Privacy policy
This privacy policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter "data") within our online offering and the associated websites, functions and content, as well as external online presences, such as our social media profiles on (hereinafter collectively referred to as the "online offering"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is FrankJuice GmbH, Grüntal 34, 81925 München, Germany, email: info@thefrankjuice.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.
2) Data collection when visiting our website
When you use our website for information purposes only, i.e. if you do not register or otherwise send us information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to check the server log files retrospectively should specific indications point to unlawful use.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data and IP address values, to an individual extent. Persistent cookies are deleted automatically after a predefined period, which can differ depending on the cookie.
In some cases, the cookies serve to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual cart for a later visit to the website). Insofar as personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or generally. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be restricted.
4) Contacting us
When you contact us (e.g. via contact form, email, telephone or social media), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been fully dealt with; this is the case when it can be inferred from the circumstances that the matter concerned has been conclusively resolved and provided that no statutory retention obligations stand in the way.
5) Data processing when opening a customer account and for contract processing
We process the data of our customers in the course of ordering processes in our online shop, in order to enable them to select and order the chosen products and services, and to pay for and receive their delivery or fulfilment.
The processed data includes master data, communication data, contract data and payment data, and the persons affected by the processing include our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online shop, billing, delivery and customer services. In doing so, we use session cookies to store the contents of the cart and persistent cookies to store the login status.
The processing is carried out on the basis of Art. 6 para. 1 lit. b (performance of ordering processes) and c (legally required archiving) GDPR. The information marked as required is necessary to establish and fulfil the contract. We only disclose the data to third parties in the course of delivery, payment or within the scope of legal permissions and obligations towards legal advisers and authorities. The data is only processed in third countries if this is necessary for the performance of the contract (e.g. at the customer's request for delivery or payment).
Users can optionally create a user account, in which they can, in particular, view their orders. As part of the registration, the required mandatory information is communicated to users. User accounts are not public and cannot be indexed by search engines. If users have cancelled their user account, their data relating to the user account will be deleted, subject to its retention being necessary for commercial or tax law reasons pursuant to Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until its deletion, followed by archiving in the case of a legal obligation. It is the responsibility of users to back up their data upon cancellation before the end of the contract.
As part of registration and renewed logins, as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of users, in protection against misuse and other unauthorised use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR.
Deletion takes place after the expiry of statutory warranty and comparable obligations; the necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion takes place after these have expired (end of the commercial (6 years) and tax (10 years) retention obligation).
6) Use of your data for direct marketing
6.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to the sending of newsletters. We will then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you wish to receive newsletters in future.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of subscription, in order to be able to trace any misuse of your email address at a later point in time. The data we collect when you subscribe to the newsletter is used exclusively for the purposes of advertising communication by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range to those already purchased by email. For this we do not need to obtain separate consent from you in accordance with § 7 para. 3 UWG (German Act against Unfair Competition). The data processing in this respect takes place solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur transmission costs according to the basic rates for this. Once we receive your objection, the use of your email address for advertising purposes will cease immediately.
6.3 Newsletter dispatch via Klaviyo
Our email newsletters are sent via the technical service provider Klaviyo Inc, 125 Summer Street, Floor 6, Boston, Massachusetts 02111, USA (https://www.klaviyo.com/), to whom we pass on the data you provided when subscribing to the newsletter. This disclosure takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; a direct link to a person is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Klaviyo may itself use this data in accordance with Art. 6 para. 1 lit. f GDPR on the basis of its own legitimate interest in the needs-based design and optimisation of the service and for market research purposes, for example to determine which countries the recipients come from. However, Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
To protect your data in the USA, we have concluded a data processing agreement ("Data Processing Agreement") with Klaviyo based on the Standard Contractual Clauses of the European Commission, in order to enable the transfer of your personal data to Klaviyo. If you are interested, this data processing agreement can be viewed at the following internet address: https://www.klaviyo.com/legal/dpa
Klaviyo is also certified under the US-European data protection agreement "Privacy Shield" and thereby undertakes to comply with EU data protection requirements.
You can view the privacy policy of MailChimp here: https://www.klaviyo.com/legal/privacy-notice
6.4 Advertising by post
On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and, insofar as we have received this additional information from you in the course of the contractual relationship, your title, academic degree, year of birth and your occupation, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR, and to use them for sending interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.
7) Data processing for order processing
7.1 To process your order, we work with the following service provider(s), who support us in whole or in part in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data we collect is passed on to the transport company commissioned with the delivery in the course of contract processing, insofar as this is necessary for delivering the goods.
In fulfilling contracts, we use payment service providers on the basis of Art. 6 para. 1 lit. b GDPR. Otherwise, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. b GDPR in order to offer our users effective and secure payment options.
The data processed by the payment service providers includes master data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total amount and recipient-related details. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. That is, we do not receive any account- or credit card-related information, but only information confirming or declining the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is identity and credit checks. In this regard, we refer to the terms and conditions and privacy notices of the payment service providers.
The terms and conditions and privacy notices of the respective payment service providers apply to the payment transactions, and these can be accessed within the respective websites or transaction applications. We also refer to these for further information and for asserting rights of withdrawal, access and other data subject rights.
7.2 To fulfil our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address to a shipping partner selected by us exclusively for the purpose of delivering the goods, Art. 6 para. 1 lit. b GDPR.
7.3 Use of special service providers for order processing and fulfilment
SendCloud
Shipping is carried out via the shipping portal "SendCloud" (SendCloud GmbH, Kanalstr. 10, 80538 München). In accordance with Art. 6 para. 1 lit. b GDPR, we pass on your data to SendCloud exclusively for the purpose of processing your online order. Data is only passed on insofar as this is actually necessary for processing. Details on data protection at SendCloud can be found on the SendCloud website at www.sendcloud.de/datenschutz/.
7.4 Passing on personal data to shipping service providers
DHL
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we pass on your email address to DHL before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of arranging a delivery date or announcing the delivery, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we only pass on the name of the recipient and the delivery address to DHL in accordance with Art. 6 para. 1 lit. b GDPR. Data is only passed on insofar as this is necessary for delivering the goods. In this case, prior coordination of the delivery date with DHL or the delivery announcement is not possible.
Consent can be withdrawn at any time with effect for the future towards the controller named above or towards the transport service provider DHL.
UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we pass on your email address to UPS before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of arranging a delivery date or announcing the delivery, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we only pass on the name of the recipient and the delivery address to UPS in accordance with Art. 6 para. 1 lit. b GDPR. Data is only passed on insofar as this is necessary for delivering the goods. In this case, prior coordination of the delivery date with UPS or the transmission of status information on the shipment delivery is not possible.
Consent can be withdrawn at any time with effect for the future towards the controller named above or towards the transport service provider UPS.
7.5 Use of payment providers (payment service providers)
Amazon Pay
If you select the payment method "Amazon Pay", the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as this is necessary. At the following internet address you can obtain further information on the privacy policy of Amazon Payments: https://pay.amazon.com/de/help/201751600
PAYONE
When paying by credit card, purchase on invoice or Sofortüberweisung/giropay, we pass on your payment data in the course of payment processing to PAYONE GmbH, Fraunhoferstraße 2‑4, 24118 Kiel, managing directors: Carl Frederic Zitscher, Jan Kanieß, HRB 6107 Amtsgericht Kiel (hereinafter "PayOne"). For the payment methods credit card and Sofortüberweisung, PayOne reserves the right to carry out a credit check. Payone uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. For further data protection information, including on the payment processing companies and credit agencies used, please refer to the privacy policy of PayOne:https://www.payone.de/datenschutz and https://bsp-live.s3.eu-central-1.amazonaws.com/file/0001/01/ac6d3b56f273028432b873934a0e38e6617cc43d.pdf .
Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, "purchase on invoice" or "instalment payment" via PayPal, we pass on your payment data in the course of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The data is passed on in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on invoice" or "instalment payment" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. For further data protection information, including on the credit agencies used, please refer to the privacy policy of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for contractual payment processing.
8) Use of social media: social plugins
8.1 Facebook as a standard plugin
So-called social plugins ("plugins") of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), are used on our website. The plugins are marked with a Facebook logo or the addition "Social Plugin from Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook profile. If you interact with the plugins, for example by pressing the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and shown to your Facebook friends.
The data processing operations described take place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Facebook's legitimate interests in displaying personalised advertising, informing other users of the social network about your activities on our website, and designing the service according to needs.
If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also object to the loading of the Facebook plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options in this regard to protect your privacy, please refer to Facebook's privacy notices:
8.2 Instagram as a standard plugin
So-called social plugins ("plugins") of the online service Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"), are used on our website. The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there.
If you are logged in to Instagram, Instagram can assign your visit to our website directly to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and shown to your contacts there.
The data processing operations described take place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Instagram's legitimate interests in displaying personalised advertising, informing other users of the social network about your activities on our website, and designing the service according to needs.
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of the Instagram plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
Instagram LLC., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights and setting options in this regard to protect your privacy, please refer to Instagram's privacy notices: https://help.instagram.com/155833707900388/
8.3 Cooperation projects
- Frank DNA Test (The Frank Juice Edition)
The product "Frank DNA Test (The Frank Juice Edition)" is a cooperation project between The Frank Juice GmbH and LykonDX with joint data processing within the meaning of Art. 26 EU GDPR. The lawfulness of the data processing and the limitation to its purpose arise when purchasing in the Lykon online shop on the basis of a consent with the following wording:
"LykonDX will transmit the following data to The Frank Juice GmbH, Schwanthaler Straße 73, D-80339 München via a secure route: first and last name, gender, email address, country of origin, the results of the "Frank DNA Test (The Frank Juice Edition)" test in the form "metabolic type = test result (P/C/C-L/P-L/C-P/M-High/M-Low)", e.g. "protein type = P". The Frank Juice will use the data sent by LykonDX to provide a personalised cleanse recommendation and to send email newsletters with a cleanse recommendation. The Frank Juice will not use the personal data received from LykonDX for any other purposes and in particular will not pass it on to third parties. For the data processing in the context of the products of "The Frank Juice Edition", LykonDX and The Frank Juice are so-called "joint controllers" within the meaning of Art. 26 of the European General Data Protection Regulation (EU GDPR)."
9) Online marketing
Use of Google AdWords conversion tracking
This website uses the online advertising programme "Google AdWords" and, within the framework of Google AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use the Google AdWords offering to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our interest in doing so is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR.
Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
At the following internet address you can obtain further information on Google's privacy policy: http://www.google.de/policies/privacy/. You can permanently deactivate cookies for ad preferences by preventing them through a corresponding setting of your browser software or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de. Please note that certain functions of this website may not be usable, or only to a limited extent, if you have deactivated the use of cookies.
10) Web analytics services
10.1 Google (Universal) Analytics
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excludes a direct link to a person. Through this extension, your IP address is first shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with further services connected with website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:
As an alternative to the browser plug-in, or within browsers on mobile devices, please click the following link to set an opt-out cookie that prevents collection by Google Analytics within this website in future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics
Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. In your customer account under "My data", "personal data", you can deactivate the cross-device analysis of your use.
You can find more information on the handling of user data in Google Analytics in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
The personal data of users is deleted or anonymised after 14 months.
10.2 Hotjar (hotjar Ltd.)
This website uses the web analytics service Hotjar of Hotjar Ltd.. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
This tool makes it possible to trace movements on the websites on which Hotjar is used (so-called heatmaps). For example, it is possible to see how far users scroll and which buttons users click, and how often. The tool also makes it possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of our legitimate interests in optimisation and marketing purposes and the interest-oriented design of our website in accordance with Art. 6 para. 1 lit. f GDPR. When using this tool, we pay particular attention to the protection of your personal data. We can only trace which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties is displayed are automatically hidden by Hotjar and can therefore never be traced.
Hotjar offers every user the option to prevent the use of the Hotjar tool by means of a "Do Not Track header", so that no data about the visit to the respective website is recorded. This is a setting supported by all common browsers in current versions. For this, your browser sends a request to Hotjar with the instruction to deactivate tracking of the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers.
Detailed instructions with information on your browser can be found at: https://www.hotjar.com/opt-out
Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy
11) Retargeting / remarketing / referral advertising
Facebook Custom Audience via the pixel method
Within our online offering, on the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offering, and for these purposes, the so-called "Facebook pixel" of the social network Facebook is used, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
Facebook is certified under the Privacy Shield agreement and thereby provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
With the help of the Facebook pixel, Facebook is, on the one hand, able to determine the visitors to our online offering as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to show the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes, by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The processing of data by Facebook takes place within the framework of Facebook's data use policy. Accordingly, for general information on the display of Facebook ads, see Facebook's data use policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.
You can object to the collection by the Facebook pixel and the use of your data for the display of Facebook ads. To set which types of ads are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions on usage-based advertising settings there: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
You can also object to the use of cookies that serve reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Furthermore, when using the Facebook pixel we use the additional function "advanced matching" (in this case, data such as telephone numbers, email addresses or Facebook IDs of users are transmitted to Facebook (encrypted) to create target groups ("custom audiences" or "lookalike audiences")). Further information on "advanced matching": https://www.facebook.com/business/help/611774685654668).
We also use the "Custom Audiences from File" method of the social network Facebook, Inc. In this case, the email addresses of newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload serves solely to determine the recipients of our Facebook ads. We want to ensure that the ads are only shown to users who have an interest in our information and services.
Facebook Messenger Chat
If you write us a personal message via Facebook and give us permission to do so, we will inform you with personal messages about FrankJuice news such as new products and promotional offers. If you want to use this channel to communicate with our support, we will only exchange with you the personal information that is necessary to deal with your request.
We would like to point out that Facebook may gain access to this data in accordance with the Facebook terms of use, which every Facebook user has agreed to. You can find out more about this here: https://www.facebook.com/about/privacy/
Exercising the right to object: You can object to the use of your personal data for advertising purposes at any time, either entirely or for selected communication channels (e.g. only for SMS), without incurring any costs other than the transmission costs according to the basic rates. A notice in text form (e.g. email, fax, letter, chat message) is sufficient for this. In addition, you can use our email settings to select which information we send you by email and how often.
Google AdWords remarketing
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f GDPR), we use the marketing and remarketing services (in short "Google marketing services") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google is certified under the Privacy Shield agreement and thereby provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The Google marketing services allow us to display ads for and on our website in a more targeted way, in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products in which they were interested on other websites, this is called "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies may also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, which content they are interested in and which offers they have clicked, as well as technical information on the browser and operating system, referring websites, time of visit and further details on the use of the online offering. The IP address of users is also recorded, whereby, within the framework of Google Analytics, we state that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with data of the user from other Google offerings. The above information can also be linked by Google with information from other sources. If the user subsequently visits other websites, ads tailored to them can be displayed according to their interests.
The data of users is processed pseudonymously within the framework of the Google marketing services. That is, Google does not store and process, for example, the name or email address of users, but processes the relevant data cookie-related within pseudonymous user profiles. That is, from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected about users by Google marketing services is transmitted to Google and stored on Google's servers in the USA.
The Google marketing services we use include the online advertising programme "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
On the basis of the Google marketing service "AdSense", we may embed third-party ads. AdSense uses cookies that enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the internet.
Furthermore, we may use the "Google Tag Manager" to integrate and manage the Google analytics and marketing services on our website.
For further information on the use of data for marketing purposes by Google, see the overview page: https://www.google.com/policies/technologies/ads; Google's privacy policy is available at https://www.google.com/policies/privacy.
If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
12) Use of a live chat system
LiveChat
This website uses LiveChat, live chat software from the company LiveChat, Inc. To enable you to have a personal conversation with us in the form of a real-time chat, LiveChat uses cookies. The information generated by the cookie about your use of this online offering is generally transmitted to a server of LiveChat, Inc. in the USA and stored there. When using LiveChat, you can enter your name and email address. In this case, this data is stored by LiveChat, Inc. To ensure appropriate data protection, LiveChat, Inc. observes the data protection provisions of the "US-EU Safe Harbor" agreement and the "US-Swiss Safe Harbor" agreement, and is registered with the "Safe Harbor" programme of the US Department of Commerce. You can view the certification of LiveChat, Inc. at www.export.gov/safeharbor. Further information on this can be found in LiveChat's privacy policy http://www.livechatinc.com/privacy-policy/.
If you do not want data to be transmitted to LiveChat, you can prevent LiveChat from setting cookies by adjusting your browser settings accordingly. Your browser allows you to prevent the use of cookies entirely or in individual cases. Please consult the user manual for your browser. Blocking cookies can restrict the function of our and other websites you visit.
You can permanently prevent the storage of cookies in your browser by downloading and installing the plugin linked below. You can find more information on this here.
13) Tools and other
13.1 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function is mainly used to distinguish whether an input is made by a natural person or is made abusively by machine and automated processing. The service includes the sending of the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google, and takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining the individual intent behind actions on the internet and preventing misuse and spam.
Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/
13.2 Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually represent geographical information. Through the use of this service, our location is shown to you and any journey to us is made easier.
Already when you access those subpages in which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This happens regardless of whether Google provides a user account via which you are logged in, or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want the assignment to your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or the needs-based design of its website. You have a right to object to the creation of these user profiles, and to exercise it you must contact Google.
Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
If you do not agree to the future transmission of your data to Google in the context of using Google Maps, it is also possible to deactivate the Google Maps web service completely by switching off the JavaScript application in your browser. Google Maps, and thus also the map display on this website, can then no longer be used.
You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html. Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/
14) Rights of the data subject
14.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) towards the controller with regard to the processing of your personal data, about which we inform you below:
In particular, under Art. 15 GDPR you have a right of access to your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences for you of such processing, as well as your right to be informed of what safeguards exist pursuant to Art. 46 GDPR when your data is transferred to third countries;
In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
In accordance with Art. 17 GDPR, you have the right to request that the data concerned be deleted without undue delay, or alternatively, in accordance with Art. 18 GDPR, to request a restriction of the processing of the data.
You have the right to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transmission to other controllers.
You also have the right, under Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.
14.2 RIGHT TO OBJECT
If, in the course of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time, on grounds relating to your particular situation, to object to this processing with effect for the future.
If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
If your personal data is processed by us for direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
15) Duration of storage of personal data
The data processed by us is deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated within this privacy policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations stand in the way of deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
According to legal requirements in Germany, retention takes place in particular for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 no. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 no. 2 and 3, para. 4 HGB (commercial letters).
According to legal requirements in Austria, retention takes place in particular for 7 years in accordance with § 132 para. 1 BAO (accounting records, vouchers/invoices, accounts, receipts, business papers, statement of income and expenses, etc.), for 22 years in connection with real estate and for 10 years for documents in connection with electronically supplied services, telecommunications, broadcasting and television services provided to non-business customers in EU member states and for which the Mini One Stop Shop (MOSS) is used.
16.) Administration, financial accounting, office organisation, contact management
We process data in the context of administrative tasks as well as organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases for processing are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, prospective customers, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lie in administration, financial accounting, office organisation and archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information given for these processing activities.
In doing so, we disclose or transmit data to the tax authorities, advisers such as tax advisers or auditors, as well as other fee offices and payment service providers.
Furthermore, on the basis of our business interests, we store information on suppliers, organisers and other business partners, e.g. for the purpose of later contact. This mostly company-related data is generally stored permanently.
17.) Business analyses and market research
In order to run our business economically and to be able to recognise market trends and customer and user wishes, we analyse the data available to us on business transactions, contracts, enquiries, etc. In doing so, we process master data, communication data, contract data, payment data, usage data and metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include customers, prospective customers, business partners, visitors and users of the online offering.
The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we may take into account the profiles of registered users with information, e.g. on the services they have used. The analyses serve us to increase user-friendliness, to optimise our offering and for business efficiency. The analyses serve only us and are not disclosed externally, unless they are anonymous analyses with aggregated values.
If these analyses or profiles are personal, they will be deleted or anonymised upon termination by the users, otherwise after two years from conclusion of the contract. Otherwise, the overall business analyses and general trend determinations are, where possible, created anonymously.
18.) Data protection notices in the application process
We process applicant data only for the purpose and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfil our (pre-)contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR, and Art. 6 para. 1 lit. f. GDPR where data processing becomes necessary for us, e.g. in legal proceedings (in Germany, § 26 BDSG also applies).
The application process requires applicants to provide us with applicant data. The necessary applicant data is marked if we offer an online form, and otherwise results from the job descriptions, and generally includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and references. In addition, applicants can voluntarily provide us with additional information.
By submitting the application to us, applicants agree to the processing of their data for the purposes of the application process in accordance with the nature and scope set out in this privacy policy.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated in the course of the application process, their processing additionally takes place pursuant to Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severe disability status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants in the course of the application process, their processing additionally takes place pursuant to Art. 9 para. 2 lit. a GDPR (e.g. health data, if this is necessary for the exercise of the profession).
Where provided, applicants can submit their applications to us by means of an online form on our website. The data is transmitted to us encrypted in accordance with the state of the art.
Applicants can also send us their applications by email. However, please note that emails are generally not sent encrypted and applicants must arrange for encryption themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server, and therefore recommend using an online form or postal dispatch instead. Instead of applying via the online form and email, applicants still have the option of sending us their application by post.
In the event of a successful application, the data provided by applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.
Subject to a legitimate withdrawal by applicants, deletion takes place after a period of six months has elapsed, so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any travel expense reimbursement are archived in accordance with tax law requirements.
19.) Applicant pool
As part of the application, we offer applicants the option to be included in our "talent pool" for a period of two years on the basis of consent within the meaning of Art. 6 para. 1 lit. b. and Art. 7 GDPR.
The application documents in the talent pool are processed solely in the context of future job advertisements and the search for employees, and will be destroyed at the latest after the period has expired. Applicants are informed that their consent to inclusion in the talent pool is voluntary, has no influence on the current application process, and that they can withdraw this consent at any time for the future and declare an objection within the meaning of Art. 21 GDPR.
