Privacy Policy
This privacy policy informs you about the processing of personal data when you use our website and/or place an order in our online shop.
Protecting your personal data is a matter of great importance to us. We collect and process your personal data in compliance with applicable data protection laws, in particular the GDPR and the German Federal Data Protection Act (BDSG). This policy explains which data we collect, how we use it, for what purposes we do so, and what rights you have in relation to your personal data.
By using this website, you do not automatically consent to all forms of data processing; rather, processing takes place only where a legal basis exists, such as consent, contract performance, legal obligation, or legitimate interests.
1. Controller
The controller responsible for the collection, processing, and use of your personal data within the meaning of the GDPR is:
Bad Boy Mowers UG (haftungsbeschränkt)
CEO: Ulf Schneider
Magdalenenweg 24
31303 Burgdorf
Germany
Tel.: +49 (0) 5136 9764474
Email: info@badboymowers.eu
If you wish to object to the collection, processing, or use of your data in whole or in part in accordance with this privacy policy, you may address your objection to the controller listed above. You may save and print this privacy policy at any time.
2. General Website Use
2.1 Access Data
We collect information about you when you use our website. This includes automatically collected data about your usage behavior, your interaction with our website, and technical information about your computer or mobile device.
Each access to our website is recorded in server log files. These access data may include the name and URL of the accessed file, the date and time of access, the amount of data transferred, the HTTP response code, the browser type and version, the operating system, the referrer URL, the IP address, and the requesting provider.
We use this log data without directly attributing it to you personally and without creating profiles, in order to conduct statistical analyses, ensure the security and operation of our website, and improve our services. We may also evaluate traffic, measure clicks generated via cooperation partners for billing purposes, provide location-based or personalized content, identify errors, and optimize our offering.
If there are concrete indications of unlawful use, we reserve the right to review log data retrospectively. IP addresses are stored only for a limited period if this is necessary for security reasons or for the provision and billing of services. After completion of an order or receipt of payment, the IP address is deleted unless it remains relevant for security purposes. If there is suspicion of a criminal offense in connection with the use of our website, we may store the IP address for a longer period. We may also store the date of your last visit as part of your user account.
2.2 Hosting
We host our website with STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
When you visit our website, STRATO collects various log files, including your IP address. Further information can be found in STRATO’s privacy policy: STRATO Privacy Policy.
The use of STRATO is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring a reliable and secure presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information in the user’s end device. Consent may be withdrawn at any time.
We have concluded a data processing agreement with STRATO. This ensures that STRATO processes personal data of website visitors only in accordance with our instructions and in compliance with the GDPR.
2.3 Contact by Email
If you contact us by email or via a contact form, we store your details for the purpose of processing the request and in case follow-up questions arise. We store and use additional personal data only if you consent to this or if this is otherwise legally permitted.
2.4 Cookies
We use cookies on our website. Cookies are small files automatically created by your browser and stored on your device when you visit our site. Cookies are harmless and do not contain viruses, trojans, or other malware.
Cookies store certain information associated with the device used, but they do not directly identify you as a person.
We use cookies primarily to make our website more user-friendly. For example, we use session cookies to recognize that you have already visited certain pages. These are automatically deleted when you leave our site. We also use temporary cookies, which remain stored on your device for a defined period so that we can recognize returning visitors and remember settings and entries.
In addition, we use cookies for statistical analysis of website usage and for optimizing our services. These cookies allow us to recognize returning visitors and analyze how our website is used. They are automatically deleted after a certain period.
Processing of data collected through cookies is based on our legitimate interests and the legitimate interests of third parties pursuant to Article 6(1)(f) GDPR, unless consent is required under applicable law.
Most browsers accept cookies automatically. You can configure your browser so that no cookies are stored or so that you are notified before a cookie is created. Please note that disabling cookies may mean that not all functions of our website are available.
3. Analysis and Marketing Tools
The following tracking measures are used on the basis of Article 6(1)(a) GDPR where consent is required, and otherwise on the basis of Article 6(1)(f) GDPR where we rely on legitimate interests. The purpose is to ensure a needs-based design and continuous optimization of our website, as well as statistical evaluation of website usage.
3.1 Google Analytics
We use Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies that enable analysis of how visitors use our website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the United States.
If IP anonymization is activated on this website, your IP address will be shortened by Google within the European Union or other states party to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. IP anonymization is active on this website.
On our behalf, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
You can prevent the storage of cookies by adjusting your browser settings. You can also prevent the collection of data generated by the cookie and related to your use of the website, including your IP address, by downloading and installing the browser plugin available here: Google Analytics Opt-Out.
Alternatively, you can click the following link to set an opt-out cookie that prevents future collection by Google Analytics on this website in this browser: Google Analytics Opt-Out Cookie.
Further information about Google’s handling of user data can be found here: Google Analytics Privacy Policy.
3.2 Google Ads Conversion Tracking
We use Google Ads conversion tracking to statistically record the use of our website and evaluate it for the purpose of optimizing our website for you. If you arrive at our website via a Google advertisement, Google Ads will place a cookie on your device.
These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of the website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page.
Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information collected with the conversion cookie is used to create conversion statistics for customers who have opted into conversion tracking. The customers receive the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag, but they do not receive information that could personally identify users.
If you do not wish to participate in tracking, you can refuse the setting of the cookie by adjusting your browser settings to disable cookies in general. You can also disable cookies for conversion tracking by blocking cookies from the domain “www.googleadservices.com”.
Google’s privacy information on conversion tracking can be found here: Google Ads Privacy.
3.3 Google AdSense
This website uses Google AdSense, a service for displaying advertisements provided by Google.
Google AdSense uses cookies, text files stored on your computer, and web beacons (invisible graphics). These web beacons can evaluate information such as visitor traffic on these pages.
The information generated by cookies and web beacons about the use of this website, including your IP address and the delivery of advertising formats, is transmitted to a Google server in the United States and stored there. Google may pass this information on to its contractual partners. Google will not combine your IP address with other data stored by Google.
The storage of AdSense cookies is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both the website and its advertising.
You can prevent the installation of cookies by adjusting your browser software accordingly. Please note that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of the data collected about you by Google in the manner and for the purpose described above, where consent is required.
3.4 Borlabs Cookie
Our website uses Borlabs Cookie consent technology to obtain your consent for the storage of certain cookies in your browser or for the use of certain technologies and to document this in a GDPR-compliant manner. The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.
When you enter our website, a Borlabs cookie is stored in your browser in which the consents you have given or the revocation of those consents are stored. These data are not transmitted to the provider of Borlabs Cookie.
The collected data are stored until you request deletion, delete the Borlabs cookie yourself, or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
Further information on data processing by Borlabs Cookie can be found here: Borlabs Cookie Data.
The use of Borlabs Cookie consent technology is necessary to obtain the legally required consents for the use of cookies. The legal basis is Article 6(1)(c) GDPR.
3.5 Social Media Plugins
We use social media plugins on our website on the basis of Article 6(1)(a) GDPR. The underlying promotional purpose is regarded as a legitimate interest within the meaning of the GDPR. The responsibility for GDPR-compliant operation rests with the respective providers. The plugins are integrated using the two-click method in order to protect visitors as much as possible.
We use social plugins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA.
When you access a page containing such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly to your browser and integrated into the page. As a result, Instagram receives information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not logged in at the time.
This information, including your IP address, is transmitted by your browser directly to a server of Instagram in the United States and stored there. If you are logged into Instagram, Instagram can directly associate the visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the Instagram button, this information is also transmitted directly to a server of Instagram and stored there.
The information is also published on your Instagram account and displayed to your contacts.
If you do not want Instagram to directly associate the data collected through our website with your Instagram account, you must log out of Instagram before visiting our website.
Further information can be found in Instagram’s privacy policy: Instagram Privacy Policy.
3.6 Google Maps
This website uses Google Maps via an API. The provider is Google.
To use Google Maps functions, it is necessary to store your IP address. This information is usually transferred to a Google server in the United States and stored there. We have no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and easy location of the places stated on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Further information on how Google handles user data can be found here: Google Privacy Policy.
4. Legal Basis and Storage Period
The legal basis for data processing under the above provisions is Article 6(1)(f) GDPR unless another legal basis is expressly stated. Our interests in data processing are, in particular, ensuring the operation and security of the website, analyzing how visitors use the website, and making the website easier to use.
Unless otherwise specified, we store personal data only for as long as necessary to fulfill the purposes pursued.
5. Your Rights as a Data Subject
Under applicable law, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post to the address listed in Section 1, clearly identifying yourself.
5.1 Right of Confirmation and Access
You have the right to request confirmation at any time as to whether we process personal data concerning you. If this is the case, you may request free information about the personal data stored about you and a copy of that data. You are also entitled to information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom personal data have been or will be disclosed, in particular recipients in third countries or international organizations, the planned storage period or, if this is not possible, the criteria for determining that period, the existence of your rights to rectification or erasure, restriction of processing or objection to processing, and your right to lodge a complaint with a supervisory authority.
If the personal data were not collected directly from you, you have the right to receive all available information about their source. You also have the right to be informed whether automated decision-making, including profiling, exists pursuant to Article 22(1) and (4) GDPR. In such cases, you may request meaningful information about the logic involved, as well as the significance and intended effects of such processing for you.
If personal data are transferred to a third country or an international organization, you also have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to such transfer.
5.2 Right to Rectification
You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you also have the right to have incomplete personal data completed, including by means of a supplementary statement.
5.3 Right to Erasure
You have the right to request the deletion of your personal data without undue delay, provided one of the following grounds applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw your consent and there is no other legal basis for the processing; you object to processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds; you object to processing pursuant to Article 21(2) GDPR; the personal data have been unlawfully processed; deletion is required to comply with a legal obligation under Union or Member State law; or the personal data were collected in relation to information society services pursuant to Article 8(1) GDPR.
If we have made the personal data public and are obliged to erase it, we shall take reasonable steps, including technical measures, taking account of available technology and implementation costs, to inform other controllers that you have requested the erasure of all links to, or copies or replications of, those personal data.
5.4 Right to Restriction of Processing
You have the right to request restriction of processing where one of the following applies: you contest the accuracy of the personal data, for a period enabling us to verify the accuracy; the processing is unlawful and you oppose the erasure of the personal data and request restriction instead; we no longer need the personal data for processing purposes, but you need them for the establishment, exercise, or defense of legal claims; or you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.
5.5 Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, provided that the processing is based on consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract under Article 6(1)(b) GDPR, and the processing is carried out by automated means.
Where technically feasible, you have the right to have the personal data transmitted directly from us to another controller.
5.6 Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. In such a case, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling to the extent that it is related to such direct marketing.
You also have the right, on grounds relating to your particular situation, to object to the processing of your personal data for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
5.7 Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
5.8 Right to Withdraw Consent
You have the right to withdraw consent to the processing of personal data at any time.
5.9 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.
6. Data Security
We take the security of your data seriously within the framework of applicable data protection laws and technical possibilities. Your personal data are transmitted to us in encrypted form, both during orders and during customer login. For this purpose, we use SSL encryption.
However, we would like to point out that data transmission over the internet, for example by email, may have security vulnerabilities. Complete protection of data against access by third parties is therefore not possible. We use technical and organizational security measures to protect your data as well as possible and adapt them continuously to the state of the art.
7. Automated Decision-Making
No automated decision-making based on the personal data collected takes place.
8. Disclosure of Data to Third Parties
As a rule, we use your personal data only within our company. If and insofar as we involve third parties in the performance of contracts, for example logistics providers, they receive personal data only to the extent necessary for the respective service.
In the event that we outsource certain parts of data processing, we contractually oblige processors to use personal data only in accordance with data protection law requirements and to protect the rights of the data subject.
9. E-Commerce and Payment Providers
Processing of Customer and Contract Data
We collect, process, and use personal data of customers and contract data for the establishment, content design, and amendment of our contractual relationships. Personal data regarding the use of this website are collected, processed, and used only to the extent necessary to enable the user to use our service or to enable billing. The legal basis is Article 6(1)(b) GDPR.
After completion of the order or termination of the business relationship and expiry of any statutory retention periods, the collected customer data will be deleted. Statutory retention obligations remain unaffected.
Data Transfer in Connection with Orders
When you place an order for goods, we transfer your personal data to the transport company responsible for delivery and to the payment service provider responsible for processing payment. Only the data required for the respective service is transferred. The legal basis is Article 6(1)(b) GDPR.
If you have given your consent under Article 6(1)(a) GDPR, we will transfer your email address to the transport company so that it can inform you by email about the shipping status of your order. You may withdraw this consent at any time.
Data Transfer for Services and Digital Content
Personal data are transferred to third parties only if this is necessary for contract processing, for example to the bank responsible for payment processing.
No further transfer of data takes place unless you have expressly consented to it. Without your express consent, no data will be transferred to third parties for advertising purposes.
The legal basis for processing is Article 6(1)(b) GDPR.
10. Data Protection Officer
If you have any questions or concerns regarding data protection, please contact our data protection officer:
Ulf Schneider
