Information on data protection
This privacy policy informs you about how we handle your personal data and your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The controller for data processing is CRAZE GmbH (hereinafter referred to as "we" or "us").
Contents
I. General
1. Contact
2. Legal basis
3. Duration of storage
4. Categories of recipients of the data
5. Data transfer to third countries
6. Processing when exercising your rights
7. Your rights under the GDPR
8. Right to object
9. Data protection officer
II. Data processing on our website
1. Processing of server log files
2. Contact options and inquiries
3. Applications
4. Cookies
5. YouTube
III. Data processing on our social media pages
1. Visiting a social media page
2. Communication via social media pages
IV. Further data processing
1. Contact
2. Customer and prospect data
3. Note for data subjects in Switzerland


I. General
1. Contact
If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please send your request to
CRAZE GmbH Moltkestraße 49 76133 Karlsruhe
Tel. +49 (0) 721 38 13 47 0 Email info@craze-group.com

2. Legal basis
The data protection term "personal data" refers to all information relating to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the German BDSG. Data processing by us only takes place on the basis of a legal authorisation. We process personal data only with your consent (Section 25 para. 1 TDDDG or Art. 6 para. 1 lit. a GDPR), to fulfill a contract to which you are a party or at your request to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR), to fulfill a legal obligation (Art. 6 para. 1 lit. c GDPR) or if processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 lit. f GDPR).
If you apply for a open position in our company, we will also process your personal data to decide on the establishment of an employment relationship (Section 26 para. 1 sentence 1 BDSG or Art. 6 para. 1 lit. b GDPR).
3. Duration of storage
Unless otherwise specified in the following information, we will only store the data for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such legal storage obligations may arise in particular from commercial or tax regulations. From the end of the calendar year in which the data was collected, we will store such personal data contained in our accounting data for eight or ten years and personal data contained in commercial letters and contracts for six years. In all other cases, we will retain data in connection with verifiable consent as well as with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
4. Categories of recipients of the data
We use processors to process your data. The processing operations carried out by such processors include, for example, hosting, email dispatch, maintenance and support of IT systems, customer and order management, accounting and billing, marketing measures, or file and data carrier destruction. A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes, but process the data exclusively on behalf of the controller and are contractually obliged to ensure appropriate technical and organizational measures for data protection. In addition, we may transfer your personal data to entities such as postal and delivery services, our bank, tax advisors/auditors, or the tax authorities. Further recipients may be identified in the following information.
5. Data transfer to third countries
Our data processing may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR is not applicable. Such transfers are permissible if the European Commission has determined that an adequate level of data protection is provided in such a third country. If no such adequacy decision has been made by the European Commission, personal data will only be transferred to a third country if there are suitable safeguards in accordance with Art. 46 GDPR or if one of the conditions of Art. 49 GDPR is met.
If no adequacy decision has been made and unless otherwise specified below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of receiving a copy of these EU standard data protection clauses or viewing them. To do so, please contact us at the address provided under Contact.
If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 para. 1 lit. a GDPR.
6. Processing when exercising your rights
If you exercise your rights under Art. 15 to 22 GDPR, we will process the personal data transmitted for the purpose of implementing these rights by us and to be able to provide evidence of this. We will only process data stored for the purpose of providing information and preparing for this, and for data protection control purposes, and will otherwise restrict processing in accordance with Art. 18 GDPR.
This processing is based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 para. 2 BDSG.
7. Your rights under the GDPR
As a data subject, you have the right to assert your rights as a data subject against us. In particular, you have the following rights:
  • In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request access to information about whether and, if so, to what extent we process personal data relating to you.
  • You have the right to request that we rectify your data in accordance with Art. 16 GDPR.
  • You have the right to request that we delete your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
  • You have the right to restrict the processing of your personal data in accordance with Art. 18 GDPR.
  • You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.
  • If you have given us separate consent to process your data, you can withdraw this consent at any time in accordance with Art. 7 para. 3 GDPR. Such withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
  • If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
8. Right to object
In accordance with Art. 21 para. 1 GDPR, you have the right to object to processing based on the legal basis of Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation. If we process personal data about you for direct marketing purposes, you may object to this processing in accordance with Art. 21 para. 2 and 3 GDPR.
9. Data protection officer
You can contact our data protection officer at the following address:
Email: datenschutz@craze.toys Herting Oberbeck Datenschutz GmbH Hallerstr. 76, 20146 Hamburg https://www.datenschutzkanzlei.de
II. Data processing on our website
When you use our website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected by us during your visit to the website. Under data protection law, the IP address is also considered personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
1. Processing of server log files
When you use our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e., not via registration). This includes the following standard information: browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code.
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 lit. f GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted unless has concrete evidence of unlawful use and further examination and processing of the information is necessary for this reason. We are not able to identify you as the data subject based on the information stored. Art. 15 to 22 GDPR therefore do not apply in accordance with Art. 11 para. 2 GDPR, unless you provide additional information enabling your identification in order to exercise your rights set out in these articles.
2. Contact options and inquiries
Our website contains contact forms that you can use to send us messages. Your data will be transferred in encrypted form (indicated by "https" in the address bar of your browser). All data fields marked as mandatory are required to process your request. If you do not provide this information, we will not be able to process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact email address. We process the data for the purpose of responding to your request.
If your request is related to the conclusion or execution of a contract with us, Art. 6 para. 1 lit. b GDPR is the legal basis for data processing. Otherwise, we process the data based on our legitimate interest in contacting persons who have made inquiries. The legal basis for data processing is then Art. 6 para. 1 lit. f GDPR.
3. Applications
You can apply for a position via our website in the Careers section. For this purpose, we collect personal data from you, including in particular your name, resume, cover letter, and other content provided by you.
Your personal application data will be processed exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and taken into account by the relevant contact persons at our company.
All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will store the data you have provided for up to six months at after completion of the application process for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage.
The legal basis for data processing is Section 26 para. 1 sentence 1 BDSG or Art. 6 para. 1 lit. b GDPR.
If we store your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 para. 3 GDPR. Such withdrawal does not affect the lawfulness of the processing carried out based on the consent until withdrawal.
4. Cookies
We use cookies and similar technologies ("cookies") on our website. Cookies are small data files that are stored by your browser when you visit a website. They identify the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in your browser's security settings. You can object to the use of cookies through your browser settings either generally or in specific cases.
The use of cookies on our website is technically necessary for the operation of our website and is therefore permitted without consent in accordance with Section 25 para. 1 TDDDG and Art. 6 para. 1 lit. f GDPR.
5. YouTube
We use the YouTube service provided by Google Ireland Limited (Ireland, EU) on our website to embed videos. For such embedding, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies. We use YouTube in "enhanced privacy mode" so that YouTube does not set any cookies to analyze usage behavior.
Your data is processed based on Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in optimizing and operating our website in an economically viable manner.
When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries." For more information about data protection at Google, please refer to Google's privacy policy at https://www.google.com/policies/privacy.
III. Data processing on our social media pages
We are represented on several social media platforms with a company page. In this way, we would like to offer further opportunities to provide information about our company and to exchange ideas. Our company has company pages on the following social media platforms:
  • Facebook of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter referred to as "Meta";
  • Instagram of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter referred to as "Meta";
  • LinkedIn, LinkedIn Ireland Unlimited Company (Ireland, EU), hereinafter referred to as "LinkedIn";
When you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile also regularly constitutes personal data. This includes messages and statements made using the profile. In addition, when you visit a social media profile, often automatically collects certain information about you, which may also constitute personal data.

1. Visiting a social media page
When you visit our social media page, where we present our company or individual products from our range, certain information about you is processed. The operators of the social media platforms are solely responsible for this processing of personal data. Further information on the processing of personal data can be found in their privacy policies, to which we link below:

The operators of social media platforms collect and process event data and profile data and provide us with statistics and insights in anonymized form for our pages, which help us gain insights into the types of actions that people take on our site (so-called "page insights"). These page insights are created based on certain information about people who have visited our site. This processing of personal data is carried out by the social media operators and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on these findings. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.
We cannot associate the information obtained through Page Insights with individual user profiles that interact with our pages. We have entered into agreements with the operators of the social media platforms as joint controllers, which define the distribution of data protection obligations between us and the operators. Details about the processing of personal data for the creation of page insights and the agreement concluded between us and the operators can be found at the following links:


You also have the option of asserting your rights against the operators. Further information can be found at the following links:
We have agreed with Meta and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority that oversees the processing of Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or any other supervisory authority.
2. Communication via social media pages
We also process information that you have provided to us via our company page on the respective social media platform. Such information may include the username you use, contact details, or a message to us. We process this data as the sole controller. We process this data based on our legitimate interest in contacting individuals who have made inquiries. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Further data processing may take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if this is necessary to fulfill a legal obligation (Art. 6 para. 1 lit. c GDPR).
If you have provided us with information for the purpose of participating in a competition, we will only process this data to send you a prize. After delivery of the prize or if you have not won, we will delete the data.
The legal basis for processing is Art. 6 para. 1 lit. b GDPR.
IV. Further data processing
1. Contact
If you call us or send us a message via the contact email address provided, we will process the data you provide for the purpose of responding to your enquiry. We process this data based on our legitimate interest in contacting persons who have made enquiries.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR.
2. Customer and prospect data
If you contact our company as a customer or prospect, we will process your data to the extent necessary to establish or fulfill the contractual relationship. This regularly includes the processing of the personal master data, contract data, and payment data provided to us, as well as the contact and communication data of our contact persons at commercial customers and business partners. The legal basis for this processing is Art. 6 para. 1 lit. b GDPR. If you are not a contractual partner, our legitimate interest in the performance of the contract pursuant to Art. 6 para. 1 lit. f GDPR is the legal basis.
We also process customer and prospect data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 para. 1 lit. f GDPR and serves our interest in further developing our offering and providing you with targeted information about our offerings.
Further data processing may take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if this is necessary to fulfill a legal obligation (Art. 6 para. 1 lit. c GDPR).
3. Note for data subjects in Switzerland
If you are a data subject within the scope of the Swiss Federal Act on Data Protection, the information provided under this point also applies.
The legal references made in this privacy policy are intended for data subjects in Switzerland in accordance with the comparable provisions of the Federal Act on Data Protection. This applies in particular to the applicable rights of data subjects under Art. 25-29, 32 DSG.
Data processing also takes place in the following countries outside Switzerland:
  • Germany (EU)
  • Ireland (EU)
  • United States of America
We guarantee an appropriate level of data protection. This is ensured by:
  • a data protection level deemed adequate in accordance with Art. 16 para. 1 DSG for the recipient country;
  • standard data protection clauses that have been previously approved, issued, or recognized by the FDPIC, in particular the standard contractual clauses of the European Commission;
  • an international agreement that regulates an adequate level of data protection.

Pages
Legal
Contact
Phone
+49 721 3813470