Privacy Policy


1. Controller

The B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg, Tel.: +49 (0) 911 / 92 380 430, E-Mail: info@toysandkids.com, as the operator of this website (www.toysandkids.com), is the controller within the meaning of the General Data Protection Regulation (GDPR), who alone or jointly with others, determines the purposes and means of the processing of personal data (hereinafter: “data”).


2. Processing of personal data and definitions

According to the GDPR, personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a name, an identification number, location data, an online identifier or to one or more factors specific to the genetic, economic or social identity of that natural person).

 
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. This includes in particular collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 
In principle, it is not necessary for you to provide any data in order to use our website. In certain cases, however, we may require your name and address as well as other information to provide the requested services.

 
The same applies, for example, to the sending of information materials and ordered goods, or to answering individual questions. Whenever the provision of data is necessary, we will advise you of it. In addition, we only store and process data that you voluntarily provide to us and, where required, data that we automatically collect when you visit our website (e.g. IP address and the names of the pages you have visited, the browser used by you and your operating system, date and time of access, search engines used, names of downloaded files).

 
If you make use of our services, we will usually only collect such data that we require to provide the respective services. Where we request any further data, such data is provided by you on a voluntary basis.
The data is processed exclusively for the purpose of performing the requested service and safeguarding our own legitimate business interests.


3. Protection of your personal data

Thank you for your interest in our company and our products and services. We want you to feel safe when you visit our website, also with regard to the protection of your data. We take the protection of your data very seriously. You can rest assured that we will comply with the provisions of the GDPR and the Federal Data Protection Act (BDSG) in its currently valid version.

 
We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by external service providers that we commission. We have ensured that our employees and the service companies commissioned by us undertake to observe confidentiality and to comply with the provisions of the GDPR and the Federal Data Protection Act in its currently valid version.

 
As part of our information obligations, we would like to make sure that this Privacy Policy is as transparent as possible. For this purpose, we explain the purposes of the processing of your data and the use of cookies in the following paragraphs.


4. Purposes of the processing of personal data

We process the data you provide in accordance with the principles of data minimisation and purpose limitation. In accordance with the principle of purpose limitation, data is collected for specified, explicit and legitimate purposes and is not processed further in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is not considered to be incompatible with the initial purposes.

 
In principle, we process your data for the purpose of answering your queries, processing your orders or granting you access to certain information or offers. In order to maintain customer relationships, it may also be necessary for us or a service company commissioned by us to use this data to inform you about product offers or to conduct online surveys in order to better fulfil the tasks and requirements of our customers.

 
Any data you provide online will only be processed by us for the purposes that have been communicated to you. Your data will not be passed on to third parties without your express consent.

 
Data is collected and transferred to state institutions and authorities entitled to receive information exclusively within the framework of the relevant laws or where we are obliged to transfer such data on the basis of a court decision.
Any data you provide online will only be processed by us for the purposes that have been communicated to you.


5. Legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, the consent according to Article 6 (1) (a) of the GDPR represents the legal basis for the processing of your data.

 
The processing of personal data that is required for the purpose of performing the requested service is based on Article 6 (1) (b) of the GDPR.

 
The processing of personal data that is necessary to fulfil a legal obligation imposed on our company is based on Article 6 (1) (c) of the GDPR.

 
The legal basis for processing that is necessary for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, is Article 6 (1) (f) of the GDPR.

 

 
6. Data transfers to a third country

Where data is transferred to a third country, i.e. a country outside the European Union (EU) or the European Economic Area (EEA), this is done on the basis of your consent, a legal obligation, our legitimate interests or where this is necessary to fulfil our (pre-)contractual obligations. Subject to legal or contractual permissions, your data will be processed on the basis of the special provisions of Articles 44 et seq. of the GDPR or the so-called EU standard contractual clauses.


7. Data erasure and duration of storage

We will store your data until the purpose has been fulfilled and within the scope of the statutory retention requirements (e.g. commercial or tax retention obligations).

 
Where you have given us your consent, we will store your data until you withdraw your consent, provided that there is no other legal basis for the processing of your data and that there are no statutory retention periods precluding the erasure of such data.

 
In addition, in individual cases, e.g. for evidentiary purposes, a longer storage for defence or enforcement of claims may be indicated.


8. Cookies

a) Essential cookies
When you use our website, we use cookies that are essential for technical reasons, which are processed during your visit to the website and that are necessary for the operation and the security-relevant functions of the website. In particular, the following data may be processed: the names of the pages you have visited, the browser used by you and your operating system, date and time of access, search engines used, names of downloaded files as well as your IP address. Cookies are small text files that are sent to your browser by a web server and saved on your computer's hard drive. This information is used to automatically recognise you on your next visit to the website and to make navigation easier for you. Cookies allow us, for example, to adapt a website to your hardware.

 
In principle, you can also view our website without cookies. If you do not want us to recognise your computer, you can prevent the placement of cookies on your hard drive by selecting the appropriate settings in your browser. For details, please refer to the instructions of your browser manufacturer. However, if you do not accept cookies, certain functions of the presentation of our website and offers may be restricted.

b) Statistics cookies
Furthermore, cookies are also used on our website for statistical purposes - we collect your data anonymously for statistics and analyses aimed at improving our services, offers and website. Among other things, these cookies allow us to optimise visitor numbers and page usage behaviour (Google Analytics).

 
When you visit our website (for the first time), you have the option of selecting the different cookie settings.
You can change the cookie settings on our website at any time by clicking on the round cookie symbol in the bottom left corner of the website.

c) Cookies for convenience-related purposes
We also use cookies for convenience-related purposes in order to optimally present our offers and services to the users of this website. What serves this purpose in particular is the integration of cookies from third-party providers such as YouTube or Vimeo.

 
You can change the cookie settings on our website at any time by clicking on the round cookie symbol in the bottom left corner of the website.


9. Google Analytics

Google Analytics is used on our website. It is a web analysis service provided by Google LLC (“Google”), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or, where the service is provided in the European Union (EU) - Google Ireland Limited, Gordon House , 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies”, i.e. text files that are stored on your computer and that allow an analysis of your use of the website. The analysis is performed on the basis of your consent.

The information generated by the cookie about your use of this website is usually transferred to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google prior to such transfer within the Member States of the European Union or in other states which are party to the Agreement on the European Economic Area (so-called IP masking).

Only in exceptional cases is the complete IP address transmitted to and truncated by Google on a server in the United States. IP anonymisation is enabled on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of our website, to create reports on website activity for the operator of the website, and to provide other services related to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can disable cookies by using appropriate settings of your browser software; however, please be advised that in this case you may not be able to take full advantage of all the functions of this website. You can also object to Google collecting the data generated by the cookie and related to your use of the website (including your IP address) and processing this data by downloading and installing the browser plug-in available under the following link. The current link is: https://tools.google.com/dlpage/gaoptout?hl=en.

If you do not want us to recognise your computer, you can prevent the placement of cookies on your hard drive by selecting the appropriate settings in your browser.
You can change the cookie settings on our website at any time by clicking on the round cookie symbol in the bottom left corner of the website.
You can access the Google Privacy Policy at https://policies.google.com/privacy?hl=en and the Google Terms of Service at https://policies.google.com/terms?hl=en.


10. YouTube

Our website contains so-called embedded YouTube videos. However, these enable the connection to YouTube only. YouTube is a service from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA or, where the service is provided in the European Economic Area and Switzerland - from Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter: "Google").

By integrating YouTube, we pursue the purpose of providing you with various videos on our website which can be viewed by you directly on the website.

Where a corresponding consent for the placement or storage of cookies has been requested and granted, the processing will take place exclusively on the basis of Article 6 (1) (a) of the GDPR. You can withdraw your consent at any time with effect for the future by going to cookie settings. An opt-out cookie will then placed, thus preventing the collection of your data when you visit this website in the future.

You can find more information in the Youtube and Google Privacy Policies, which can be accessed here: www.google.com/policies/privacy/ and https://privacy.google.com/take-control.html?categories_activeEl=sign-in.


11. Vimeo

Our website contains so-called embedded Vimeo videos. However, these enable the connection to Vimeo only. Vimeo is an offer from Vimeo LLC, based at 555 West 18th Street New York, New York 10011 (hereinafter: "Vimeo"). However, this embedding enables the connection to Vimeo only.

Where a corresponding consent for the placement or storage of cookies has been requested and granted, the processing will take place exclusively on the basis of Article 6 (1) (a) of the GDPR. You can withdraw your consent at any time with effect for the future by going to cookie settings. An opt-out cookie will then placed, thus preventing the collection of your data when you visit this website in the future.

 
If you wish to obtain more information on the purpose and scope of data collection and use by Vimeo as well as your rights and setting options for protection as a Vimeo customer, please refer to the Vimeo Privacy Policy available at https://vimeo.com/privacy.


12. LinkedIn

Our website includes functions of the linkedin.com service, which is operated by LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA. The LinkedIn link is marked with a blue, round logo with the white lettering "in".

If you use the aforementioned link, i.e. if you click on the respective button, information that you have accessed certain pages on our website will be forwarded to the LinkedIn server. For LinkedIn users who are logged in at the same time, this means that the usage data will be assigned to their respective personal account. If you click the buttons, i.e. if you use the link from LinkedIn, this information will be transferred directly from your browser to LinkedIn and stored by it. Even if you are not a member of LinkedIn, LinkedIn may still identify and store your IP address. This is beyond our control.

If you do not agree to LinkedIn collecting data about you via our website, we ask you to log out of LinkedIn before visiting our website. You can also block LinkedIn by using add-ons for your browser.

We use the LinkedIn link on the basis of our legitimate interest in accordance with Article 6 (1) (f) of the GDPR. In this case, these are the analysis, optimisation and economic operation of our online offer.

To find out about the purpose and scope of the collection, processing and use of your data, as well as your rights and setting options to protect your privacy, please visit the LinkedIn Privacy Policy available at https://www.linkedin.com/legal/privacy-policy?_l=en.


13. XING

We wish to advise the users of our website that a link to XING is installed on our website. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. The XING link is marked with a two-coloured "X" based on the Xing logo on a white background.

If you use the aforementioned link, i.e. if you click on the respective button, information that you have accessed certain pages on our website will be forwarded to the XING server. For XING users who are logged in at the same time, this means that the usage data will be assigned to their respective personal account. Even if you are not a member of the aforementioned social networks, XING may still identify and store your IP address. This is beyond our control.

If you do not agree to XING collecting data about you via our website, we ask you to log out of XING before visiting our website. You can also block XING by using add-ons for your browser.

We use the XING link on the basis of our legitimate interests in accordance with Article 6 (1) (f) of the GDPR. In this case, these are the analysis, optimisation and economic operation of our online offer.

To find out about the purpose and scope of the collection, processing and use of your data, as well as your rights and setting options to protect your privacy, please visit the following websites containing the Privacy Policies of the providers of the social networks available at:
https://www.xing.com/privacy


14. Contact form

If you use our contact form to contact us, we will ask you to provide personal information. In order for us to be able to answer the request, you will be asked to provide your title, first name, surname and a valid email address. You may also wish to provide further information about yourself.

Your details will be processed further by email. The contact form is sent using end-to-end encryption. The tool we use for our contact form is provided by Bitrix24 Ltd., Poseidonos, 1, Egkomi, 2406, Nicosia, Cyprus. The provider's Privacy Policy can be found at the following link: https://www.bitrix24.de/terms/.

Data processing for the purpose of contacting us takes place on the basis of your voluntarily given consent. By clicking on the "Send" button and confirming that you have read and understood our Privacy Policy, you consent to the processing of your contact details for the aforementioned purposes. If you do not agree, you will be required to cancel the process. The contact form will then not be sent and your data will not be processed.

The data entered in the contact form is processed exclusively on the basis of your consent (Article 6 (1) (a) of the GDPR). You can withdraw this consent at any time with effect for the future. To do this, please write to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg or send an email to info@toysandkids.com.

 
We only use your data insofar as this is necessary for processing your queries and for further correspondence with you. The data that we collect for the use of the contact form will be stored by us for the purpose of processing the query and in the event of follow-up questions, and will be erased under data protection law once your query has been resolved, unless further statutory retention requirements apply.


15. Registration and test account

As a specialist dealer or exhibitor (b2b), you have the option of registering on our online platform free of charge or creating a 30-day free test account. The following mandatory information is required for this purpose: company name, title, first name and surname, email and telephone number.

 
Your details will be processed further by email. The contact form is sent using end-to-end encryption. The tool we use for our contact form is provided by Bitrix24 Ltd., Poseidonos, 1, Egkomi, 2406, Nicosia, Cyprus. The provider's Privacy Policy can be found at the following link: https://www.bitrix24.de/terms/.

Data processing for the purpose of registration or a request to create a test account takes place on the basis of your voluntarily given consent. By clicking on the "Send" button and confirming that you have read and understood our Privacy Policy, you consent to the processing of your contact details for the aforementioned purposes. If you do not agree, you will be required to cancel the process. The contact form will then not be sent and your data will not be processed.

The data entered in the registration form is processed exclusively on the basis of your consent (Article 6 (1) (a) of the GDPR). You can withdraw this consent at any time with effect for the future. To do this, please write to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg or send an email to info@toysandkids.com. In the event of a withdrawal, we may not be able to maintain business contact or provide our services properly.


16. Chat and feedback function

We also offer a live chat and feedback function on our website. As a website user, you can use this function to send us questions or concerns, which we will answer or process promptly. You can also give us feedback on our offers and services by using the feedback function.

 
The live chat and feedback function uses a tool provided by Bitrix24 Ltd., Poseidonos, 1, Egkomi, 2406, Nicosia, Cyprus, with end-to-end encryption. The provider's Privacy Policy can be found at the following link: https://www.bitrix24.de/terms/.

 
Data processing for the purpose of the chat and feedback function takes place on the basis of your voluntarily given consent. By clicking on the “Send message” button, you actively consent to the processing of your data for the aforementioned purposes. If you do not agree, you will be required to cancel the process. The message will then not be sent and your data will not be processed.

The processing of your data as part of the chat function therefore takes place exclusively on the basis of your consent (Article 6 (1) (a) of the GDPR). You can withdraw this consent at any time with effect for the future. To do this, please write to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg or send an email to info@toysandkids.com. In the event of a withdrawal, we may not be able to answer or process your questions or concerns or we may not be able to provide our services properly.

The chats and feedback are stored to process your request in compliance with the statutory retention periods.


17. Microsoft Bookings

We use Microsoft Bookings, a product of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, for online appointment management of live demonstrations on our platform. The live demonstration serves to introduce our platform and provide information to our customers. Please be advised that you are under no obligation to use Microsoft Bookings.

 
The processing of your data as part of the use of online appointment management takes place on a voluntary basis and therefore exclusively on the basis of your consent (Article 6 (1) (a) of the GDPR).
Further information on data protection can be found under the following link from the provider https://privacy.microsoft.com/en-GB/privacystatement


18. Children and adolescents

Our website is aimed exclusively at interested parties, (prospective) customers and business partners in the business-to-business area (b2b).

 
Persons under the age of 16 may not transfer any data to us without the consent of their parents or legal guardians. We do not request any data from children and adolescents who have not yet reached the age of sixteen. We do not collect such data and do not pass it on to third parties.


19. Security

We have implemented technical and organisational security measures in accordance with legal requirements to protect your data against loss, destruction, manipulation and unauthorised access. All our employees and all persons involved in data processing are obliged to comply with the GDPR, the Federal Data Protection Act in its currently valid version, as well as other laws relevant to data protection, and have undertaken to handle data confidentially.

 
Furthermore, where the requirements set out in Article 28 of the GDPR are met, we conclude the corresponding agreements on order processing with the external service providers who work on our behalf.

 
The security measures include, in particular, the encrypted transmission of data between your browser and our server. This website uses TLS encryption for security reasons and for the purpose of protecting the transmission of confidential content such as any queries you send to us, i.e. the website operator. The connection is encrypted when the address line of the browser contains "https://" and the padlock symbol is displayed next to the address line. If TLS encryption is enabled, the data that you transmit to us cannot be read by third parties.

 
Our security measures are regularly checked and continuously adapted in line with technological developments.


20. Changes to our data protection regulations

We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technical developments or changes in the law. In these cases, we will also adapt our information on data protection accordingly. Therefore, please make sure to familiarise yourself with the respective current version of our Privacy Policy.


21. Consent

If we require your consent for the processing of your data, we will request it from you and use your data for the purposes specified when you give your consent.

 
You can withdraw your consent at any time with effect for the future. To do this, please write to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg or send an email to info@toysandkids.com.


22. Application process

By submitting your applicant data, you consent to the processing of your data for the specific application process. You can withdraw your consent at any time with effect for the future.


23. Rights of data subjects

Where we process your data, you have rights as a data subject, which are listed in detail below:

 
a) Right of access
At any time, you can obtain information about your data that we process.
In particular, you can request information about the purposes of processing, the categories of data processed, categories of possible recipients and the planned storage period.

 
Please address your request for information to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg (controller), or send an email to info@toysandkids.com.

b) Right to rectification
You are entitled to request that we correct or complete your data stored by us.

 
To exercise your right, please use the controller’s contact details provided above.

c) Right to erasure
You can request the erasure of your data if the storage of the data is no longer necessary and there is no other legal basis for its processing. You can also request erasure if you have objected to the processing, provided that there are no overriding legitimate grounds for the further processing of your data, and where your data has been processed unlawfully or if there is a legal obligation to erase data under EU or national law.

 
To exercise your right, please use the controller’s contact details provided above.

d) Right to restriction
In addition, you have the right to restriction of processing if
you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data, if the processing is unlawful and where you oppose the erasure of the data, if the purpose of processing has been fulfilled but you require the data for the establishment, exercise or defence of legal claims, or if you have objected to processing, pending the verification whether the legitimate grounds of the controller override yours.

To exercise your right, please use the controller’s contact details provided above.

e) Right to data portability
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. In addition, under certain conditions, you can have your data transmitted directly by the controller, as far as this is technically possible.

 
To exercise your right, please use the controller’s contact details provided above.


24. Right to object

You have the right to object to the use of your data for the aforementioned purposes at any time. This is possible if the objection is directed against direct marketing or if there are grounds relating to your particular situation. If you object to direct marketing, you have a general right of objection, which we will implement without asking you to state your particular situation.

 
To exercise your right to object, please write to B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg (controller), or send an email to info@toysandkids.com.


25. Questions, suggestions, complaints

Should you have any questions about our information on data protection or the processing of your data, you can contact our contact person for data protection directly:

 
Carlos Blank, B & B Merchandising GmbH, Deichslerstr. 5, 90489 Nürnberg E-Mail: info@toysandkids.com.
They are also available to assist you as a contact person in the event of requests for information, suggestions or complaints.

 

 
26. Right to lodge a complaint with a supervisory authority

In addition, please be advised that without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you violates data protection requirements.

 
The supervisory authority responsible for our company is:

 
Bayerische Landesamt für Datenschutzaufsicht

 
Promenade 18
91522 Ansbach
Deutschland

 
Telefon: +49 (0) 981 180093-0
Telefax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de
Webseite: https://www.lda.bayern.de

 
A list of the supervisory authorities, together with addresses, can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html