisions in this Privacy Policy under Section 74
.6 Club Newsletter
The website provider and data controller under data protection law is
Rennbahn Allee
15, 412 Puch/Salzburg,
Austria. Authorized Managing Director: Mr. Stefan Krings
. Tel.: +43 662 88921-0 Email: shop@carrera-toys.com
krupna LEGALwww.krupna.legal
Email:datenschutz@carrera-toys.com
5. Data Processing for Tailoring the Website to Your Needs and Tracking
: To make your experience on our website as pleasant as possible, we use so-called web tracking systems. This involves i.d.R. the use of cookies—d.h. small text files that are sent from a web server to your browser and stored on your computer’s hard drive. This enables us to recognize the device you are using when you visit our online store. This allows usz.B. to determine whether you are logged in, whether you have an active shopping cart, and what items are in your shopping cart. The session cookies used to operate the online store are deleted once your browser session ends. Other cookies remain on your device and allow us to recognize your device the next time you visit.
Details about the cookies used on the website can be found in the cookie banner and in the provisions below. The legal basis for the processing of your data, unless otherwise specified in the following provisions in Section 5.1 et seq., is Article 6(1), first sentence, letter f of the GDPR. Our legitimate interest lies in designing the website to meet user needs. Finally, we would like to point out that if you disable cookies, you may not be able to use all features of this website to their full extent. Please also note that you may need to disable cookies separately for each browser and device.
5.1 Cookie Consent with Cookiebot
To manage your consent to the use of tracking tools, we use the “Cookiebot” cookie consent technology. This technology is provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, website: (https://www.cookiebot.com/de/“Usercentrics”). In this context, in addition to connection data, information regarding whether you have granted or denied consent, or whether you have revoked consent, is transmitted to Usercentrics. To ensure proper assignment, Usercentrics also sets a cookie in your browser.
Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) of the GDPR.
5.2.
The provider of this website and the data controller under data protection law is
Rennbahn Allee
15, 412 Puch/Salzburg,
Austria. Authorized Managing Director: Mr. Stefan Krings
. Tel .: +43 662 88921-0 Email:shop@carrera-toys.com
krupna LEGAL www.krupna.legal
Email: datenschutz@carrera-toys.com
5.3. YouTube
Our website uses plugins from
The legal basis for the use of YouTube is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner. Please note that
For more information on how user data is handled, please see YouTube’s Privacy Policy at: 5 https://www.google.de/intl/de/policies/privacy.
.4.
We use
The legal basis for the use of GTM is your consent, based on Section 25(1), sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), sentence 1, subparagraph (a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner. Please note that the provider is a company based in the United States. The new EU Standard Data Protection Clauses have been agreed upon as appropriate safeguards to ensure an adequate level of protection during data transfers. In addition
5.5. Address Validation:
To reduce delivery errors
The legal basis for using the Address Validation API is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner. Please note that the provider is a company based in the United States. The new EU Standard Data Protection Clauses have been agreed upon as appropriate safeguards to ensure an adequate level of protection for data transfers. In addition
.6. AWIN
We have integrated “AWIN” into our website. AWIN is an affiliate marketing software provided by AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany. Through AWIN, registered providers (“advertisers”) can promote their online goods and services as part of various programs. To this end, individuals registered with AWIN (so-called “Publishers”) make their advertising spaces, such as websites, available to the “Advertisers.” We are registered with AWIN as “publishers,” which means we provide “advertisers” with advertising space (via links) on our website.
As part of its tracking services, AWIN stores cookies on the devices of users who visit or use advertisers’ websites or other online offerings (z.B. when placing an online order) in order to document transactions. . These cookies serve solely to correctly attribute the success of an advertising campaign and to facilitate the corresponding billing within the network. AWIN tracking cookies store a unique sequence of numbers—which cannot be traced back to an individual user—that records the advertiser’s affiliate program, the publisher, and the time of the user’s action (click or view). In doing so, AWIN also collects information about the device from which an action is performed, z.B . the operating system, . and the browser.
The legal basis for the use of AWIN is your consent, based on Section 25(1), sentence 1 of the TDDDG for the storage and access of your data, as well as Article 6(1), sentence 1(a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner.
For more information on AWIN’s use of data, please refer to the company’s privacy policy: 5https://www.awin.com/de/rechtliches
.7.Country.is
Inz.B. order to redirect the user to the appropriate online store (. the U.S. online store), we use the so-called geolocation service provided by “ Country.is”. Country.isis an open-source geolocation API that determines a user’s country (and nothing else) based on their IP address. IP-based geolocation is the process of associating an IP address or MAC address with the actual geographic location of a computer or mobile device connected to the Internet. Geolocation involves associating IP addresses with, among other things, the country, region (city), latitude/longitude, Internet service provider, and domain name. Based on this information, the user is automatically redirected to the online store appropriate for their location.
The legal basis for the use of this featureCountry.isis your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner.
5.8. Azure Content Delivery
NetworkOn our website, we use Microsoft’s “Azure Content Delivery Network,” a service provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
With the Azur Content Delivery Network, we can reduce load times and improve performance for our high-bandwidth website content by distributing user requests and serving them directly from Microsoft servers. When you access website content, you connect to Microsoft servers, and your IP address and, if applicable, browser data such as your user agent, as well as the time and date of your visit to the website, are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of the Azure Content Delivery Network. We have no control over the specific retention period for the processed data; it is determined by Microsoft. Additional information can be found at:https://azure.microsoft.com/de-de/support/legal/.
The legal basis for our use of the Azure Content Delivery Network is your consent, based on Section 25(1) sentence 1 TDDDG for the storage of and access to information in terminal equipment, as well as Art. 6(1), sentence 1, subparagraph (a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner. Please note that Microsoft is a U.S.-based company. Information about the locations of Microsoft’s data centers can be found at:https://www.microsoft.com/de-de/privacy/privacystatement#mainwherewestoreandprocessdatamodule. The new EU Standard Data Protection Clauses have been agreed upon as appropriate safeguards to ensure an adequate level of protection for data transfers. In additionU.S. , Microsoft is an active participant in the EU-U.S. Data. Privacy Framework, which ensures the secure transfer of personal data to the United States. Further information can be found here: https://www.dataprivacyframework.gov/listand here: 5 https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses .
.9. Findologic We
use the service provided by Findologic GmbH, Jakob-Haringer-Str. 5a, 5020 Salzburg (“Findologic”) to provide a search function for our products and to facilitate navigation. Cookies are used for the aforementioned service, and various data are transmitted to Findologic. This includes, in particular, users’ IP addresses and browser data, as well as associated behavioral data derived from search queries. This allows us, on the one hand, to optimize the shopping experience for our users and, on the other hand, to better understand which products interest our users the most. For more information on Findologic’s privacy policy, please visit:https://findologic.com/datenschutz/
The legal basis for the use of Findologic is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for our further processing of your data. You can provide your consent via our cookie banner.
5.10. Meta Pixel
The so-called “Meta Pixel” involves embedding an invisible pixel on our website, through which the online behavior of each website visitor is analyzed by Meta Platforms Ireland Limited (formerly Facebook Ireland Limited), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). The Meta Pixel enables customer data such asz.B. first name, last name, email address, etc.,. to be transmitted to Meta and enriched with existing tracking data. This makes it possible to collect data even from people who do not use the Facebook social network or to track users who are not logged into Facebook while visiting a website. As a result, website visitors who deliberately block the storage of third-party cookies are tracked via Meta. This allows us to target you with an advertisement on Facebook. However, the Meta Pixel also makes it possible to specifically acquire new customers and target new individuals who are similar to website visitors.
In addition to us, Meta itself is also responsible for data processing. Meta processes the data in accordance with Meta’s Privacy Policy. You can find details on this in Meta’s Privacy Policy. Specific information and details about the Meta Pixel and how it works can be found in Meta’s Help Center.
In this regardi.S.d. , we are jointly. responsible with Meta. under Article 26 of the GDPR for the processing of your personal data. In this case, you may generally exercise your rights (see Section 12) with both us and Meta. However, Meta serves as the primary point of contact. We have entered into an agreement with Meta regarding joint responsibility for the processing of personal data. You can view these at the following link:https://www.facebook.com/legal/controller_addendum.
The legal basis for the use of the Meta pixel is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for our further processing of your data. You provide your consent via our cookie banner. Please note that Meta is a U.S.-based company. The new EU Standard Data Protection Clauses have been agreed upon as appropriate safeguards to ensure an adequate level of protection for data transfers. In additionU.S. , Meta is an active participant in the EU Data. Privacy Framework, which ensures the secure transfer of personal data to the United States. For more information, see Section 5https://www.dataprivacyframework.gov/list.
.11. TikTok Conversion Tracking
: We use the TikTok Pixel for conversion tracking, an analytics service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).
The TikTok Pixel is a snippet of JavaScript code that enables us to analyze visitor activity on our website. For this purpose, the TikTok Pixel collects certain information from visitors (so-called “event data”), which is then forwarded to TikTok. This includes user-generated content, date of birth, profile information, profile picture, usage data, device information, smartphone-related information, last name, first name, internet service provider, IP address, email address, and browser history.
For more information and TikTok’s privacy policy, please visit:https://www.tiktok.com/legal/page/eea/privacy-policy/de
TikTok also offers users the option to view their profile:https://support.tiktok.com/de/account-and-privacy/personalized-ads-and-data/requesting-your-data
The legal basis for the use of the TikTok Pixel is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for the processing of your data. You can provide your consent via our cookie banner. Please note that TikTok is a company based in China. TikTok uses the so-called Standard Contractual Clauses as the basis for data processing outside the EU. For more information, see: 5https://www.tiktok.com/legal/page/eea/privacy-policy/de
.12. Pinterest Conversion Tracking
Our website uses the Pinterest Tag, a pixel provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Ireland (“Pinterest”) for remarketing purposes, so that we can retarget you on the Pinterest social network within 180 days. This allows users of our website to be shown interest-based advertisements (so-called “Pinterest Ads”) while visiting Pinterest.
If you have given your consent (as described below), your browser automatically establishes a direct connection to Pinterest’s server. Through the integration of the Pinterest pixel, Pinterest receives the information that you have visited the corresponding page on our website or clicked on one of our ads. If you are registered with Pinterest, Pinterest can associate the visit with your account.
In addition to your IP address and marketing identifier, Pinterest also receives information about the device you are using, the website you visited, and the time of your visit, and may associate this data with your Pinterest account. Pinterest processes this data on its own responsibility. We have no influence over the collection or further processing of this data by Pinterest. We only have access to conversion reports and event history.
To set directly on Pinterest which types of ads are displayed to you within Pinterest, you can visit the page set up by Pinterest and edit your personalization settings there. These settings apply across all platforms andd.h. are applied to all devices, such as desktop computers or mobile devices. You can alsoaboutads.infoyouronlinechoices.comopt out of cookies used for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page, as well as the U.S. website or the European website.
For more information on data processing by Pinterest, please see the Pinterest Advertising Policies. In addition, you can find general information about the display of Pinterest ads in the Ad Data Policy.
The legal basis for the use of the Pinterest Pixel is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information on end devices, as well as Article 6(1), sentence 1, letter a of the GDPR for the processing of your data. You provide your consent via our cookie banner. Please note that Pinterest is a U.S.-based company. Pinterest uses the so-called Standard Contractual Clauses as the basis for data processing outside the EU. For more information, see: 5https://policy.pinterest.com/de/privacy-policy#section-residents-of-the-eea
.13. Snapchat Conversion Tracking
Our website uses the Snapchat Pixel, an analytics tool provided by Snap Inc., 2772 Donald Douglas Loop N, Danta Monica (HQ), CA, USA (“Snapchat”). The Snapchat Pixel allows us to track the behavior of users who have arrived at our website via Snapchat ads. This allows us to measure the effectiveness of our advertising campaigns, track conversions, and better tailor our ads to your interests. The Snapchat Pixel is a JavaScript code that transmits the following data to Snapchat:
· HTTP header information (u.a. IP address, web browser information, page location, document, website URL, and web browser user agent, as well as the date and time of use),
· pixel-specific data; this includes the pixel ID and your hashed email address (this data is used to link events to a specific Snapchat advertising account and attribute them to a Snapchat user),
· additional information about visits to our websites, as well as standard and custom data events,
· orders placed (purchases made),
· completion of registrations and purchases,
· items added to the shopping cart
, and· viewing of product information.
The aforementioned data processing applies only to users who have a Snapchat account. If an email address can be linked to a Snapchat user, Snapchat assigns that user to a target group (“Custom Audience”) based on the rules we have established, provided those rules are applicable. We use the information obtained in this way to display our advertising content via Snapchat.
Please note that it cannot be ruled out that Snapchat may process the data in question for its own purposes and under its own responsibility, and in doing so may combine this information with data already held by Snapchat, such as user profiles (if available).
The legal basis for our use of the Snapchat pixel is your consent, based on Section 25(1), Sentence 1 of the TDDDG for the storage of and access to information in terminal equipment, as well as Article 6(1), Sentence 1(a) of the GDPR for the processing of your data. You provide your consent via our cookie banner.
You also have the option to opt out of data collection by the Snapchat pixel by adjusting the privacy settings in your Snapchat account or disabling cookies. For more information and to learn about the privacy settings available for advertising purposes, please refer to Snapchat’s Privacy Policy, whichhttps://support.snapchat.com/en-US/a/advertising-preferencescan be found at [link] .
Please note that Snapchat is a U.S.-based company. Pinterest uses the so-called Standard Contractual Clauses as the basis for data processing outside the EU. See section https://www.snap.com/terms/standard-contractual-clauses?lang=en-US
6: Links to Other Websites.
Our website contains links to other websites, such asz.B. the
7. Data Transfer We
will only disclose your personal data to third parties or other recipients if this is necessary to provide services, if you have given your consent, if there is a legal obligation to do so, or if the disclosure is permitted on another legal basis. For example, data is transferred to the respective payment or shipping service providers, as well as to service providers for the provision of marketing services ( z.B. (email marketing), technical service providers, or—in the event of a corporate transaction—to prospective buyers, etc. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR.
If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will disclose the information you provided during the ordering process, along with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number). Your data is disclosed to Stripe Payments Europe Ltd. exclusively for the purpose of payment processing and only to the extent necessary for this purpose. For more information on Shopify Payments' privacy policy, please visit the following website:https://www.shopify.com/legal/privacy. For privacy information regarding Stripe Payments Europe Ltd., please click here:https://stripe.com/de/privacy
Please also note the separate privacy policies of the payment methods you have selected.
Klarna: You have the option to use the payment options offered by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Payment is then made to Klarna. Use of the “Invoice” and “Direct Debit/Instant Transfer” payment methods requires a positive credit check. If you wish to use Klarna, your data will be forwarded to Klarna during the purchase initiation and processing of the purchase agreement for the purpose of address and credit checks. Depending on the outcome of the credit check, not all payment methods may be available to you. Please note that we have no influence over this. You can find more information and Klarna’s Terms of Use here. Klarna’s Privacy Policy can be found here.
PayPal:https://www.paypal.com/de/webapps/mpp/ua/privacy-fullWhen paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we will disclose your payment data to PayPal (Europe)S.a.r.l. et Cie,S.C.A. , 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). This transfer is made in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing. For the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—“Purchase on Account” or “Installment Payment” via PayPal, PayPal reserves the right to perform a credit check. For this purpose, your payment data may be processed in accordance with Art. 6(1)(a) f GDPR, your data may be disclosed to credit bureaus based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the results of the credit check—specifically, the statistical probability of default—to decide whether to provide the respective payment method. The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data. For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: Youhttps://www.paypal.com/de/webapps/mpp/ua/privacy-fullmay object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still We remain authorized to process your personal data to the extent necessary for payment processing in accordance with the contract.
VISA:www.visaeurope.com
MasterCard: 8https://www.mastercard.de/de-de.html
. Social Media Presences
8.1. Data Processing by
Our social media presences (Facebook or Meta, X, TikTok, YouTube, LinkedIn, Xing, and Instagram) are intended to
8.2. Joint
ResponsibilityIn certain cases,we are jointly responsible with the social media providers for the processing of your personal data. In this case, you may generally exercise your rights (see Section 12) against both us and the social media provider. However, the social media provider serves as the first point of contact.
We have entered into a joint controller agreement with Meta regarding the processing of personal data. This agreement applies to the processing of so-called “Insights data.” This data consists of page statistics, particularly regarding interactions by Facebook users. You can find details about Insights data here: https://www.facebook.com/business/pages/manage#page_insights. You can view our agreement with Meta at the following link:www.facebook.com/legal/terms/page_controller_addendum. Please note that Meta is a U.S.-based company. Meta is an active participant in the EU-U.S. DataU.S. Privacy Framework, which ensures the secure transfer of personal data to the United States. Further information can be found here: https://www.dataprivacyframework.gov/list
We have also entered into a joint responsibility agreement with LinkedIn Ireland regarding so-called “Page Insights.” Through Page Insights, LinkedIn Ireland does not provide us with any personal data about you, but only aggregated data. We are unable to draw conclusions about individual users based on the information provided by Page Insights. You can view details about Page Insights and our agreement with LinkedIn Ireland at the following link:https://legal.linkedin.com/pages-joint-controller-addendum. Please note that LinkedIn Ireland may also process your data outside the EU/EEA. LinkedIn Corporation is an active participant in the EU-U.S. DataU.S. Privacy Framework, which ensures the secure transfer of personal data to the United States. Further information can be found here:https://www.dataprivacyframework.gov/list.
We use the analytics features of “TikTok Insights.” Through TikTok Insights, we receive an aggregated analysis of visitor behavior on our profile. For example, likes, video shares, and the age and gender of visitors may be tracked. We use this analysis from TikTok Insights to improve our profile, our reach, and our audience reach. To the extent that the data you provide to us via TikTok is processed exclusively by TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok Ireland”), TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH (“TikTok UK”) are also data controllers. When we process data jointly with TikTok, we have also entered into a joint controller agreement with TikTok. For details, see:https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms, Part B 1, Sections 3 and 4). A summary of the key provisions of this agreement can be found at:https://www.tiktok.com/legal/page/global/information-about-tiktok-analytics/en.
Regarding the retention period for the data we process from you for our own purposes, please refer to our explanation in Section 10. Please also note the privacy policies of the respective social media providers.
9. Data Transfer to Countries Outside the EU
To the extent necessary for our purposes, we may also transfer your data to recipients outside the EU if you have given your consent, if there is a legal obligation to do so, or if the data transfer is permitted on another legal basis. For example, your data is also transferred to recipients based in the United States as part of our data processing activities. An adequate level of data protection isU.S. ensured through the adoption of the new so-called EU Standard Contractual Clauses and/or the service provider’s participation in the EU-U.S. Data. Privacy Framework. An overview of participants in the EU-U.S. DataU.S. Privacy Framework can be found here:https://www.dataprivacyframework.gov/s/participant-search
10. Period for Which Personal Data Is Stored/Criteria for Determining the Duration
: We generally store your personal data for as long as is necessary for the aforementioned processing purposes, provided that, in the event of an objection,
In certain cases,z.B. however,. where a statutory retention obligation applies, your personal data will not be deleted immediately but will first be blocked.
11. Security Measures to Protect Your Personal
DataWe protect your data from unauthorized access, loss, or destruction through technical and organizational measures. We continuously improve our security measures in line with technological advancements. Our employees and all individuals involved in data processing are required to comply with data protection laws and to handle personal data confidentially. Our employees have received appropriate training.
To protect our users’ personal data, we use a secure online transmission method known as “Secure Socket Layer” (SSL) transmission. You can recognize this by the “s” appended to the address component http:// (“https://”) or by a green, closed padlock icon. Clicking on the icon will provide you with information about the SSL certificate being used. The appearance of the icon depends on the browser version you are using. SSL encryption ensures that your data is transmitted in an encrypted and secure manner.
12. Data Controller and Data Protection Officer
: In accordance with legal requirements
, you generally have the rightto: confirmation as to whether personal data concerning you
information about this data and the circumstances of its processing;
correction if such data is inaccurate,
erasure if there is no longer any legal basis for processing or obligation to retain the data,
restriction of processing in specific cases prescribed by law,
objection in the event of data processing based on Article 6(1)(f) of the GDPR;
and the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Please submit your specific request in writing or by email, clearly identifying yourself, to our Data Protection Officer:
krupna
LEGAL email:datenschutz@carrera-toys.com
To the extent that wei.S.d. process your data jointly. with third parties under. Article 26 of. the GDPR, the third party is primarily responsible for ensuring that all data subject rights are upheld. However, you are free to exercise your rights with us as well.
Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna)
13. No Automated Individual Decision-Making We
do not use your personal data for automated individual decision-making.
14. Changes to the Privacy Policy New
legal requirements, business decisions, or technological developments may require changes to our privacy policy. The Privacy Policy will then be updated accordingly. You can always find the most recent version on our website.
Effective as of: January 14, 2024
General Terms and Conditions (
I. Scope of Application and Amendments to the General Terms and Conditions1
. These terms and conditions apply to all goods and services provided by
Rennbahn Allee
15, 412 Puch bei
Salzburg, AUSTRIA
; Managing Director: Stefan
Krings; Phone: +43 662 889 21333; Fax
: +4366288921510, Email
:shop@carrera-toys.com
(hereinafter
2. Club members as defined in these Terms and Conditions are consumers within the meaning of Section 13 of the German Civil Code (BGB). A club member is considered a consumer to the extent that the purpose of the ordered goods and services cannot be predominantly attributed to their commercial or self-employed professional activity.
3.
II. Purchase/Term of Club Membership 1
.
2. The contract for club membership (hereinafter “Club Membership”) is initially concluded for a term of twelve (12) months. Thereafter, the Club Membership is automatically renewed for an indefinite period.
3. Club membership may be canceled at any time during the first year of membership by clicking the cancellation button on the website, in which case the club membership will end upon the expiration of the twelve (12) months. If the club membership has been extended indefinitely, the club member may cancel at any time with one (1) month’s notice.
4.
5. If club membership ends, the member account and club benefits (see Section III) can no longer be used.
III. Scope of Club Membership Benefits1
. Club membership includesu.a. The following benefits, features, and advantages for club members:
· Use of the club area·
Access to exclusive products and special models for club members in the online store·
Discounts in the online store·
The club’s own
newsletter· Annual club event2
. The exclusive special editions for the
3. If a club member receives price discounts for the online store in the form of promotional coupons, the provisions in Section 6 et seq. of the online store’s General Terms and Conditions apply to the redemption of these coupons—unless otherwise specified on the promotional coupon itself.
IV. Price of Club Membership1
. The price of club membership is
2. When purchasing club membership, the customer may choose between annual and monthly billing. The term of the club membership as specified in Section II.2 remains unaffected by this.
3.
V. Terms of Use for the Club Area
To use the club area, you must create a member account. With regard to the processing of personal data in connection with the member account, please
1. Access/Availability/Changes to Features 1
.1
1.2 The establishment and availability of the data connection are not part of club membership. The club member therefore bears sole responsibility for the selection and functionality of their data connection, including the transmission channels. has
1.3 is
1.4 is
2. Scope of
Services The following features, in particular, are available when using the Club Area:
· Communication with other club members in the forum via chat, images, and
videos · Product reviews, etc.
3. Basic Obligations of the Club Member II
. 1
. 2
. 3
.
3.1 The club member is obligated to use the club area in accordance with this section. V and in accordance with applicable law.
3.2 When using a password, appropriate security measures must be taken. For example, a password should be at least 8 characters long and, whenever possible, consist of a combination of uppercase and lowercase letters, numbers, and special characters. In this regard, trivial passwords such as “ABC” or keyboard sequences (z.B. “qwert” or “asdfgh”), all types of names (such as those of friends, acquaintances, colleagues, family members, or pets), city and building names, comic book characters, car brands, license plate numbers, terms, dates of birth, phone numbers, common abbreviations, etc.
3.3 The club member is obligated to provide truthful information during registration and in the member account and to keep this information up to date at all times. If any of the provided information changes during the term of use, the club member shall update it immediately in the personal settings of the member account.
3.4 Login credentials must be kept strictly confidential. If, however, the password has been disclosed—for example, to allow third parties access to certain data in an emergency—the password must be changed immediately. Furthermore, the club must
4. Prohibited Actions4
. 4
.1 Club members agree not to offer, post, distribute, or engage in any activities while using the club area that violate legal prohibitions, public decency, the rights of third parties, and/or the regulations listed below.
4.2 Prohibited activities and content include, in particular:
· those in the realm of “erotica” or “pornography”;
· services that violate regulations designed to protect against illegal employment, such as the Act to Combat Illegal Employment and Illegal Work (SchwarzArbG), the Youth Protection Act, or data protection regulations;
· the offering or advertising of services that are not in accordance with the spirit and purpose of the club area or that
4.3 Club members are also prohibited from the following actions:
· the distribution of viruses, Trojan horses, and other malicious files;
· gaining access—for themselves or another person—to data not intended for them and that is specifically secured against unauthorized access by bypassing the security measures, and/or using such data;
· sending junk or spam emails as well as chain letters;
· distributing suggestive, offensive, sexually explicit, obscene, or defamatory content or communication, as well as content or communication that is likely to promote or support racism, fanaticism, hatred, physical violence, or unlawful acts (whether explicitly or implicitly);
· harassing other club membersz.B. by repeatedly contacting them personally without or in spite of their response,. as well as promoting or Encouraging such harassment;
· asking other club members to disclose passwords or personal data for commercial, unlawful, or illegal purposes;
· distributing and/or publicly reproducing content available in the Club Area, unless expressly permitted by the respective copyright holder or unless such distribution or reproduction is expressly intended in accordance with the purpose and function of the Club Area.
4.4 Club members are also prohibited from any action that is likely to interfere with the smooth operation of the Club Area, in particular placing an excessive load on the network systems.
4.5 Should a Club Member become aware of any illegal, abusive, or otherwise unauthorized use of the Club Area—or any use that violates the terms of use—the Club Member is obligated to contact [contact information]
4.6 If there is suspicion of unlawful or criminal acts
5.
Content Provided by Club Members5.
5.1 The club member is fully responsible for the content they post.
5.2 The club member agrees not to make any content publicly available within the club area that constitutes a violation of competition law or a violation of applicable professional regulations, or that infringes the rights of third parties—such as trademark rights, copyrights and related rights, title protection rights, or personal rights; and to make publicly available only such content for which the club member has the exclusive right of use or is otherwise authorized (z.B. through a license or permission from the rights holder).
5.3
5.4 In the event of obvious and serious infringements
6. Right of Use6
.
6.1 The club member is granted a non-exclusive (simple), non-sublicensable, and non-transferable right to use the club area, limited to the term of the respective contractual relationship. The Club Area may be used exclusively within the scope of functionality provided for in these Terms of Use.
6.2 In particular, Club Members are not permitted to grant access to the Club Area to third parties, whether for a fee or free of charge, or to otherwise exploit the Club Area commercially. Finally, no rights to the Club Area may be rented, leased, or otherwise transferred.
6.3 The Club Member is entitled to access and view the content available within the Club Area online exclusively for personal purposes while using the Club Area. Any further editing, whether in whole or in part, presentation, public display, publication, or distribution of content is not permitted for Club members, unless such use is expressly permitted under these Terms of Use or is intentionally enabled by a specific feature within the Club area (z.B. via a download button).
7. Suspension I
. 1
. 2
. 3
. 4
. 5
. 6
. 7
. 7
.1
7.2
7.3 In the event of a temporary suspension,
7.4 In the event of a permanent suspension, reactivation of the profile is not possible. Permanently suspended club members are permanently barred from using the club area and may not re-register.
VI. Right of Withdrawal Regarding Club Membership: Consumers
generally have a statutory right of withdrawal when entering into a distance sale, as described
Withdrawal Policy: Right of Withdrawal
: You have the right to withdraw from this contract within fourteen days without giving any reason.
VII. Liability 1
. The liability of [the club]
2. In cases of negligent breach (simple negligence) of material contractual obligations
3. The provisions of the Product Liability Act remain unaffected. Liability in the event of a warranty remains unaffected as well.
VIII. Data Protection
1. It is in line with the quality standards of
2. Please note that you are personally responsible for the content of your communications. In this context, please always observe the statutory provisions, particularly with regard to the processing of special categories of personal data, as well as violations of the confidentiality of communications under § 201 of the German Criminal Code (StGB) and of private secrets under § 203 of the German Criminal Code (StGB).
3. The club member is aware that the content in the forum is accessible to other authorized club members.
IX. Dispute Resolution 1
. The European Commission provides a platform for the online resolution of consumer disputes, which can be accessed via the following link:http://ec.europa.eu/consumers/odr/
2. Our email address is:carreraclub@carrera-toys.com
3. is
X. Final ProvisionsContracts
between
Effective: March 2023
Privacy Policy <tc>Carrera</tc> <tc>Hybrid</tc> App
Privacy Policy:
In the following, we, d.h.
1. Data Controller and Data Protection
OfficerThe datacontroller for the App and the data controller within the meaning of data protection law is
Rennbahn Allee
15, 412 Puch /
Salzburg, Austria. Managing Director: Stefan KringsPhone
: +43 662 88921-0Email
:shop@carrera-revell.com
Data Protection Officer:
krupna
LEGALE-mail:datenschutz@carrera-toys.com
2. Data Processing and Purpose
: Depending on the specific use of the app, personal data is processed for the purposes listed below. Unless otherwise specified, the legal basis for data processing is Article 6(1)(b) of the GDPR.
2.1. Downloading the App
: When you download the app, the necessary information is transmitted to the respective app store,d.h. including,. in particular, your account’s username, email address, and customer number; the time of the download; payment information; and individual device codes. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the app to your device. We do not store this data beyond that.
2.2. Device and Connection Data: When
your device connects to our server, your device and connection data are processed. This includes your IP address, the date and time of the request, device identification numbers (UDID and similar device numbers), and other device information (operating system and version, manufacturer and model, IMEI, IMSI, mobile phone number, MAC address). The connection data is not used to draw conclusions about the user’s identity or combined with data from other sources; rather, it is used to identify your device, improve the app, and troubleshoot issues. The legal basis is Article 6(1)(f) of the GDPR. After each session or use of the app, the data is anonymized by truncating the IP address at the domain level.
2.3. Initial Registration
To use the app, you must first register. To register for the first time, you must enter your email address, username, and password (hereinafter referred to as “login credentials”), accept the Terms and Conditions, and you will then receive a confirmation link via email. Once you click the link in the email, the registration process is complete. A password must be at least 8 characters long and should ideally consist of a combination of uppercase and lowercase letters, numbers, and special characters. Common words such as “ABC” or keyboard sequences (z.B. “qwert” or “asdfgh”), all types of names (z.B. of friends, colleagues, family members, pets), names of cities and buildings, comic book characters, car brands, license plate numbers, terms, dates of birth, phone numbers, common abbreviations, etc.
Your login credentials must be kept strictly confidential. For your own protection, you must not reuse passwords that have already been used.
In addition, we store your IP address and the time of registration as part of the initial registration process. This is necessary to ensure the security of our information technology systems. The legal basis for processing your data in this case is Article 6(1), first sentence, letter f of the GDPR.
Information that is absolutely necessary for using the app is marked as required. Failure to provide this information means that you will not be able to complete the registration process or use the app.
2.4. Login Credentials—Regular
LoginTo log in to the app in the future after successful initial registration (Section 2.3), you will generally need to enter your login credentials. Your login credentials are transmitted to the server in encrypted form and cannot be viewed by third parties. You do not need to re-enter your login credentials every time you use the app. Instead, your login credentials are temporarily stored on the device using a refresh token. However, to prevent unauthorized use of the app by third parties, we recommend that you log out after use and re-enter your login credentials each time you use the app.
2.5. App Usage and Functionality
The following features are available to you when using the app:
Adding drivers, vehicles, and
routes Listing races (especially times and routes)
Performance measurement
Within the app, you have the optionz.B. to name drivers individually. It is not necessary to use real names when using the app.
To establish a connection between the app and the vehicle, the app requires your permission to access the Bluetooth function on your device. You will be prompted accordingly within the app.
The legal basis for data processing—insofar as you are asked for authorization or consent—is your consent pursuant to Art. 6(1), sentence 1, subparagraph (a) of the GDPR. You are not required to give your consent. However, if you do not give your consent, you will not be able to use the app’s full functionality. You can revoke or grant your consent at any time for the future in your device’s settings.
Other processing of your data is based on Article 6(1), first sentence, (f) of the GDPR.
2.6. Authorization for Location Services:
For the app to function fully, it requires your authorization to access the location services on your device. The so-called Location Access Service is required for a data-based Bluetooth connection. The legal basis for data processing is therefore your consent pursuant to Article 6(1), first sentence, letter a of the GDPR. You are not required to give your consent. However, if you do not give your consent, you will not be able to use the app to its full extent. You can revoke or grant your consent at any time in the future through your device’s settings.
2.7. Crash Reports/Error MessagesIf
you consent to the transmission of a crash report following a system crash of the app or another technical error, the relevant information will be transmitted in anonymized form to the app’s developers for the purpose of analysis.
3. Links to Other
Websites: The app may contain links to social networks (Facebook or Meta, YouTube). These websites are operated by third parties. If you follow the links, information may be transmitted to these third parties. For information on the purpose and scope of data collection by third-party websites, as well as the further processing and use of your data on those sites, and your related rights and privacy settings, please refer to the respective privacy policies of the operators.
4. Recipients/Categories of Recipients of Your Data
We disclose your personal data to third parties or other recipients only if this is necessary for the provision of services, you have given your consent, there is a legal obligation, or the disclosure of data is permitted on another legal basis. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Art. 28 of the GDPR. In accordance with this provision, we use, for example, the hosting services of Amazon Web Services Inc., EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg, with a data center in Frankfurt am Main.
We disclose your data to government agencies only to the extent required by law or based on an official order or court decision.
In addition, your personal data will be or may be transferred to the following recipients or categories of recipients in accordance with the aforementioned provisions:
Companies within the corporate group of
Business partners, sales partners, etc.
Employees and independent
contractorsz.B. Service providers (. IT service providers)
Company buyers/prospective buyers and/or
investors Government agencies or other public authorities, if applicable.
5. Data Transfer to Countries Outside the EU
: As a general rule, we do not transfer your data to recipients outside the EU. However, if it is necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and there are no other legitimate interests that would preclude the data transfer.
6. Retention Period for Personal Data/Criteria for Determining the DurationYour
personal data will be
7. Security Measures to Protect Your Personal Data
We protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates to ensure that the software on your devices is always up to date. If youz.B. are using outdated versions of iOS or Android, some security measures related to the app may not be guaranteed.
8. Your Rights
: Within the framework of legal requirements, you
to receive confirmation as to whether personal data concerning you
to obtain information about this data and the circumstances of its processing,
rectification if such data is inaccurate,
erasure if there is no longer any legal basis for processing or obligation to retain the data,
restriction of processing in specific cases prescribed by law,
objection in the event of data processing based on Article 6(1)(f) of the GDPR;
and the transfer of your personal data—to the extent you have provided it—to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please review the settings on your device in this regard.
Please submit your specific request in writing or by email, ensuring that you can be clearly identified, to:
Rennbahn Allee
15,412 Puch /
Salzburg, Austria. Email:datenschutz@carrera-toys.com
Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
9
. No Automated Individual Decision-Making We
do not use your personal data for automated individual decision-making.
10. Changes to the Privacy Policy New
legal requirements, business decisions, or technical developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly. You can always find the current version in the app.
Privacy Policy: <tc>Carrera</tc> Race Management App
In the following provisions, we, d.h.
1. Provider and Data Protection OfficerThe provider
of the Race App and the data controller within the meaning of data protection law is
Rennbahn Allee 1, 5412 Puch
/
Salzburg, Austria. Managing Director: Stefan Krings
. Tel.: +43 (0) 662 88921-0Email
:shop@carrera-toys.com
atEmail:datenschutz@carrera-toys.com
Rennbahn Allee
1 5412 Puch/Salzburg
2. Data Processing and Purpose
: Depending on the specific use of the Race App, personal data is processed for the purposes specified below. Unless otherwise stated, the legal basis for data processing is Article 6(1), first sentence, letter b of the GDPR.
2.1. Downloading the Race App
When you download the Race App, the necessary information is transmitted to the respective app store,d.h. specifically your account’s username, email address, and customer number, the time of the download, payment information, and your device’s unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the Race App onto your device. It is not stored beyond that.
2.2. Device and Connection Data: When
your device establishes a connection with our server, your device and connection data are processed. This includes your IP address, the date and time of the request, device identifiers (UDID and similar device numbers), and other device information (operating system and version, manufacturer and model, IMEI, IMSI, mobile phone number, and MAC address). Connection data is not used to identify the user personally or combined with data from other sources; rather, it is used to identify your device, improve the RC MicroHD app, and troubleshoot issues. The legal basis is Article 6(1)(f) of the GDPR.
2.3. Features of the RC MicroHD App and Data
ProcessingWhen using the Race App, the following features are available to you in particular:
• Creating drivers, vehicles, and
tracks• Organizing championships (including Training and Qualification)
• List of the fastest
races• Performance measurement
After entering the above data and before the race begins:
• Adjust speed, fuel, and brakes
Within the Race app, you canz.B. name each. driver individually and assign a photo to them. As part of these features, you can access the photo album stored on your device or—after granting permission for the camera function—take a new photo.
To establish a connection between the Race App and the vehicle, the Race App requires your authorization to access your device’s Bluetooth function. You will be prompted accordingly within the Race App. The legal basis for data processing—insofar as you are asked for authorization—is your consent pursuant to Art. 6(1)(a) of the GDPR. You are not required to provide your consent. However, if you do not give your consent, you will not be able to take full advantage of the Race app’s features. You can revoke or grant your consent at any time in the future through your device’s settings. The processing of your data in other respects is based on Article 6(1)(f) of the GDPR.
2.4. Authorization for Location Services For
the app to function fully, it requires your authorization to access the location services on your device. The so-called Location Access Service is required for a data-based Bluetooth connection. The legal basis for data processing is therefore your consent pursuant to Article 6(1)(a) of the GDPR. You are not obligated to give your consent. However, if you do not grant your consent, you will not be able to use the app’s full functionality. You can revoke or grant your consent at any time in the future via your device’s settings.
3. Links to Other Websites
: The Race App contains links to social media platforms (Facebook, YouTube). These websites are operated by third parties. If you follow these links, information may be transmitted to these third parties. For information on the purpose and scope of data collection by third-party websites, as well as the further processing and use of your data on those sites, and your rights and privacy settings in this regard, please refer to the respective privacy policies of the operators.
4. Data
TransferYour personal data will only be transferred to third parties or other recipients if there is legal authorization to do so or if you have given your prior consent. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR. We disclose your data to government agencies only to the extent required by law or pursuant to an official order or court decision.
5. Data Transfer to Countries Outside the EU
We generally do not transfer your data to recipients outside the EU. However, if it is necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and there are no other legitimate interests that would preclude the data transfer.
6. Retention Period for Personal Data/Criteria for Determining the Retention Period:
Your personal data will be
7. Data Security
We protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates yourself to ensure that the software on your devices is always up to date. If youz.B. are using outdated versions of iOS or Android, some security measures related to the RC MicroHD app may not be guaranteed.
8. Your Rights
: Within the framework of legal requirements
• Access to this data and information regarding the circumstances of its processing;
• Rectification, if this data is inaccurate;
• erasure, provided there is no legal basis for the processing and no obligation to retain the data (any longer),
• restriction of processing in specific cases prescribed by law,
• objection in the event of data processing based on Article 6(1)(f) of the GDPR, and
• the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please refer to the settings on your device for more information. Please submit your specific request in writing or by email, including clear identification of your identity, to:
Email:datenschutz@carrera-toys.com
Rennbahn Allee
15, 412 Puch /
Salzburg. Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
9. No Automated Individual Decision-Making We
do not use your personal data for automated individual decision-making.
10. Changes to the Privacy Policy New
legal requirements, business decisions, or technological developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly.
Privacy Policy: <tc>Carrera</tc> <tc>GO!!!</tc> Plus App
In the following provisions, we, d.h.
1. Provider and Data Protection OfficerThe provider
of the
Rennbahn Allee 1, 5412 Puch
/
Salzburg, Austria. Managing Director: Stefan Krings
. Tel.: +43 (0) 662 88921-0Email
:shop@carrera-toys.com
at: Email:datenschutz@carrera-toys.com
Rennbahn Allee
1, 5412 Puch/Salzburg
2. Data Processing and Purpose
: Depending on the specific use of the
2.1. Downloading the
When you download the RC MicroHD app, the information required for the download is transmitted to the respective app store, d.h. specifically your account’s username, email address, and customer number, the time of the download, payment information, and your device’s unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the RC MicroHD app onto your device. It is not stored beyond that.
2.2. Device and Connection Data:
Whenyou download the
2.3. Features of the
Data ProcessingWhen using the
• Adding drivers•
Pursuit mode•
Training,
and• Lap races
Within the
2.4. Authorization for Location
Services:For the app to function fully, it requires your authorization to access your device’s location services. The so-called Location Access Service is required for a data-based Bluetooth connection. The legal basis for data processing is therefore your consent pursuant to Art. 6(1)(a) of the GDPR. You are not required to give your consent. However, if you do not grant your consent, you will not be able to use the app’s full functionality. You can revoke or grant your consent at any time for the future in your device’s settings.
3. Data Transfer
Your personal data will only be transferred to third parties or other recipients if there is a legal basis for doing so or if you have given your prior consent. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR. We disclose your data to government agencies only to the extent required by law or pursuant to an official order or court decision.
4. Data Transfer to Countries Outside the EU
We generally do not transfer your data to recipients outside the EU. However, should it be necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and no other legitimate interests oppose the data transfer.
5. Retention Period for Personal Data/Criteria for Determining the Retention Period:
Your personal data will be
6. Data Security
We protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates yourself to ensure that the software on your devices is always up to date. If youz.B. are using outdated versions of iOS or Android, some security measures related to the
7. Your Rights
: Within the framework of legal requirements
• Access to this data and information regarding the circumstances of its processing;
• Rectification, if this data is inaccurate;
• erasure, provided there is no legal basis for the processing and no obligation to retain the data (any longer),
• restriction of processing in specific cases prescribed by law,
• objection in the event of data processing based on Article 6(1)(f) of the GDPR, and
• the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please refer to the settings on your device for more information. Please submit your specific request in writing or by email, including clear identification of your identity, to:
Email:datenschutz@carrera-toys.com
Rennbahn Allee
15, 412 Puch /
Salzburgdsb@dsb.gv.at. Finally, we would like toinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
8. No Automated Individual Decision-Making: We
do not use your personal data for automated individual decision-making.
9. Changes to the Privacy Policy
: Newlegal requirements, business decisions, or technological developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly.
Privacy Policy: <tc>Carrera</tc> RC MicroHD App
In the following provisions, we, d.h.
1. Provider and Data Protection OfficerThe provider
of the RC MicroHD app and the data controller within the meaning of data protection law is
Rennbahn Allee 1, 5412 Puch
/
Salzburg, Austria. Managing Director: Stefan Krings
. Tel.: +43 (0) 662 88921-0Email
:shop@carrera-toys.com
via email:datenschutz@carrera-toys.com
Rennbahn Allee
1 5412 Puch/Salzburg
2. Data Processing and Purpose
: Depending on the specific use of the RC MicroHD app, personal data is processed for the purposes listed below. Unless otherwise specified, the legal basis for data processing is Article 6(1), first sentence, letter b of the GDPR.
2.1. Downloading the RC MicroHD AppWhen
you download the RC MicroHD App, the necessary information is transmitted to the respective app store,d.h. specifically your account’s username, email address, and customer number, the time of the download, payment information, and your device’s unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the RC MicroHD app onto your device. It is not stored beyond that.
2.2. Device and Connection Data: When
your device establishes a connection with our server, your device and connection data are processed. This includes your IP address, the date and time of the request, device identifiers (UDID and similar device numbers), and other device information (operating system and version, manufacturer and model, IMEI, IMSI, mobile phone number, and MAC address). Connection data is not used to identify the user personally or combined with data from other sources; rather, it is used to identify your device, improve the RC MicroHD app, and troubleshoot issues. The legal basis is Article 6(1)(f) of the GDPR.
2.3. RC MicroHD App Features and Data Processing
When using the RC MicroHD app, the following features are available to you:
• Setting up a local network between your mobile phone and the quadcopter•
Streaming real-time images (video and photos) to the app
• Remotely controlling the quadcopter•
Saving videos and photos from the stream to the app or a local image/video folder
To establish a connection between the RC MicroHD app and the drone, the RC MicroHD app requires your permission to access your device’s Wi-Fi functionality. You will be prompted accordingly in the RC MicroHD app.
The legal basis for data processing—insofar as you are asked for authorization—is your consent pursuant to Art. 6(1)(a) of the GDPR. You are not required to give your consent. However, if you do not give your consent, you will not be able to take full advantage of the RC MicroHD app’s features. You can revoke or grant your consent at any time in the future through your device’s settings. Other processing of your data is based on Article 6(1)(f) of the GDPR.
3. Link to the Online Store
This RC MicroHD app contains a link to the
4. Data
TransferYour personal data will only be transferred to third parties or other recipients if there is legal authorization to do so or if you have given your prior consent. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR. We disclose your data to government agencies only to the extent required by law or pursuant to an official order or court decision.
5. Data Transfer to CountriesOutside the EU
We generally do not transfer your data to recipients outside the EU. However, if it is necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and there are no other legitimate interests that would preclude the data transfer.
6. Retention Period for Personal Data/Criteria for Determining the Retention Period:
Your personal data will be
7. Data Security
We protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates yourself to ensure that the software on your devices is always up to date. If youz.B. are using outdated versions of iOS or Android, some security measures related to the RC MicroHD app may not be guaranteed.
8. Your Rights
: Within the framework of legal requirements
• Access to this data and information regarding the circumstances of its processing;
• Rectification, if this data is inaccurate;
• erasure, provided there is no legal basis for the processing and no obligation to retain the data (any longer),
• restriction of processing in specific cases prescribed by law,
• objection in the event of data processing based on Article 6(1)(f) of the GDPR, and
• the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please refer to the settings on your device for more information. Please submit your specific request in writing or by email, including clear identification of your identity, to:
Email:datenschutz@carrera-toys.com
Rennbahn Allee
15, 412 Puch /
Salzburg. Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
9. No Automated Individual Decision-Making: We
do not use your personal data for automated individual decision-making.
10. Changes to the Privacy Policy
: Newlegal requirements, business decisions, or technological developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly.
Privacy Policy: <tc>Carrera</tc> RC App
In the following provisions, we, d.h.
1. Provider and Data Protection OfficerThe provider
of the RC App and the data controller within the meaning of data protection law is
Rennbahn Allee 1, 5412 Puch
/
Salzburg, Austria. Managing Director: Stefan Krings
. Tel.: +43 (0) 662 88921-0Email
:shop@carrera-toys.com
atEmail:datenschutz@carrera-toys.com
Rennbahn Allee
1, 5412 Puch/Salzburg2
. Data Processing and Purpose
: Depending on the specific use of the RC app, personal data is processed for the purposes specified below. Unless otherwise stated, the legal basis for data processing is Article 6(1), first sentence, letter b of the GDPR.
2.1. Downloading the RC App: When
you download the RC App, the information required for the download is transmitted to the respective app store,d.h. specifically your account’s username, email address, and customer number; the time of the download; payment information; and your device’s unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the RC app onto your device. It is not stored beyond that.
2.2. Device and Connection Data: When
your device establishes a connection with our server, your device and connection data are processed. This includes your IP address, the date and time of the request, device identifiers (UDID and similar device numbers), and other device information (operating system and version, manufacturer and model, IMEI, IMSI, mobile phone number, and MAC address). Connection data is not used to identify the user personally or combined with data from other sources; rather, it is used to identify your device, improve the RC MicroHD app, and troubleshoot issues. The legal basis is Article 6(1)(f) of the GDPR.
2.3. RC App Features and Data Processing
When using the RC app, the following features are available to you:
• Setting up a local network between your cell phone and the quadcopter•
Streaming real-time images (video & photos) to the app•
Saving videos and photos from the stream to the app or a local image/video folder
To establish a connection between the RC app and the vehicle, the RC app requires your permission to access your device’s Wi-Fi function. You will be prompted accordingly within the RC app. The legal basis for data processing—insofar as you are asked for authorization—is your consent pursuant to Art. 6(1)(a) of the GDPR. You are not obligated to grant your consent. However, if you do not grant your consent, you will not be able to use the full functionality of the RC app. You can revoke or grant your consent at any time for the future in your device's settings. The processing of your data for other purposes is based on Article 6(1)(f) of the GDPR.
3. Link to the Online Store
This RC app contains a link to the
4. Data Transfer
Your personal data will only be transferred to third parties or other recipients if there is a legal basis for doing so or if you have given your prior consent. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR. We will only disclose your data to government agencies in accordance with legal obligations or pursuant to an official order or court decision.
5. Data Transfer to Countries Outside the EU:
We generally do not transfer your data to recipients outside the EU. However, if it is necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and no other legitimate interests preclude the data transfer.
6. Duration of Personal Data Storage/Criteria for Determining the Duration
7. Data Security We
protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates yourself to ensure that the software on your devices is always up to date. If youz.B. are using outdated versions of iOS or Android, some security measures related to the RC MicroHD app may not be guaranteed.
8. Your Rights
: Within the framework of legal requirements
• Access to this data and information regarding the circumstances of its processing;
• Rectification, if this data is inaccurate;
• erasure, provided there is no legal basis for the processing and no obligation to retain the data (any longer),
• restriction of processing in specific cases prescribed by law,
• objection in the event of data processing based on Article 6(1)(f) of the GDPR, and
• the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please refer to the settings on your device for more information. Please submit your specific request in writing or by email, including clear identification of your identity, to:
Email:datenschutz@carrera-toys.com
, Rennbahn Allee
15, 412 Puch/Salzburg
Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
9. No Automated Individual Decision-Making: We
do not use your personal data for automated individual decision-making.
10. Changes to the Privacy Policy
: Newlegal requirements, business decisions, or technological developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly.
Privacy Policy: RC <tc>Carrera</tc> FPV App
In the following provisions, we, d.h.
1. Provider and Data Protection OfficerThe provider
of the RC FPV app and the data controller within the meaning of data protection law is
Rennbahn Allee 1, 5412 Puch
/
Salzburg, Austria. Managing Director: Stefan Krings
. Tel.: +43 (0) 662 88921-0Email
:shop@carrera-toys.com
via email:datenschutz@carrera-toys.com
Rennbahn Allee
1 5412 Puch/Salzburg
2. Data Processing and Purpose
: Depending on the specific use of the RC FPV app, personal data is processed for the purposes specified below. Unless otherwise stated, the legal basis for data processing is Article 6(1)(b) of the GDPR.
2.1. Downloading the RC FPV AppWhen
you download the RC FPV App, the information required for the download is transmitted to the respective app store,d.h. specifically your account’s username, email address, and customer number, the time of the download, payment information, and your device’s unique identifier. We have no control over this data collection and are not responsible for it. We process this provided data to the extent necessary for downloading the RC FPV app onto your device. It is not stored beyond that.
2.2. Device and Connection Data: When
your device establishes a connection with our server, your device and connection data are processed. This includes your IP address, the date and time of the request, device identifiers (UDID and similar device numbers), and other device information (operating system and version, manufacturer and model, IMEI, IMSI, mobile phone number, and MAC address). Connection data is not used to identify the user personally or combined with data from other sources; rather, it is used to identify your device, improve the RC MicroHD app, and troubleshoot issues. The legal basis is Article 6(1)(f) of the GDPR.
2.3. RC FPV App Features and Data
ProcessingWhen using the RC FPV app, the following features are available to you:
• Establishing a local network between your smartphone and the quadcopter•
Streaming real-time images (video & photos) to the app
• Special display mode for use with 3D glasses, where the smartphone serves as the display device
• Saving videos and photos from the stream to the app or a local image/video folder
To establish a connection between the RC FPV app and the vehicle, the app requires your permission to access your device’s Wi-Fi functionality. You will be prompted accordingly in the RC FPV app. The legal basis for data processing—insofar as you are asked for authorization—is your consent pursuant to Art. 6(1)(a) of the GDPR. You are not obligated to provide your consent. However, if you do not give your consent, you will not be able to take full advantage of the RC FPV app’s features. You can revoke or grant your consent at any time in the future through your device’s settings.
The processing of your data in other respects is based on Article 6(1)(f) of the GDPR.
3. Link to the Online Store
This RC FPV app contains a link to the
4. Data
TransferYour personal data will only be transferred to third parties or other recipients if there is legal authorization to do so or if you have given your prior consent. Where necessary, we have entered into data processing agreements with the recipients of your data in accordance with Article 28 of the GDPR. We disclose your data to government agencies only to the extent required by law or pursuant to an official order or court decision.
5. Data Transfer to Countries Outside the EU
We generally do not transfer your data to recipients outside the EU. However, should it be necessary for our purposes, we will transfer your data only if it is ensured that the recipient of the data guarantees an adequate level of data protection and no other legitimate interests preclude the data transfer.
6. Retention Period for PersonalData/Criteria for Determining the Retention Period:
Your personal data will be
7. Data Security
We protect your data from unauthorized access, loss, or destruction through technical and organizational measures. Our security measures are continuously improved in line with technological developments. In this context, however, it is important that you actively manage updates yourself to ensure that the software on your devices is always up to date. If you z.B . are using outdated versions of iOS or Android, some security measures related to the RC MicroHD app may not be guaranteed.
8. Your Rights
: Within the framework of legal requirements
• Access to this data and information regarding the circumstances of its processing;
• Rectification, if this data is inaccurate;
• erasure, provided there is no legal basis for the processing and no obligation to retain the data (any longer),
• restriction of processing in specific cases prescribed by law,
• objection in the event of data processing based on Article 6(1)(f) of the GDPR, and
• the right to have your personal data—to the extent you have provided it—transferred to you or a third party in a structured, commonly used, and machine-readable format.
To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, with the result that the processing of your personal data will no longer be permitted going forward. However, this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Please check the settings on your device. Please submit your specific request in writing or by email, including clear identification of yourself, to:
Email:datenschutz@carrera-toys.com
Rennbahn Allee
15, 412 Puch /
Salzburg. Finally, we would like todsb@dsb.gv.atinform you of your right to file a complaint with the supervisory authority (Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna).
9. No Automated Individual Decision-Making We
do not use your personal data for automated individual decision-making.
10. Changes to the Privacy Policy New
legal requirements, business decisions, or technological developments may require changes to our Privacy Policy. The Privacy Policy will then be updated accordingly.
