I. General information
- Name and address of the person responsible
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:
Bullyworld GmbH
Gewerbestrasse 11
83365 Nußdorf
Germany
Phone: +49 (0) 8669 358 222 81
E-mail: info@bullyworld.de or at datenschutz@bullyworld.de
Internet: www.bullyland.de
Bullyworld GmbH is represented by: Thomas Eberl
Due to the size of the company, no data protection officer has been appointed. If you have any questions about data protection, please use the contact details below:
- SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. - Links
If you use external links that are offered on our website, this data protection declaration does not extend to these links. In the event that you follow a link to one of these websites, we would like to point out that the use of these websites is subject to the respective provider's own data protection conditions. We recommend that you check the data protection notices on the linked websites. In this way, you can determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
II Definitions
Our privacy policy should be simple and understandable for everyone. The privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.
„Personal data“ is all information that relates to the personal or factual circumstances of a person and that makes it possible to identify them. This includes, for example, your name, your email address, but also, for example, the content of a message that you send to us.
III General information on data processing
- Scope of the processing of personal data
We only process your personal data insofar as this is necessary to provide a functional website and our content and services. Your personal data is regularly processed only with your consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and/or the processing of the data is permitted by law. - Legal basis for the processing of personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the fulfilment of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard our legitimate interests or those of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. - Data erasure and storage duration
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
IV. Provision of the website and creation of log files
- Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. We have no direct influence on the collection of this data, but for reasons of transparency we do not want to leave you in the dark about this. The following data is collected:
(1) The operating system of the end device
(2) Information about the browser type and version used
(3) The IP address of the end device
(4) Date and time of access
(5) Name and URL of the retrieved file
(6) Website from which the access is made
(7) Amount of data transferred - Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR. - Purpose of data processing
The stored data is only analysed for statistical purposes and not to establish a specific personal reference. The data is also used to enable errors to be rectified.
We process the above-mentioned usage data for the purpose of ensuring trouble-free operation of the website and to guarantee IT security. We process this personal data on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR). Our legitimate interest is to enable you to use the website without disruption and to ensure IT security. - Data erasure and storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Beyond this, we only store your usage data to fulfil statutory retention obligations. - Possibility of objection
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, you have no option to object.
V. Use of cookies
- General information about cookies
Our website uses cookies or similar technologies (together „cookies“). Cookies are small text files that are temporarily stored in the Internet browser or by the Internet browser on the user's computer system for the duration of a session („session cookies“) or permanently („permanent cookies“). When you visit a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Session cookies are automatically deleted at the end of your visit to the website; permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. language settings). Other cookies are used to evaluate user behaviour or display advertising. - Which cookies are used on our website?
A list of the cookies we use, descriptions of the purposes of the cookies and further information on the respective cookies can be found in our cookie consent solution („Cookie Settings“) in the footer of our website.
Other cookies are only used with your consent on the basis of Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTGSG.
If cookies other than technically necessary cookies are used, we will inform you of this separately in Section V.4 and obtain your consent. - Web browser settings
Most browsers are set to accept cookies by default, but you can reconfigure your browser to refuse cookies or to ask for your confirmation beforehand. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or how you can delete all cookies you have already received and block the browser for all others.
However, if you reject cookies, this may mean that part of our website (and the services of other websites) is not available and therefore some functions cannot be used. Cookies must also generally be activated in order to be able to object to the use of programmes/uses (due to the setting of an objection (opt-out) cookie).
Opt-out via www.youronlinechoices.com
You can also object to some cookies that are loaded on the website centrally at www.youronlinechoices.com. The respective cookie will then no longer collect data about your future visits to our website. It will also prevent the respective cookie from being set again. Please note, however, that this objection will result in an opt-out cookie being placed on your device. You must not delete this. If you have deleted all your cookies in the Internet browser, use a different Internet browser or a different device, you must object to the cookie again via the above link - Cookies on the basis of consent
As already explained in section V. 2. of this privacy policy, we process data in part on the basis of consent. You give this consent by selecting the relevant cookies in the cookie settings on the bullyland.de website and clicking the „Save settings“ button. By clicking on the „Save settings“ button, you give your consent for us to store data on your end device (e.g. by setting cookies) or to retrieve data from your end device. You can also object to the use of these cookies for the future via our cookie settings in the footer.
Cookie settings
VI General data processing on our website
- Contact us via the contact form
a) Data processing
You can enter personal data via a contact form on our website. If you use the contact form, we process the data that you enter in the input mask (e.g. surname, first name, email address, telephone number, subject, message, time of enquiry and server log data).
b) Legal basis
Your data is processed exclusively on the basis of contract fulfilment (Art. 6 para. 1 lit. b GDPR) insofar as it concerns contract-related matters and in all other cases in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard legitimate interests). In the latter case, our legitimate interest is to respond to your enquiry.
c) Storage period and erasure
We only process the personal data received from you for contact purposes until we have finally answered your enquiry. Beyond this, we only store personal data for the assertion of or defence against legal claims or for as long as there are legal obligations to store it.
d) Possibility of objection
You can object to this at any time for reasons arising from your particular situation by notifying us in writing (see Section I.1.) or at datenschutz@bullyworld.de. - Contact by e-mail, telephone, post
a) Data processing
When you contact us by e-mail, post or telephone via the contact channels we offer, the data you provide (e.g. your e-mail address and name, the content of your enquiry and the further processing of your enquiry) will be processed by us in order to process and answer your questions or concerns.
b) Legal basis
Your data is processed exclusively on the basis of contract fulfilment (Art. 6 para. 1 lit. b GDPR) insofar as it concerns contract-related matters and in all other cases in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard legitimate interests). In the latter case, our legitimate interest is to respond to your enquiry.
c) Storage period and erasure
We only process the personal data received from you for contact purposes until we have finally answered your enquiry. Beyond this, we only store personal data for the assertion of or defence against legal claims or for as long as there are legal obligations to store it.
d) Possibility of objection
You can object to this at any time for reasons arising from your particular situation by notifying us in writing (see Section I.1.) or at datenschutz@bullyworld.de.
We ensure that the data is stored securely to prevent unauthorised access by third parties. However, please note that unencrypted e-mails sent via the Internet are not adequately protected against unauthorised access by third parties. Alternatively, you can send us a message via our secure contact form (SSL standard) - Newsletter service from Sendinblue/Brevo
a) Description and scope of data processing
If you wish, we will process your personal data in order to send you information about our current offers. If you subscribe to the newsletter, we process your e-mail address and information to send the newsletter to you.
Double opt-in procedure: Registration for our newsletter is always carried out using a double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address.
b) Legal basis for data processing
Subscription to the newsletter is only possible with your consent. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR.
c) Purpose of data processing
Direct marketing
d) Storage period and deletion
We process your personal data for these purposes as long as you show an interest in our newsletters or until you revoke your consent. Beyond this, we only store personal data for the assertion of or defence against legal claims or as long as there are legal obligations to store it.
e) Revocation
You can unsubscribe from a newsletter at any time using the link at the end of the newsletter. Alternatively, you can object at any time by writing to us (see Section I.1.) or at datenschutz@bullyworld.de. - Use of videos and integrated content
a) Description and scope of data processing
We sometimes include videos (e.g. trailers) on our website that are provided via third-party platforms such as YouTube, Vimeo or external content delivery networks (CDNs). Personal data (e.g. IP address, browser and device data, cookies) may be transmitted to these providers as soon as the page is loaded, even if the video has not yet been played
b) Legal basis for data processing
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR.
c) Revocation:
You can revoke your consent at any time with effect for the future. To exercise your cancellation, deactivate this service in the „Cookie settings“ provided on the website. - Google Ads
Google Ireland Limited supports us (as a processor) in providing this functionality.
a) Provider
Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, DublinD04 E5W5 Ireland
b) Scope and purpose of the processing of personal data
Google Ads adverts are placed to draw attention to our products and achieve greater visibility for Bullyworld GmbH. Google Ad Words is an online advertising program from the US company Google Inc. Purposes: Personalised advertising, conversion tracking, summary of data from all users in order to visualise it in aggregated form. Collected data: Cookie ID, user agent (name and version of browser software, usage data (clicks, views, purchases, previously visited URL/referrer, URL views).
c) Legal basis for the processing of personal data
The processing of personal data is based on your consent, Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.
d) Place of processing
European Union, United States of America
e) Data transfer mechanism
EU standard contract pursuant to Art. 46 para. 2 lit. c GDPR and your consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. Please note: The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Despite the EU standard contract we have agreed with the provider, there is currently still a residual risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without the possibility of legal recourse.
f) Duration of storage and cancellation
540 days. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected.
You can revoke your consent at any time with effect for the future. To exercise your cancellation, deactivate this service in the „Cookie settings“ provided on the website. - Social media links
Social networks are only integrated on our website in the form of a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use. - Competitions
a) Scope and purpose of the processing of personal data
We process the data you provide (e.g. first and last name, age, address, email address) when you take part in our competitions.
b) Purpose of processing
Your personal data will be used by us to contact competition participants before and after a competition event in order to establish the identity of the participants, determine the age of the participants, contact winners, send prizes and check their delivery.
c) Legal basis for the processing of personal data
The processing of your personal data in order to provide you with competitions is based on legitimate interest in accordance with Art. 6 para. 1 lit f) GDPR.
d) Duration of storage and objection
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. Alternatively, you can object at any time by notifying us in writing (see Section I.1.) or at datenschutz@bullyworld.de. - etracker
a) Scope and purpose of the processing of personal data
The provider of this website uses the services of etracker GmbH from Hamburg, Germany https://www.etracker.com to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you give your consent, cookies are used to enable a statistical analysis of the reach of this website, to measure the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offering or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that enables a user to be identified.
b) Purpose of processing
Our concern within the meaning of the GDPR (legitimate interest) is the optimisation of our online offering and our website. As the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymised or pseudonymised as soon as possible. It is not used in any other way, merged with other data or passed on to third parties. The data generated with etracker is processed and stored by etracker exclusively in Germany on behalf of the provider of this website and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded the data protection seal of approval in this regard.
c) Legal basis for the processing of personal data
Data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR).
d) Duration of storage and objection
You can object to the data processing described above at any time by clicking on the slider. The objection has no detrimental consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.
VII Data processing for order processing
- Transmission of data to transport service providers
We work together with logistics service providers/transport companies for the purpose of delivering ordered goods. The following data may be passed on to them for the purpose of delivering the ordered goods or - if necessary - for their announcement: First name, surname, postal address.
The legal basis for processing the data is Article 6(1)(b) GDPR.
VIII. Further data transfer
We will only pass on or transfer your personal data to third parties if this is necessary to fulfil the contract with you, if we have a legitimate interest, if you have given your consent and/or if we are obliged to do so by law or by official or court orders. Insofar as we pass on your personal data specifically in the context of the data processing described above, we have described this accordingly at the relevant point in this privacy policy. We also share your personal data in general as follows:
- Processor
All personal data that we process in the context of this website is processed by us or our service providers. We may transfer your personal data to external service providers, such as IT and website optimisation service providers, advertising agencies or analysis providers, in order to be able to offer you our services (e.g. Hetzner Online GmbH). We have carefully selected these service providers and concluded order processing contracts with them. - Third parties (so-called transferees)
a) Contractual partner
We pass on your personal data to other data controllers who process the personal data for their own purposes, insofar as this is necessary for the fulfilment of the contract or the provision of services. Our contractual partners may only use the data transmitted in this way for the purpose for which we have transmitted it.
The transfer of your personal data for these purposes is carried out for the fulfilment of the contract, Art. 6 para. 1 lit. b GDPR or on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in making our operations efficient.
b) Legal obligation or enforcement of legal claims
Otherwise, we only transfer your personal data to third parties if and insofar as this is required or permitted by law or in order to enforce legal claims or to investigate or prevent suspected or actual unlawful activities. In these cases, we will inform you separately about the respective transfer if and insofar as this is legally required. - Transmission to third countries
If we transfer your personal data to countries outside the European Economic Area (EEA) or commission processors in such countries (e.g. in the USA), we implement the legally required standards and security mechanisms. We achieve this, for example, by agreeing the so-called EU standard contracts. Please contact us as described in Section I. 1 to find out more about the specific security mechanisms we use.
IX. Data erasure
We store your personal data for as long as specifically stated in the respective processing and in any case until the purpose for which it was collected has been fulfilled. Beyond this, we only store your personal data for the assertion of or defence against legal claims or as long as there are legal obligations to store it.
X. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller, provided that the relevant requirements are met. You can find further information on your rights and the relevant requirements on the EU Commission's website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de.
- Right to information
As a data subject, you have the right under Art. 15 GDPR to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration. - Right to rectification and completion
As a data subject, you have the right under Art. 16 GDPR to request the rectification of inaccurate personal data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data. - Right to erasure („right to be forgotten“)
As a data subject, you may have the right to erasure of your personal data in accordance with Art. 17 GDPR. This is the case, for example, if your personal data is no longer necessary for the original purposes, if you have revoked your declaration of consent under data protection law or if the personal data has been processed unlawfully. - Right to restriction of processing
As a data subject, you have the right to restrict processing in the cases prescribed by law in accordance with Art. 18 GDPR. - Right to data portability
As a data subject, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR in the cases prescribed by law. - Right of objection
As a data subject, you have the right to object to the processing of certain personal data concerning you at any time for reasons arising from your particular situation. - Right to withdraw your consent under data protection law
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing carried out up to the point of revocation. - Right to lodge a complaint with a data protection authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The Bavarian State Supervisory Authority for Data Protection (https://www.lda.bayern.de/de/kontakt.html) is responsible for us. You can reach them under the following contact details:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle@lda.bayern.de
XI. Handling of applications and applicant data
- Description and scope of data processing
We process the data you provide in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process. This includes general personal data (such as your name, address and contact details), information about your professional qualifications and schooling, information about further professional training, knowledge and skills, as well as other information that you disclose to us in connection with your application. As a rule, this is done by means of a letter of application, CV, certificates, correspondence, telephone or verbal information from you.
We would like to assess all applicants only according to their qualifications and therefore ask you to refrain from providing „special categories of personal data“ in accordance with Art. 9 of the General Data Protection Regulation in your application (e.g. a photo that reveals your ethnic origin, information about severe disabilities, etc.). If your application contains such information, please send us a corresponding declaration of consent, as otherwise your application cannot be considered.
If your application is successful, we will transfer your data to your personnel file and use it to implement and terminate your employment relationship.
If we are currently unable to offer you employment, we will continue to process your data after the rejection has been sent in order to defend ourselves against any legal claims, in particular due to alleged discrimination in the application process.
If you are not selected for the vacant position, we will transfer your data to our applicant pool, provided we have your consent to do so. - Legal basis and purpose of data processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG-new and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships. Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defence of legal claims asserted against us. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see section 9 of this data protection information). If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG-new, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation arising from a law or a collective agreement, a works or service agreement (collective agreement). - Data erasure and storage
We store your personal data for as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute. In the event that you have consented to your personal data being stored for a longer period, we will store it in accordance with your declaration of consent. If the application procedure is followed by an employment relationship, training relationship or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file. Following the application process, you may receive an invitation to join our talent pool. This allows us to consider you for suitable vacancies in our applicant selection process in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consents. - Possibility of objection
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to protect legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims. You are welcome to contact us to protect your rights. Please send your objection to the following email address: datenschutz@bullyworld.de
XII. Changes to our privacy policy
We reserve the right to update this data protection notice if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services. The current version applies to your visit.
Status: 01.07.2025
Contact us
Contact form
Our opening hours:
Monday - Friday:
09:00 - 16:00
+49 (0) 8669 358 222 81
Service
