You can download this PRIVACY-POLICY AS PDF-FILE here!
Our handling of your data and your rights Information referred to in Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
We hereby inform you about processing your personal data by us and about the claims and rights to which you are entitled under the data protection regulations. Which data are processed in detail and how they are used depends largely on the services you have requested or agreed with.
I. General information on data processing
1. Who is responsible for data processing and who to contact?
Responsible body is:
Global Solutions Systems GmbH
You can contact our data protection officer at:
Global Solutions Systems GmbH
2. What sources and data do we use?
We process personal data that we receive from you in the course of our business relationship. On the other hand, we process personal data that we have legitimately collected and processed from publicly accessible sources (trade and association register, press, media).
Relevant personal data are personal data (name, address and other contact data, birthday and place as well as nationality) and identification data (e.g. identification data). In addition, this may also include data from the telemedia we offer (e.g. time of accessing our websites, apps, newsletters or clicked pages) as well as other data comparable to the above categories.
3. Purpose of processing your data and on which legal basis?
We process personal data in order to offer you the service of an "Information, Marketing and Training App for Community Based Marketing".
Your data will be processed in accordance with the provisions of the General Data Protection Regulation (GDRP) and the Federal Data Protection Act (BDSG).
a) Fulfilment of contractual obligations (Article 6 para. 1 lit. b GDPR)
The processing of personal data (Art. 4 No. 2 GDPR) is carried out to provide the service of an "Information, Marketing and Training App for Community Based Marketing". The purposes of data processing are, on the one hand, to give you the opportunity to submit contributions (videos, texts, images or other media) in order to make them available to other participants and, on the other hand, to give you the opportunity to generate income through an affiliate program and the associated accounting system "dynamic matrix" (DMS). Further details explaining the purpose of data processing can be found in the texts "General Terms and Conditions" (GTC), "Community Rules" and "Conditions of Participation".
b) Context of interests assessment (Article 6 para. 1 lit. f GDPR)
If necessary, we process your data beyond the actual performance of the contract to protect the legitimate interests of us or third parties.
(1) Review and optimization of procedures for needs analysis and direct customer approach;
(2) Advertising or market and opinion research, as long as you have not objected to the use of your data;
(3) Assertion of legal claims and defence in legal disputes;
(4) Ensuring the IT security and IT operation of bizmo;
(5) Measures for business management and further development of services and products
c) Basis of your approval (Art. 6 para. 1 lit. a GDPR)
If you have given us your consent to process personal data for specific purposes (e.g. organization of life events, training or marketing purposes), the legality of such processing is given on the basis of your consent. A given consent can be revoked at any time. Please note, however, that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
4. Who gets my data?
Within "Global Solutions Systems GmbH" (GSS), those departments receive your data which are needed to fulfil our contractual and legal obligations. Contractors used by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories IT services, logistics, printing services, telecommunications, consulting and sales and marketing. With regard to the transfer of data to recipients outside GSS, we proceed in accordance with the "General Terms and Conditions" (GTC) agreed between you and us.
We will only disclose information about you if required to do so by law or if you have given your consent. Under these conditions, recipients of personal data can be, for example: Public authorities and institutions (e.g. tax authorities) in the event of a statutory or official obligation. Payment providers (providers of the payment systems we use), provided they can prove a justified interest. Other recipients of data may be those bodies for which you have given us your consent to the transfer of data in the respective individual case.
5. How long will my data be stored?
In principle, we process and store your personal data for the duration of our business relationship, i.e. as long as you are a member of the Lifestyle community "bizmo". Our business relationships are regularly geared to the long term. In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB), the Fiscal Code (AO) and other tax and commercial obligations. The periods for storage and documentation specified there range from two to ten years. In addition, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB) may as a rule be three years, but in certain cases also up to thirty years.
6. Will data be transmitted to foreign countries or international organizations?
A data transfer to third countries (countries outside the European Economic Area - EEA) takes place regularly if you yourself are an international user residing outside the EEA, or as a European user use the service of "bizmo" outside the EEA area. In the first case, you as a user are subject to the legal regulations of your country of residence, in the second case we assume your consent. We will inform you separately about further details, if required by law
7. Which data protection rights do I have?
Each data subject has the right of access under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to cancellation under Article 17 GDPR, the right to limitation of processing under Article 18 GDPR and the right to data transferability under Article 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right of cancellation. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG)
8. Is there an obligation to provide private data?
In the context of our business relationship you only have to provide those personal data which are necessary for the establishment, execution and termination of a business relationship or which we are legally obliged to collect. Without this information, we cannot include you in the international Lifestyle community "bizmo" and make the various services of our community inaccessible to you, including the opportunity to earn money with "bizmo". In particular, we are obliged under the provisions of money laundering law to identify you on the basis of your identity card, for example, and to determine your name, place of birth, date of birth, nationality and address before disbursing funds. To enable us to comply with this legal obligation, you must provide us with the necessary information and documents and notify us immediately of any changes arising in the course of the business relationship. If you do not provide us with the necessary information and documents, we may not enter into the business relationship you have requested.
9. To what extent is there automated decision making in individual cases?
As a matter of principle, we do not use automated decision making according to Art. 22 GDPR for the establishment and implementation of the business relationship, as participation in "bizmo" is not linked to a credit assessment or profiling. Your application for membership is accepted if you provide the relevant information on the registration page and accept our "General Terms and Conditions" (GTC). Before submitting contributions to the community you have to accept the "Community Rules" and before the first payment the "Conditions of participation" including the necessary verification of your personal data.
10. To what extent is my data used for profile formation (scoring)?
We do NOT process your data automatically with the aim of evaluating certain personal aspects (profiling). We do NOT use profiling.
II. Provision of website and app as well as creation of log files
11. Description and scope of data processing
Every time you visit our website or the Bizmo app, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:
(1) Information about the browser type and version used (not with Bizmo-App)
(2) The user's operating system
(3) The IP address of the user
(4) Date and time of access
These data are stored in the log files of our system, but not together with other personal data of the user.
12. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR
13. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
14. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For website delivery data, this is the case when the session in question has ended. The data stored in log files is usually deleted after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment to individual users is no longer possible. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of contradiction on the part of the user.
15. Description and scope of data processing
(1) Language settings
(2) Log-in information
In this way, the following data can be determined:
(1) Use of website functions
(2) Frequency of page views
(3) Entered search terms
16. Legal basis for data processing
The legal basis for the processing of personal data using cookies is:
Art. 6 para. 1 lit. f GDPR
17. Purpose of data processing
18. Duration of storage, objection and elimination
19. Description and scope of data processing
On our website we can offer the possibility to subscribe to a free newsletter. If this is the case, the data from the input mask will be transmitted to us when registering for the newsletter. In this way, the following data can be determined:
(1) E-mail address (required)
(2) First and last name (optional information used to personalise the newsletter)
In addition, the following data is collected upon registration:
(1) IP address of the calling computer
(2) Date and time of registration
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.
20. Legal basis for data processing
The legal basis for the processing of the data after registration for the newsletter by the user is the existence of the user's consent pursuant to Art. 6 para. 1 lit. a GDPR.
21. Purpose of data processing
The collection of the user's e-mail address serves to send the newsletter. The collection of further personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used and to personalise the newsletter.
22. Duration of storage, objection and elimination
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, each newsletter contains a corresponding link.
23. Description and scope of data processing
On our website www.bizmo.me we offer users the opportunity to register for www.bizmo.world by providing personal data. The data is entered into an input mask and transmitted to us and saved. The data will not be passed on to third parties. The following data is collected during the registration process:
(1) First name (required)
(2) Last name (required)
(3) Username (required field, can be freely chosen by the user, if it has not yet been assigned)
(4) E-mail address (required)
In addition, the following data is stored during registration:
(1) IP address of the calling computer
(2) Date and time of registration
As part of the registration process, the user's consent to the processing of this data is obtained.
24. Legal basis for data processing
The legal basis for the processing of the data is the existence of the user's consent pursuant to Art. 6 para. 1 lit. a GDPR. Since registration also serves to fulfil a contract to which the data subject is a party (participation in the global Lifestyle community "bizmo"), or since this step amounts to the implementation of a pre-contractual measure (possible conclusion of a chargeable membership), the additional legal basis for processing the data is Art. 6 Para. 1 lit. b GDPR.
25. Purpose of data processing
User registration is mandatory for participation in the global Lifestyle community "bizmo" in order to make the contents and services of "bizmo" accessible to the user. The registration of the user is necessary for the fulfilment of a contract with the user and/or for the execution of pre-contractual measures. After registering as a "passive member" free of charge, the user has the option of acquiring an "active membership" subject to a fee in accordance with the provisions of the GTC at any time. The Purpose of data processing is based on the provision of the benefits and advantages that can be achieved in this way
26. Duration of storage, objection and elimination
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case for the data collected during the registration process to fulfil a contract or to carry out pre-contractual measures when the data is no longer required to carry out the contract. Even after conclusion and termination of a contract, however, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations (see point 5 of this data protection declaration).
VI. Contact forms, support system & e-mail contact
27. Description and scope of data processing
A contact form can be used on our website to contact us electronically. In addition, there is a support system in the "Backoffice", the internal area of the website, which can be used to make contact. If the user uses one of these options, the data entered in the input masks will be transmitted to us and stored. At the time of sending messages, the following data is also stored:
(1) The IP address of the user
(2) Date and time of inception of contact
The data will be processed in accordance with this data protection declaration. Alternatively, you can contact us via the e-mail address provided on the website. In this case, the user's personal data transmitted by e-mail will be stored. However, in none of the cases will the data be passed on to third parties. The data is used exclusively for processing the conversation.
28. Legal basis for data processing
The legal basis for the processing of the data is the existence of the user's consent pursuant to Art. 6 para. 1 lit. a GDPR. The legal basis for the data transmitted in the course of transmission by e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is also Art. 6 para. 1 lit. b GDPR.
29. Purpose of data processing
The processing of personal data from the input masks serves us solely for the processing of contact and customer support. If contact is made by e-mail, this also includes the necessary legitimate interest in the processing of the data. The remaining personal data processed during the sending process serves to prevent misuse of the contact and support forms and to ensure the security of our information technology systems.
30. Duration of storage, objection and elimination
The data of a public contact form will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is regularly the case when the respective conversation with the user is finished. The conversation is over when the circumstances indicate that the matter in question has been finally resolved. In the case of the internal support system, the data can remain stored as a "history" for as long as the user is a member of the Lifestyle community "bizmo", unless he explicitly requests the deletion of the data.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, however, the conversation cannot be continued. The revocation of the consent and the objection against a storage can take place via e-mail to our data protection officer (see point I. 1). All personal data stored in the course of contacting us will be deleted in this case.
VII. Use of „Google Analytics“
31. Description and scope of data processing
For automated personalized analysis, we use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA "Google"). The use includes the "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices. Google Analytics uses "cookies" for this (see point III. of this statement). The information generated by the cookie about the use of the website is usually transferred to a Google server in the USA and stored there.
However, by activating IP anonymisation on our websites, Google will previously reduce the IP addresses of our users within Member States of the European Union and in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate the use of the websites by users, compile reports on their website activities and provide GSS with further services associated with the use of the website and the Internet. The IP address transmitted by the user's browser within the scope of Google Analytics is not merged with other Google data.
32. Legal basis for data processing
Our legitimate interest in data processing also lies in the aforementioned reports on the website activities. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR.
33. Purpose of data processing
The analysis cookies are used to improve the quality of our website and its content. Through analysis cookies we learn how the website is used and can thus optimise our offer (see also point 17).
34. Duration of storage, objection and elimination
The data sent by us and linked with cookies or user IDs (e.g. user IDs) are automatically deleted after 50 months. Data whose retention period has been reached is automatically deleted once a month. The user can prevent the storage of the cookies by an appropriate setting of his browser software; GSS points out, however, that the user will not be able to use all functions of the bizmo web pages in this case. The user can also prevent the collection of data generated by the cookie and related to his use of the bizmo website as well as the processing of this data by Google by first clicking on the following link ->
VIII. Presence in social networks
35. General information on social networks
We maintain online presences in social networks in order to communicate active with the users and to offer information about us. We would like to point out that user data from outside the European Union may be processed in this context. This can result in risks for the users, because the enforcement of rights can be more difficult, for example. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and interests of the users are stored.
In addition, data can also be stored in the user profiles independently of the devices used by the users, especially if the users are logged in to the respective platforms. For a detailed explanation of the respective forms of processing and the possibilities of objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.
We would like to point out that requests for information and the assertion of data subject rights are best made directly to the providers, as only they have access to the users' data and can take appropriate measures or provide information. If you need help, you can contact our data protection officer.
36. Description and scope of data processing
37. Legal basis for data processing
The legal basis for the processing of the data is the legitimate interest pursuant to
Art. 6 Par. 1 letter f DSGVO
38. Services used and service providers
• Facebook: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Statement: https://www.facebook.com/about/privacy; Privacy Shield (ensuring privacy level for processing of data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Opt-Out: Settings for advertisements: https://www.facebook.com/settings?tab=ads; Additional Privacy Notice: Agreement on joint processing of personal data on Facebook Pages: https://www.facebook.com/legal/terms/page_controller_addendum, Privacy Notice for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
IX. Plugins and embedded functions and content
We integrate functional and content elements into our online offer, which are obtained from the servers of their respective providers (hereinafter referred to as "third party providers"). These can be, for example, graphics, videos or social media buttons as well as contributions (hereinafter referred to uniformly as "content"). The integration always requires that the third party providers of such content process the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore required for the display of these contents or functions. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Information can be evaluated through the "pixel tags". The pseudonymous information may be stored in cookies on the user's device and may contain or be linked to technical information on the browser and operating system, websites to be referred to, the time of visit and other information on the use of our online offer.
39. Description and scope of data processing
The data processed in this context includes usage data (e.g. websites visited, access times, etc.), meta/communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers) and content data (e.g. text entries, photographs, videos). This affects website visitors and users of the online services. The purpose of the processing is to provide our offers, user-friendliness, the execution of contractual services and performances, security measures as well as the administration and answering of inquiries.
40. Legal basis for data processing
• Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO)
• Consent (Art. 6 para. 1 sentence 1 lit. a DSGVO)
• Contract performance and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO)
41. Services used and service providers
X. Service provider and recipient of data
42. Description and scope of data processing
Your personal data will not be transmitted to third parties for purposes other than those stated in this declaration. We will only pass on your personal data (see also point 3.2) to third parties if this is legally permissible and necessary for the processing of contractual relationships with you.
43. Legal basis for data processing
Within the scope of the aforementioned processing, we use the following service providers with whom we have concluded so-called ADVs (agreements for order processing) in accordance with § 28 GDPR:
(1) Contabo GmbH, Aschauer Strasse 32a, 81549 Munich &
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen:
Hosting of our websites and operation of the mail servers
(2) G&L GmbH, Maarweg 149-161, 50825 Cologne:
Hosting of videos on cdn servers of the
Akamai Technologies GmbH, Parkring 20 - 22, 85748 Garching
XI. Information on your right of objection in accordance with Art. 21 of GDRP
1. Right of objection in individual cases
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(f) of the DSBER (data processing on the basis of a balance of interests).If you object, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
2. Right to object to the processing of data for direct marketing purposes
In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.The objection can be made form-free and should be addressed to:
Global Solutions Systems GmbH
This agreement has originally been drafted in the German language. If there is a conflict between any translation of this agreement and the German version, the German version shall prevail.
Last revised: February 8, 2020