PRIVACY POLICY FOR MERME Mates LOYALTY PROGRAM
Information on the data controller and data protection officer
(a) responsible
The controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU member states as well as other data protection regulations is:
MERME GmbH
Alt-Moabit 90, 10559 Berlin
Email: service@merme.de
(hereinafter referred to as “we” or “us”)
You can find more information about us in the legal notice.
Purpose and legal basis of data processing
The loyalty program offered via https://www.mermeberlin.com/ (hereinafter referred to as the "Website") (hereinafter referred to as "MERME Mates") is a loyalty program through which participating customers (hereinafter referred to as the "Members", "you", "your") who have a registered customer account on the Website can collect points. These points are credited by us according to the General Terms and Conditions for MERME Mates for the corresponding orders and can be collected and redeemed for rewards and other benefits on the Website.
To participate in MERME Mates, you must have a registered customer account. When you participate in MERME Mates, your collected points are linked to your orders and your customer account so that these points can be credited, managed, and updated as needed.
If you have given us your consent, we will send you information and offers about our MERME Mates program via email. We will also use your data to inform you about your current points balance in your customer account or via email, provided you have given us your consent to do so. You can withdraw your consent at any time with effect for the future.
The legal basis for data processing is Article 6(1)(b) GDPR, insofar as the data processing is necessary for participation in the Happy Club. The legal basis for sending the newsletter or your points balance is your consent, Article 6(1)(a) GDPR.
storage
We store your personal data to the extent necessary for the purpose of data processing. If you terminate your MERME Mates membership, we will delete all your personal data stored in connection with MERME Mates, subject to any obligation to retain it for commercial or tax law reasons in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR.
Your rights as a data subject
(a) Right to information
You have the right to request information from us at any time regarding the personal data we process concerning you, in accordance with Article 15 of the GDPR. You can submit a request by post or email to the contact address provided.
(b) Right to rectification of inaccurate data
You have the right to request that we immediately correct any inaccurate personal data concerning you, in accordance with Article 16 of the GDPR. Please contact us at the address provided.
(c) Right to erasure
You have the right, under the conditions described in Article 17 of the GDPR, to request that we erase your personal data. These conditions include, in particular, a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, if you have objected to the processing, or if there is a legal obligation to erase the data under Union law or the law of the Member State to which we are subject. To exercise your right to erasure, please contact us at the address provided.
(d) Right to restriction of processing
You have the right to request that we restrict the processing of your personal data in accordance with Article 18 of the GDPR. This right applies in particular if the accuracy of the personal data is contested between you and us, for the period necessary to verify its accuracy; if you request restricted processing instead of erasure when you have a right to erasure; if the data is no longer necessary for the purposes for which it was collected, but you require it for the establishment, exercise, or defense of legal claims; and if the successful exercise of an objection is still contested between you and us. To exercise your right to restrict processing, please contact us at the address provided.
(e) Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, in accordance with Article 20 of the GDPR. To exercise your right to data portability, please contact us at the address provided.
(f) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based, among other things, on point (e) or (f) of Article 6(1) of the GDPR, pursuant to Article 21 of the GDPR. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
(g) Right of withdrawal (in the case of consent given)
You have the right to withdraw your consent at any time with effect for the future, in accordance with Article 7(3) of the GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
(h) Right of appeal
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
PO Box 31 63, 65021 Wiesbaden
Telephone: +49 611 14080
Fax: +49 611 1408 – 900
Email: poststelle@datenschutz.hessen.de
Internet: http://www.datenschutz.hessen.de
Update to the privacy policy
Changes to our services may necessitate changes to this privacy policy. Therefore, please check this privacy policy regularly. We will also inform you if any changes require your action (e.g., consent) or any other individual notification.
Further information about how we process your data can be found in our privacy policy.