In addition to the information provided in the consent declaration, we would like to provide you with further information on the processing of your personal data so that you are fully informed about your rights and know where you can assert them.
§ 1 Contact details
Responsible party:
MERME GmbH
Alt-Moabit 90
10559 Berlin / Germany
Email: service@merme.de
Responsible data protection supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Mobit 59-61
10555 Berlin
Tel.: +30 13889-0
Email: mailbox@datenschutz-berlin.de
§ 2 Purpose of processing your personal data and the legal basis for processing
Your personal data is processed on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and, where applicable, Art. 9 para. 2 lit. a GDPR in conjunction with § 26 para. 2 BDSG-neu.
With the help of MERME product testers, MERME GmbH ("MERME") uses the opportunity to incorporate consumer opinions into decision-making (e.g. product development, communication, etc.).
§3 The following data categories are collected:
Relevant personal data includes, in particular:
- First and Last Name
- Year of birth
- E-mail address
- Address (for shipping products)
- Mobile number
- Information and photographs (photo data) about physical characteristics (e.g. nail condition, hair color, etc.)
- Information about the presence of certain exclusion criteria relevant to participation (e.g. allergies, intolerances, skin diseases, etc.)
- Video data, voice recordings (voice messages via WhatsApp)
§ 4 Recipients or categories of recipients of the data:
Within our company, only those departments that need your data to fulfill our contractual and legal obligations will have access to it.
Data may also be received by processors we have engaged (Art. 28 GDPR) for these purposes. These processors are companies in the categories of marketing, IT services, and shipping services.
Furthermore, companies in the categories of legal and tax advice, debt collection agencies and auditing may receive personal data from you.
We only share your data with third parties for their own use if and to the extent that we have your consent or if contractual and/or legal regulations allow us to do so. Third parties in the above sense are public bodies/authorities and private companies.
Furthermore, where legally permissible, we may transfer your personal data to authorities (e.g. social security institutions, tax authorities or law enforcement agencies) and courts at home and abroad to fulfill legal obligations or in the company's interest.
Data is not transferred to entities in countries outside the European Union (so-called third countries).
§ 5 Duration of data storage
Your personal data will be stored until you revoke your consent and then immediately deleted, or stored for 3 months after the end of your participation in the community and then immediately deleted, unless we:
- are obliged to store data for a longer period in accordance with Article 6 paragraph 1 letter c GDPR due to retention and documentation obligations (e.g. from the German Commercial Code, the German Criminal Code or the German Fiscal Code).
- or if there is a legitimate interest in storage pursuant to Article 6(1)(f) GDPR, e.g. during the current limitation period, which is usually three years, but in certain cases can be up to 30 years,
- or you have consented to further storage in accordance with Art. 6 para. 1 lit. a GDPR.
§ 6 Your rights as a data subject:
As a data subject of this data processing, you have the following rights, which you can exercise against us and/or our service providers:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
You are welcome to contact us at service@merme.de to exercise your data subject rights.
You also have the right to lodge a complaint with the competent supervisory authority (see above) if there is a data breach or suspected data breach.
§ 7 Reason for providing your data and possible consequences of not providing it
If you do not provide your personal data, we may not be able to process it for the purposes listed above, or such processing may be unreasonably difficult for us.
Section 8 Revocation of consent
You have the right to withdraw any data protection consent you have given to our company at any time. Withdrawing your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
You can contact us at service@merme.de to revoke your consent.