Data Protection

Information on data protection

With these data protection notices, we inform you about our handling of your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

We also inform you in detail about

I. General information
II. Data processing on our website www.rockanutrition.de
III. Data processing on our social media pages

Responsible for data processing is Rocka Sports GmbH, Gormannstraße 14, 10119 Berlin (hereinafter referred to as "we" or "us").

I. General information

1. Contact

If you have questions or suggestions about this information or wish to contact us regarding the assertion of your rights, please direct your request to

Rocka Sports GmbH
Gormannstraße 14, 10119 Berlin, Germany
Tel.: +49 (0)30 400 33 99 0
Email: info@rockanutrition.de

2. General information on data processing

The data protection term "personal data" refers to all information relating to an identified or identifiable person.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of a legal permit. We process personal data only with your consent (Art. 6 para. 1 lit. a) GDPR), to fulfill a contract to which you are a party or at your request to carry out pre-contractual measures (Art. 6 para. 1 lit. b) GDPR), to fulfill a legal obligation (Art. 6 para. 1 lit. c) GDPR), or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, provided your interests or fundamental rights and freedoms requiring the protection of personal data do not override (Art. 6 para. 1 sentence 1 lit. f) GDPR).

If you apply for an open position in our company, we also process your personal data to decide on the establishment of an employment relationship (§ 26 para. 1 sentence 1 BDSG).

3. General information on the purpose of data processing

The processing of personal data that you provide to us or that we collect about you in other ways serves, among other purposes, the following:

  • to identify you as a registered user when you log in to our website and visit it again;
  • to process payments;
  • to improve the website and our services;
  • to answer your questions and provide corresponding customer services;
  • to send you our newsletters;
  • to recommend personalized offers to you on the website;
  • to enable our social network sharing functions; this also includes providing you the option to connect with members of your network who are both customers of "Size Zero" and one or more social networks;
  • to carry out various internal business measures, such as data analysis, controls, monitoring, and preventive measures to protect against fraud attempts, development of new products and services, improvement or revision of the website or our services, identification of usage trends, assessment of the effectiveness of our advertising campaigns, as well as conducting and expanding our business activities;
  • to fill open positions in our company;
  • to ensure compliance with legal regulations and procedures as well as the fulfillment of demands from public and governmental authorities, applicable industry standards, and our internal policies;
  • to enforce our General Terms and Conditions;
  • to protect our business activities or those of our affiliated companies;
  • to protect our rights, our privacy, our security, or our property and/or those of our affiliated companies, from you or others;
  • to allow us to exercise possible legal remedies and to limit any damages that may occur to us.

4. Duration of Storage

Unless otherwise indicated in the following notes, we only store data as long as necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal retention obligations may arise, in particular, from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting records for ten years and personal data contained in commercial letters and contracts for six years. Otherwise, we will retain data related to consent requiring proof as well as claims and complaints for the duration of the statutory limitation periods. Data stored for advertising purposes will be deleted if you object to processing for this purpose.

5. Categories of Data Recipients

We use processors in the course of processing your data. Processing operations carried out by such processors include, for example, hosting, maintenance and support of IT systems, customer and order management, document management, order processing, accounting and billing, marketing activities, or file and data carrier destruction. A processor is a natural or legal person, authority, institution, or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes but exclusively carry out data processing for the controller and are contractually obligated to ensure appropriate technical and organizational measures for data protection. Furthermore, we may transfer your personal data to entities such as postal and delivery services or logistics providers, house banks, tax advisors/auditors, or tax authorities. Additional recipients may arise from the following notes.

6. Data Transfer to Third Countries

Visiting our website or using our app may involve the transfer of certain personal data to third countries, i.e., countries where the GDPR is not applicable law. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is ensured in such a third country. If no such adequacy decision by the European Commission exists, personal data will only be transferred to a third country if appropriate safeguards pursuant to Article 46 GDPR are in place or if one of the conditions of Article 49 GDPR applies.

Unless otherwise stated below, we use the EU Standard Contractual Clauses as appropriate safeguards for the transfer of personal data to processors in third countries: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087.

7. Processing When Exercising Your Rights under Articles 15 to 22 GDPR

When you exercise your rights under Articles 12 to 22 of the GDPR, we process the transmitted personal data for the purpose of implementing these rights and to be able to provide proof thereof. Data stored for the purpose of providing information and preparing it will only be processed for this purpose and for data protection control purposes; otherwise, processing will be restricted in accordance with Article 18 GDPR. These processing activities are based on the legal basis of Article 6(1)(c) GDPR in conjunction with Articles 15 to 22 GDPR and § 34(2) BDSG.

8. Your Rights

As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:

  • Under Article 15 GDPR and § 34 BDSG, you have the right to request information about whether and, if applicable, to what extent we process personal data about you.
  • You have the right under Article 16 GDPR to request the correction of your data from us.
  • You have the right under Article 17 GDPR and § 35 BDSG to request the deletion of your personal data from us.
  • You have the right under Article 18 GDPR to request the restriction of the processing of your personal data.
  • You have the right under Article 20 GDPR to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
  • If you have given us a separate consent to data processing, you may revoke this consent at any time under Article 7(3) GDPR. Such a revocation does not affect the lawfulness of processing carried out based on the consent before its withdrawal.
  • If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority under Article 77 GDPR.

9. Right to object

Under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(e) or (f) GDPR for reasons arising from your particular situation. If we process personal data about you for direct marketing purposes, you may object to this processing under Article 21(2) and (3) GDPR.

10. Data protection officer

You can reach our data protection officer at the following contact details: datenschutz@rockanutrition.de.

II. Data processing on our website www.rockanutrition.de

When using the website www.rockanutrition.de, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected by us during your visit. Under data protection law, the IP address is generally considered personal data. An IP address is assigned to every device connected to the internet by the internet provider so that it can send and receive data.

1. Processing of server log files

When using our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e., not via registration). This typically includes:

  • Our visited website;
  • Date and time at the time of access;
  • Amount of data sent in bytes;
  • Source/referrer from which you access the site;
  • Browser used;
  • Operating system used;
  • Used IP address (if applicable: in anonymized form);

The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 letter f) GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after thirty days unless there are concrete indications of a justified suspicion of unlawful use and further examination and processing of the information is necessary for this reason.

We are not able to identify you as a data subject based on the stored information. Therefore, Articles 15 to 22 GDPR do not apply according to Art. 11 para. 2 GDPR, unless you provide additional information to exercise your rights laid down in these articles that enables your identification.

2. Hosting of our online shop by Shopify International Limited

For the operation of our online shop, we use Shopify, a service of Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, "Shopify Limited"). Shopify is an e-commerce platform through which we offer our goods for sale.

When you use our online shop, Shopify Limited processes your provided name, email address, delivery and billing address, payment information, if applicable your company name, and your phone number. In addition, the IP address used, information about orders you have placed, information about the online shops you have visited based on the Shopify platform, and information about your device and the browser used are processed.

The processing takes place partly on our behalf to provide you with the online shop. This processing is carried out to protect our legitimate interest in offering our products through an online shop. It is based on the legal basis of Art. 6 para. 1 letter f) GDPR.

In certain cases, the processed data is transferred by Shopify International Limited to Shopify Inc., based in Canada (150 Elgin St., 8th Fl, Ottawa, ON K2P 1L4, Canada). The European Commission has determined by an adequacy decision pursuant to Art. 45 GDPR that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. You can find the adequacy decision at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN retrieve.

If personal data is also transferred by Shopify International Limited to data centers of Shopify Inc. in the USA, Shopify International Limited ensures the legality of this transfer by concluding the EU standard contractual clauses for the transfer of personal data to processors in third countries.

You can find more information about data processing by Shopify Limited at https://www.shopify.com/legal/privacy .

3. Contact options and inquiries

We use a chat form on our website from the Enchant service of the Canadian company Senvee Inc., 45 Broadbridge Dr Toronto, ON M1C 3K5. Data transmission is based on an adequacy decision by the European Commission according to Art. 45 GDPR (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en.

If you send us inquiries via the chat form, your details from the form, including the contact data you provide there, will be stored by us for processing the inquiry and in case of follow-up questions. Our chat function processes, in addition to the message, the IP addresses with the users' country, information about the device and browser used, as well as, if applicable, the email address provided in the inquiry.

You can alternatively send us a message at any time via our contact email address. Using the chat tool is therefore purely voluntary.

To manage and process contact inquiries, we use the Enchant service of the Canadian company Senvee Inc., 45 Broadbridge Dr Toronto, ON M1C 3K5. Data transmission is based on an adequacy decision by the European Commission according to Art. 45 GDPR (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en.

If your inquiry concerns the conclusion or execution of a contract with us, Art. 6 para. 1 lit. b) GDPR is the legal basis for data processing. Otherwise, we process the data based on our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 para. 1 lit. f) GDPR.

4. Ordering a product

a. Processing of provided information

If you order a product through our website, we process personal data exclusively for contract fulfillment or to provide you with the ordered product or program. During the booking or ordering process, we process the data you entered in the input form, additional information for processing your order, and, if applicable, payment information if you pay by advance bank transfer. We also process further information about the status of your payment. Providing this data is necessary for concluding a contract.

To deliver the products you ordered, we transmit the data required for delivery to one of our shipping service providers as specified in the order. With your consent, we will also transmit your provided email address to the shipping service provider DHL Paket GmbH so that the shipping service provider can inform you about the shipping and delivery status of your order.

The legal basis for processing is always Art. 6 para. 1 lit. b) GDPR. The legal basis for transmitting your email address to the shipping service provider for the purpose of tracking your order is Art. 6 para. 1 lit. a) GDPR. All fields marked as mandatory are required to process your booking or order. Failure to provide them means we cannot process your booking or order. Providing additional data is voluntary.

b. Payment by credit card

We offer you the option to pay by credit card. To execute the payment, we transmit the credit card data you provide encrypted to the service provider (acquirer) Stripe, Inc. (510 Townsend Street, San Francisco, California 94103, "Stripe"). After the payment is executed, Stripe reports this back to us. As a basis for transmitting personal data to the USA, we have concluded the EU standard contractual clauses for the transfer of personal data to processors in third countries with Stripe.

c. Payment by Paypal

You also have the option to pay via Paypal. Please note that the related payment information is collected and processed independently by PayPal (Europe) S.à r.l. et Cie, S.C.A., based in Luxembourg.

Paypal transmits your address data stored with Paypal to us, which we process exclusively for contract processing. The legal basis is Art. 6 para. 1 lit. b) GDPR.

d. Payment by Sofort transfer

The payment method "Sofort" is offered to you in cooperation with the service provider Sofort GmbH, a company of the Klarna Group, located at Theresienhöhe 12, 80339 Munich. When you use this service, Sofort GmbH sends us confirmation of the successful initiation of the transfer order for your order. This includes the data from the transfer form (name, account number, bank code, reference, transfer amount) as well as the date (with time) and the transaction ID chosen by us (e.g., order number). For SEPA transfers and if, depending on your bank, BIC and IBAN are required to initiate the transfer in your online banking account, the confirmation to us also includes BIC and IBAN. We can generally also obtain this data from our account statement. No further personal data is transmitted to us by Sofort GmbH. We process the received data for the purpose of contract execution based on Art. 6 para. 1 lit. b) GDPR.

Otherwise, Sofort GmbH processes the data independently.

You can find more information about data protection at Sofort GmbH at the address https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy retrieve.

5. Customer account

You have the option to create a user account. For this, we collect your first and last name. You must also provide an email address and set a password. We also process the additional information you add to your user profile. After successful registration, you can log in to the protected customer area with your email address and password. If you forget your password, we use the provided email address to send you a mail to reset your password.

With the customer account, you have the option to view your order history at any time. You can also manage your addresses, which are available for preselection during orders. Creating a user account is voluntary. The website can also be used as a guest.

The processing of personal data is based on the legal basis of Art. 6 para. 1 letter b) GDPR.

6. Search in the webshop

To offer you the search function on our website, we use the service of the company Algolia SAS. Algolia SAS processes certain personal data on our behalf (such as the IP address used and the search query). The processing serves to protect our legitimate interest in enabling visitors to our website to use the website easily and is based on the legal basis of Art. 6 para. 1 letter f) GDPR.

7. Customer satisfaction analysis

a. Satisfaction analysis upon order

When you order a product in our shop, we will subsequently ask you by email to rate your satisfaction with your order. To send you this request, we use the email address you provided. We also process your name, the IP address used, IP geolocation, and information about your order. The data processing within the scope of this customer satisfaction survey is based on the legal basis of Art. 6 para. 1 letter f) GDPR. The processing serves direct advertising and our legitimate interest in reviewing the quality of our offer.

You can object to the processing and especially the use of your email address for this purpose at any time in accordance with Art. 21 para. 2 GDPR, without incurring any costs other than the transmission costs according to the basic tariffs.

b. Satisfaction Analysis for Support Inquiry

If you contact us as part of a customer inquiry, we will also ask you in the support email to rate your satisfaction with how we handled your inquiry. The data processing in the context of this customer satisfaction survey is based on the legal basis of Art. 6 para. 1 letter f) GDPR. The processing serves our legitimate interest in checking the quality of our offer. We work with the service provider Enchant of the Canadian company Senvee Inc. (45 Broadbridge Dr Toronto, ON M1C 3K5) to conduct the survey. The data transfer is based on an adequacy decision of the European Commission according to Art. 45 GDPR (https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=en).

c. Product Reviews

If you order a product in our shop, we will subsequently send you a link to the Reviews.io platform by email, a service of REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin (Reviews.io). To send you this request, we use the email address you provided. 
If you follow the link, you will be redirected to the Reviews.io website. In this respect, the privacy policy of Reviews.io applies, which can be accessed at https://www.reviews.io/legal/user-privacy-policy. 
Reviews.io obtains consent for the publication of the review on our website when submitting the review. The review you submit will be published on our website under a name chosen by you. 
The data processing in the context of the review request is based on the legal basis of Art. 6 para. 1 letter f) GDPR. The processing serves direct advertising and our legitimate interest in checking the quality of our offer. The data processing in the context of the publication of the review is based on your consent and thus on the legal basis of Art. 6 para. 1 letter a) GDPR.
You can object to the processing and especially the use of your email address for this purpose at any time in accordance with Art. 21 para. 2 GDPR, without incurring any costs other than the transmission costs according to the basic tariffs. You can revoke your consent to the publication of the review at any time with Reviews.io. Your review will then be deleted immediately.

8. Newsletter

a. Customer Information

If you provide us with your email address when placing an order in our shop, we will use this email address to inform you in the future about our products and offers. We will only inform you about products that we offer ourselves and that you might be interested in. In doing so, we process personal data such as your email address and your name to protect our legitimate interest in informing our existing customers about our products and offers. The legal basis for data processing is Art. 6 para. 1 letter f) GDPR in conjunction with § 7 para. 3 UWG.
You can object to this processing at any time in accordance with Art. 21 para. 2 GDPR, for example via the corresponding link in a received email or by contacting us through the channels mentioned above.

b. Newsletter

We offer the possibility to register for our newsletter on our website. After registration, we will regularly inform you about current news regarding our offers. A valid email address is required to register for the newsletter. To verify the email address, you will first receive a registration email which you must confirm via a link (Double Opt-In). When you subscribe to the newsletter on our website, we process personal data such as your email address and your name based on the consent you have given. The processing is based on the legal basis of Art. 6 para. 1 letter a) GDPR.

You can revoke the given consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting us through the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation.

When registering for the newsletter, we also store the IP address as well as the date and time of registration. The processing of this data is necessary to be able to prove a given consent. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 letter c) in conjunction with Art. 7 para. 1 GDPR).

c. Analysis

We also analyze the reading behavior of the recipients of our emails and the open rates of the sent messages. For this purpose, pseudonymized usage data is collected and processed by us, which we do not link with your email address or your IP address.

The legal basis for this analysis is Art. 6 para. 1 letter f) GDPR, and the processing serves our legitimate interest in the content optimization of our emails. You can object to this at any time by contacting one of the contact channels mentioned above.

d. Service provider Mailchimp

For managing subscribers, sending messages, and analysis, we use the MailChimp service of The Rocket Science Group LLC d/b/a MailChimp (675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, USA, "MailChimp"). Therefore, your email address is transmitted by us to MailChimp. The processing is carried out on our behalf and is based on the legal basis of Art. 6 letter f) GDPR. It serves our legitimate interest in optimizing and economically sending our emails. If you do not want your data to be processed by MailChimp, you can either not subscribe to the newsletter, unsubscribe from it, or as our customer object to the above-described use of your email address.

For the transfer of personal data to the USA, we have concluded the EU standard contractual clauses for the transfer of personal data to processors in third countries with The Rocket Science Group LLC d/b/a MailChimp as appropriate guarantees.

9. Event Tickets

You can register on our website for special events offered by us. For this purpose, it is necessary that you provide us with your first and last name, your email address, your order number, and the order date. Additionally, we process information about the event when you register.

The data processing is based on the legal basis of Art. 6 para. 1 letter b) GDPR.

The data processing is carried out by the service provider Kable (...) based in Canada, whom we have commissioned. If you use this service, personal data will be transferred to Canada. The European Commission has determined by an adequacy decision pursuant to Art. 45 GDPR that the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) provides an adequate level of data protection. You can access the adequacy decision at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=EN.

10. Applications

You have the option to apply to us through our website. For this purpose, we collect personal data from you, including your name, resume, cover letter, and other content you provide.

Your personal application data is collected, stored, processed, and used exclusively for purposes related to your interest in a current or future employment with us and the processing of your application. Your online application is only handled and acknowledged by the relevant contacts within our company. All employees involved in data processing are obligated to maintain the confidentiality of your data.

If we are unable to offer you employment, we will retain the data you have submitted for up to six months after the conclusion of the application process for the purpose of answering questions related to your application and rejection. This does not apply if legal provisions oppose deletion, further storage is necessary for evidence purposes, or you have expressly agreed to longer storage.

The legal basis for data collection is § 26 para. 1 sentence 1 BDSG. If we store your applicant data for more than six months and you have expressly consented to this, we point out that this consent can be freely revoked at any time according to Art. 7 para. 3 GDPR. Such a revocation does not affect the lawfulness of the processing carried out based on the consent until the revocation.

To manage application data, we use the software Personio from the German provider Personio GmbH. Your application data will be transmitted by us to Personio GmbH and processed on our behalf by Personio GmbH.

11. Affiliate Sales

If you have arrived at our website via a link created by one of our partners as part of our referral program (affiliate link), we process certain information about your further orders on our website. This processing aims to determine the commission for our partner. You can find more information about our referral program at https://partner.ilpt.de/datenschutz/.

The processing serves our legitimate interest in conducting marketing through a referral program and determining the basis for our partners' commissions. It is based on the legal basis of Art. 6 para. 1 lit. f) GDPR.

12. Cookies

We use cookies and similar technologies ("cookies") on our website. Cookies are small pieces of information that the website stores in the persistent memory of your computer, tablet, or smartphone. Please note that HTML5 introduced the Web Storage feature, which is comparable to cookies and which we therefore consider a cookie below.

Cookies contain information that the website uses to improve the efficiency of communication between you and your web browser. Cookies identify your computer or device, not you as a specific user.

We use session cookies and persistent cookies. Session cookies are temporary. They are deleted after closing the internet browser. Persistent cookies and HTML5 localStorage objects are stored for a longer period and remain on the device until they are deleted or expire.

We distinguish between essential cookies, which are absolutely necessary for using the website (e.g., for login or checkout), and optional cookies for tracking and analysis purposes as well as for marketing purposes.

Data processing via essential cookies is based on the legal basis of Art. 6 para. 1 lit. f) GDPR. These cookies are necessary for the basic functions of the website, and the processing serves our legitimate interest in providing a functional website.

The use of essential cookies serves the following purposes:

  • Monitoring website performance and your use of our website: to monitor website performance, our applications and infrastructure, and how you use our website.
  • Enabling the shopping cart and checkout: with the help of cookies, the information entered during the purchase of products on the website is stored and thus supports the purchase process.
  • Registration procedures and improvement of our website’s functionality: to optimize the user experience on the website, including a reminder function for the login status when you visit the website again, as well as a reminder function for your browser and preferred settings (e.g., your preferred language).

Data processing via optional cookies only takes place with your consent and is based on the legal basis of Art. 6 para. 1 lit. a) GDPR. You can give your consent declaration under the point Cookie Settings on our website.

13. Consent Management

We use a consent management tool from the company Consultingcentral GmbH (Switzerland) on our website. The consent management tool allows users of our website to give consent to certain data processing activities or to revoke given consent. Additionally, the consent management tool helps us to provide proof of these declarations. For this purpose, log data related to the declarations are processed. The processing of this data is necessary to be able to prove given consents. The legal basis is Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 para. 1 GDPR.

14. Analysis of our website with Google Analytics

We use the Google Analytics service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you reside in the EU, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") to analyze visits to our website. Google uses cookies that enable an analysis of your use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about interaction with our website are processed. The information generated by the cookie about users' use of our website is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate users' use of our online offer, to compile reports on activities within our website, and to provide us with other services related to the use of our website and internet usage. Pseudonymous usage profiles of users may be created from the processed data.

We use Google Analytics only with IP anonymization enabled. This means the user's IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other data from Google.

We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and sessions to a unique user ID. This enables us to put individual user actions into context and analyze long-term relationships.

Data about user actions is stored for a period of 14 months and then automatically deleted. The deletion of data whose storage period has expired takes place automatically once a month.

We also use Google Analytics advertising features. This feature allows us to display ads more targeted to present users with interest-based ads. Through remarketing, users are shown ads and products for which interest has been detected on other websites within the Google network. Additionally, we can link Google Analytics with other Google services such as Google Ads. For these linked services, data for advertising purposes is collected via Google Analytics. This involves collecting additional data on accesses through Google cookies for ad settings and anonymous identifiers.

Information about the cookies used by Google can be found at https://policies.google.com/technologies/types?hl=de.

You can prevent the storage of cookies by Google Analytics through a corresponding setting in your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. You can also object to the setting of cookies on our website under the section Cookie Settings.

The legal basis for data processing in connection with the Google Analytics service is Art. 6 para. 1 lit. a) GDPR, and the processing serves the legitimate interest of analyzing user behavior on our website and the resulting possibility of demand-oriented design.

When using Google Analytics, a transfer of the processed data by Google Ireland Limited to the USA or other third countries cannot be excluded by us. The transfer is based on appropriate safeguards in the form of the EU standard contractual clauses for the transfer of personal data to processors in third countries. Google has committed to us to ensure that Google LLC complies with its obligations under these standard contractual clauses with regard to such transfers.

15. Tracking & Retargeting

a. Google Ads

We use the online advertising program Google Ads from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") or, if you are located in the EU, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"), through which we place ads on the Google search engine. When you access our website via a Google ad, Google sets a cookie on your device ("Conversion Cookie"). Each Google Ads customer is assigned a different conversion cookie, so the cookies are not tracked across the websites of different Ads customers. The information collected with the help of the cookie is used to create conversion statistics. This way, we learn the total number of users who clicked on one of our Google ads. However, we do not receive any information that would allow us to personally identify users.

Insofar as personal data is processed in this context, it is done for the purpose of marketing our offer and for direct advertising purposes. The processing only takes place with your consent and is based on the legal basis of Art. 6 para. 1 lit. a) GDPR. You can also prevent inclusion in conversion tracking by blocking the setting of cookies through your browser settings.

When using Google Ads, a transfer of the processed data by Google Ireland Limited to the USA or other third countries cannot be excluded by us. The transfer is based on appropriate safeguards in the form of the EU standard contractual clauses for the transfer of personal data to processors in third countries. Google has committed to us to ensure that Google LLC complies with its obligations under these standard contractual clauses regarding such transfers.

b. Facebook Pixel (Conversion and Custom Audience)

Within our website, we use the Facebook Pixel of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

With the help of the Facebook Pixel, we can track user behavior after they have been redirected to the provider's website by clicking on a Facebook advertisement (so-called "conversion"). We can also use this method to measure the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we inform you according to our knowledge. Facebook can link this data to your Facebook account and also use it for its own advertising purposes, in accordance with the Facebook Data Use Policy. https://www.facebook.com/about/privacy/You can allow Facebook and its partners to display advertisements on and off Facebook. For these purposes, a cookie may also be stored on your computer.

The Facebook Pixel is triggered by Facebook when you visit our website and can store a so-called cookie, i.e., a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be recorded in your profile. The data collected about you remains anonymous to us, so it does not allow conclusions about the identity of users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible and can be used by Facebook for its own market research and advertising purposes.

This processing is carried out for the purpose of obtaining information about the effectiveness of Facebook advertisements. It is done exclusively with your consent and is based on the legal basis of Art. 6 para. 1 letter a) GDPR.

You can revoke your consent by withdrawing it under the Cookie Settings section on our website.

You can also object to the collection by the Facebook Pixel and the use of your data for displaying Facebook Ads at the following address: https://www.facebook.com/settings?tab=ads.

We also use the Custom Audience service via the Facebook Pixel. Facebook collects visitors to our website and their data through the embedded pixel as a basis for ads (Facebook Ads). The pixel transmits general information about the browser session to Facebook as well as a non-reversible and non-personal checksum (hash value) generated from your Facebook ID. Details on how Facebook handles your data, as well as your rights and settings options to protect your personal data, can be found in Facebook's privacy notices at https://www.facebook.com/privacy/explanation refer.

This processing is carried out for the purpose of marketing our offers through targeted advertising delivery and is done with your consent. It is based on the legal basis of Art. 6 para. 1 letter a) GDPR.

You can revoke your consent by withdrawing it under the Cookie Settings section on our website.

If you also want to generally object to the use of Facebook Website Custom Audiences for the future ("Opt Out"), you can do so at https://www.facebook.com/ads/website_custom_audiences do.

c. Microsoft Advertising

Through the Microsoft Advertising service of Microsoft Corporation (USA), we use the Universal Event Tracking (UET) tool on our website. UET stores a cookie on your computer to enable analysis of the use of our online offer. This requires that you have arrived at our website via a Microsoft Advertising ad. Microsoft and we can thus recognize that you clicked on an ad, were redirected to our online offer, and reached a previously specified target page (so-called conversion measurement). No IP addresses are stored in this process. No further personal information about you is shared.

You can find more information about data protection and the cookies used by Microsoft Advertising in Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

This processing serves the purpose of marketing our offers through targeted advertising delivery. The use of UET only occurs with your consent. If personal data is also processed in this context, the legal basis for using this service is Art. 6 para. 1 letter a) GDPR. If you do not want to participate in the Microsoft Advertising tracking procedure, you can also object to Microsoft here: https://choice.microsoft.com/de-DE/opt-out.

d. Taboola

On our website, we use the technology of the provider Taboola Europe Limited. Taboola enables us, through the use of cookies stored on your computer, to point out content that may also be of interest to the user within our website or on third-party websites. The recommendations are defined based on the content you have read. The content is technically delivered/controlled automatically by Taboola. The processing of personal data takes place only with your consent and is based on the legal basis of Art. 6 para. 1 lit. a) GDPR.

You can find more information about terms of use and data protection at https://policies.taboola.com/de/datenschutzerklaerung/.

 

e. TikTok

On our website, we use the technology of the provider TikTok Technology Limited and TikTok Information Technologies UK Limited. TikTok enables us, through the use of cookies stored on your computer, to point out content that may also be of interest to the user within our website or on third-party websites. The recommendations are defined based on the content you have read. The content is technically delivered/controlled automatically by TikTok. The processing of personal data takes place only with your consent and is based on the legal basis of Art. 6 para. 1 lit. a) GDPR.

You can find more information about terms of use and data protection at https://www.tiktok.com/legal/privacy-policy-eea?lang=de.

16. Embedded services and third-party content

On our website, we use services, services, and content provided by third-party providers (hereinafter collectively referred to as "content"). For such integration, processing your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers.

Such third-party providers are particularly so-called Content Delivery Networks (CDN).

Unless otherwise stated in the following explanations, these data processing activities are carried out to protect our legitimate interests in optimizing and economically operating our website and are based on the legal basis of Art. 6 para. 1 lit. f) GDPR.

You can object to this data processing at any time via the settings of the browser you use or certain browser extensions. One such extension is uBlock for the Firefox and Google Chrome browsers. Please note that this may result in functional limitations on the website.

We have embedded content from the following third-party services into our website:

  • Services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"):
    • "Google Maps" for displaying maps;
    • "Google Web Fonts" for font rendering
    • "Google Cloud Platform" for displaying content
  • "YouTube" from YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube") for displaying videos. We have integrated YouTube videos into our website using the so-called two-click solution. When using the two-click solution, no connection to the third party is initially established; instead, a placeholder is first loaded from our own server. Only when you click on the placeholder are the video contents loaded from a third-party server. The necessary data processing is thus carried out with your consent and is based on the legal basis of Art. 6 para. 1 lit. a) GDPR.
  • "Amazon Cloudfront" from the third-party Amazon Web Services, Inc. (410 Terry Avenue North, Seattle WA 98109, USA; "Amazon") for content delivery.
  • "BootstrapCDN", offered by StackPath LLC (2012 Mc Kinney Ave., Suite 1100, Dallas, TX 75201, USA, "StackPath") for displaying content.
  • The CDN Polyfill.io, offered by Financial Times Limited (Number One Southwark Bridge, London, SE1 9HL).
  • The CDN JsDelivr, offered by Prospect One (hello@prospectone.io).
  • The CDN ASP.NET, offered by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA, "Microsoft").
  • The CDN RackCDN, offered by Rackspace US, Inc. (1 Fanatical Place, City of Windcrest, San Antonio, Texas 78218).
  • The CDN Keycdn, offered by proinity LLC (Faerberstrasse 9, CH-8832 Wollerau, Switzerland). If the IP address is transmitted to Switzerland, there is an adequacy decision by the European Commission stating that Switzerland provides an adequate level of protection regarding the processing of personal data (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32000D0518&from=EN).

17. Use of ABlyft

ABlyft collects information about user behavior to improve the user-friendliness of the website. No personally identifiable data is stored on the platform. Data is only stored in aggregated form. No storage of user data (IDs, etc.) takes place, and no data is transmitted to third countries.

You can object to the use of ABlyft at any time by clicking on the following link:
https://www.rockanutrition.de/?ablyft_opt_out=true

ABlyft is a service of Conversion Expert GmbH, Zeppelinring 52c, 24146 Kiel, Germany.

18. Use of Klar! Insights - Attribution

We use the services of Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany, a SaaS provider of business intelligence solutions for eCommerce companies. Klar Insights GmbH collects, processes, and stores data (user and session IDs, email addresses, IP addresses, online identifiers (cookie ID, device ID)) on this website and its subpages for reach measurement and statistical analysis on our behalf. We have concluded a data processing agreement with Klar Insights GmbH for this purpose.

The collection of personal data is based on the legal basis of consent according to Art. 6 para. 1 sentence 1 lit. a) GDPR. If the user gives consent, the data to be processed is collected in a user-related manner in accordance with § 25 para. 1 sentence 1 TDDDG.

The following cookies are used for the aforementioned different types of data collection to ensure the respective type of collection.

september_id september_has_consent september_do_not_track (in case of objection)

Cookie - Objection To generally object to the use of Klar! Insights, please use this link. This will set a cookie named “september_do_not_track” from the domain “rockanutrition.de”. Please do not delete this cookie, as otherwise it cannot be guaranteed that you will not be tracked by Klar.

Information on data protection and data usage by Klar can be found on the following website: https://app.getklar.com/legal/data-protection

 

III. Data processing on our social media pages

We maintain company pages on several social media platforms. Through this, we aim to provide additional opportunities to learn about our company and to engage in exchange. Our company has company pages on the following social media platforms:

  • Facebook
  • Instagram
  • Snapchat
  • Youtube
  • TikTok
  • Twitter

When you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a used social media profile also regularly constitutes personal data. This also includes messages and statements made using the profile. Additionally, certain information about your visit to a social media profile is often automatically collected, which may also constitute personal data.

1. Visiting a social media page

a. Facebook and Instagram page

When visiting our Facebook page, through which we present our company or individual products from our offer, certain information about you is processed. The sole controller for this processing of personal data is Facebook Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, "Facebook"). Further information about the processing of personal data by Facebook can be found at https://www.facebook.com/privacy/explanationFacebook offers the option to object to certain data processing activities; related information and opt-out options can be found at https://www.facebook.com/settings?tab=ads.

Facebook provides us with anonymized statistics and insights for our Facebook and Instagram pages, which help us gain insights into the types of actions people take on our page (so-called "page insights"). These page insights are created based on certain information about people who have visited our page. This processing of personal data is carried out by Facebook and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our page and improving our page based on these insights. The legal basis for this processing is Art. 6 para. 1 letter f) GDPR. We cannot assign the information obtained through the page insights to individual Facebook profiles interacting with our Facebook page. We have entered into an agreement with Facebook regarding processing as joint controllers, which defines the distribution of data protection obligations between us and Facebook.

We have entered into an agreement with Facebook regarding processing as joint controllers, which defines the distribution of data protection obligations between us and Facebook. Details about the processing of personal data for creating page insights and the agreement concluded between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_dataRegarding these data processing activities, you have the option to assert your data subject rights (see "Your Rights") also against Facebook. Further information can be found in Facebook's privacy policy at https://www.facebook.com/privacy/explanation.

Please note that according to Facebook’s privacy policy, user data may also be processed in the USA or other third countries. Facebook transfers user data only to countries for which the European Commission has issued an adequacy decision under Art. 45 GDPR or based on appropriate safeguards under Art. 46 GDPR.

b. Snapchat

For the processing of personal data when visiting our Snapchat channel, Snap Group Limited (London/UK) is generally the sole controller. Further information about the processing of personal data by Snapchat or Snap Group Limited can be found at https://www.snap.com/de-DE/privacy/privacy-policy/.

c. YouTube

For the processing of personal data when visiting our YouTube channel, Google Ireland Limited (Ireland/EU) is generally the sole controller. Further information about the processing of personal data by YouTube or Google Ireland Limited can be found at https://policies.google.com/privacy.

d. TikTok

For the processing of personal data when visiting the TikTok platform, TikTok Technology Limited (Ireland/EU) is generally the sole controller. Further information about the processing of personal data by TikTok or TikTok Technology Limited can be found at https://www.tiktok.com/legal/privacy-policy?lang=de.

e. Twitter

For the processing of personal data when visiting our Twitter profile, Twitter Inc. (USA) is generally the sole controller. Further information about the processing of personal data by Twitter Inc. can be found at https://twitter.com/de/privacy.

2. Processing of data provided to us via our page

We also process information you have provided to us via our company page on the respective social media platform. Such information may include the username used, contact details, or a message to us. These processes are carried out by us as the sole controller. We process this data based on our legitimate interest in contacting the requesting persons. The legal basis for data processing is Art. 6 para. 1 letter f) GDPR. Further data processing may occur if you have given consent (Art. 6 para. 1 letter a) GDPR) or if it is necessary to fulfill a legal obligation (Art. 6 para. 1 letter c) GDPR).

If you have provided us with information for participation in a sweepstake, we process this only to send you a prize if you win. After the prize has been delivered or if you did not win, we will delete the data. The legal basis for processing is Art. 6 para. 1 letter b) GDPR.

As of: June 2022

Cookie Settings