Privacy Policy PURISH Club
PRIVACY POLICY FOR PURISH CLUB LOYALTY PROGRAM
Information about the responsible person, data protection officer
(a) Controller
The controller within the meaning of the General Data Protection Regulation (“GDPR”) and other national data protection laws of the EU member states as well as other data protection regulations is:
PURISH GmbH
Alt-Moabit 90
10559 Berlin, Germany
Phone: +49 30 62937485
Email: help@purish.com
(hereinafter "we" or "us")
You can find more information about us in the imprint.
(b) The data protection officer of the controller is:
Johanna Lieser
CTM-COM GmbH
Marienburgstraße 27
64297 Darmstadt, Germany
Telephone: +49 6151 3942 – 722
Fax: +49 6151 3942 – 73
www.ctm-com.de
Purpose and legal basis of data processing
The loyalty program (hereinafter "PURISH Club") offered via https://www.purish.com/ / https://purish.com/en (hereinafter "website") is a loyalty program that allows participating customers (hereinafter the "members", "you", "your") who have a registered customer account on the website to collect points.
These points will be credited to your account for the corresponding orders following the PURISH Club Terms and Conditions. These points can be collected and redeemed for rewards and other benefits on the website. Participation in the PURISH Club requires that you have a registered customer account.
When you participate in the PURISH Club, your collected points are linked to your orders and your customer account to credit, manage, and update these points if necessary. If you have consented, we will email you information and offers about our PURISH Club. We will also use your data to inform you about the current points in your customer account or by email if you have given us your consent.
You can revoke your consent at any time with future effect. The legal basis for data processing is Art. 6 (1) (b) GDPR, provided that data processing is necessary for participation in the PURISH Club. The legal basis for sending the newsletter or sending the points balance is your consent, Art. 6 (1) (a) GDPR.
Storage
We store your personal data to the extent necessary for the purpose of data processing. If you cancel your PURISH Club membership, we will delete all of your personal data stored in connection with the PURISH Club, subject to a retention obligation for commercial or tax law reasons in accordance with Art. 6 (1) (c) GDPR.
Your rights as a data subject
(a) Right to information
You have the right to request information from us at any time about the personal data concerning you that we process within the scope of Art. 15 GDPR. You can submit a request by mail or email to the contact address provided.
(b) Right to rectification of inaccurate data
You have the right to request that we immediately correct any personal data concerning you that is inaccurate, in accordance with Art. 16 GDPR. To do so, please contact us using the contact details provided.
(c) Right to erasure
You have the right to request that we delete your personal data under the conditions described in Art. 17 GDPR. These conditions specifically include a right to deletion if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection, or the existence of an obligation to delete data under Union law or the law of the Member State to which we are subject. To exercise your right to deletion, please contact us at the contact address provided.
(d) Right to restriction of processing
You have the right to request that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period required to verify the accuracy, as well as in the event that the user requests restricted processing instead of deletion when they have an existing right to erasure; furthermore in the event that the data is no longer required for the purposes pursued by us, but the user requires it to assert, exercise or defend legal claims, or if the successful exercise of an objection is still disputed between us and the user. To assert your right to restriction of processing, please contact the specified contact address.
(e) Right to data portability
You have the right to receive from us the personal data concerning you that you have provided to us in a structured, common, and machine-readable format in accordance with Art. 20 GDPR. To exercise your right to data portability, please contact us at the contact address provided.
(f) Right of objection
You have the right to object at any time to the processing of personal data concerning you, which is carried out, inter alia, on the basis of Article 6 (1) (e) or (f) GDPR, for reasons arising from your particular situation. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
(g) Right of withdrawal (in case of consent given)
You have the right to revoke any consent you have given in accordance with Art. 7 (3) GDPR with future effect. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.
(h) Right of appeal
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of InformationAlt-Moabit 59-61
10555 Berlin
PO Box 31 09 55
10639 Berlin
Phone: +49 30 138 890
Fax: +49 30 215 5050
Email: mailbox@datenschutz-berlin.de
Internet: http://www.datenschutz-berlin.de
Update of the privacy policy
Changes to our offering may make it necessary to amend this privacy policy. Please therefore check this privacy policy regularly for updates. We will also inform you as soon as the changes require your cooperation (e.g., consent) or other individual notification.
Further information on how we process your data can be found in our privacy policy.