- General Information
If you are an affiliate of Be Rich Company GmbH, various personal data will be processed. Personal data refers to information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly (e.g., by assignment to an online identifier). This includes information such as name, address, telephone number, and date of birth.
II. Name and contact details of the data protection officer
The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, contact details, date of birth, etc.). The data controller within the meaning of the GDPR and the applicable national data protection laws, as well as other data protection regulations, is:
Be Rich Company GmbH
Tel.: 0176 – 436 333 07
III. Purposes and Legal Basis for Data Processing
- Inquiry via Email or Phone
If you contact us via email or phone, your inquiry, including any resulting personal data (name, inquiry), will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.
The processing of this data is based on Article 6 section 1 page 1 b) of the GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the inquiries addressed to us (Article 6 section 1 page 1 f) of the GDPR) or on your consent (Article 6 section 1 page 1 a) of the GDPR) if requested.
The data sent to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage ceases to exist (e.g., after completing the processing of your request). Mandatory legal provisions, particularly statutory retention periods, remain unaffected.
- Access and Visit to Our Webiste – Server Log Files
For the purpose of providing the website’s technical functionality, it is necessary for us to process certain information automatically transmitted by your browser, so that our website can be displayed in your browser and you can use the website. This information is automatically collected and stored in server log files each time you access our website. They include:
- Browser type and version
- Operating system used
- Website from which access is made (referrer URL)
- Hostname of the accessing computer
- Date and time of access
- IP address of the requesting computer
The storage of the aforementioned access data is necessary for the provision of a functional website and to ensure system security for technical reasons. This also applies to the storage of your IP address, which is necessarily performed and, under certain conditions, can theoretically allow for identification of your person. In addition to the aforementioned purposes, we use server log files exclusively for the demand-oriented design and optimization of our website, purely statistically and without any inference to your person. There is no merging of this data with other data sources, and no evaluation of the data for marketing purposes takes place.
The access data collected during the use of our website will only be retained for the period required to achieve the aforementioned purposes. Your IP address will be stored on our web server for a maximum of 7 days for IT security purposes.
If you visit our website to obtain information about our product and service offerings or to use them, the legal basis for the temporary storage and processing of access data is Article 6(1)(b) of the GDPR, which allows for the processing of data for the performance of a contract or for the implementation of pre-contractual measures. Furthermore, Article 6(1)(f) of the GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest in this case is to provide you with a technically functioning and user-friendly website, as well as to ensure the security of our systems.
If you have expressly consented according to Article 6 section 1 page 1 a) of the GDPR, we will use your email address to send you our newsletter on an occasional and/or regular basis. If the contents of the newsletter are specifically described during the registration for receiving the newsletter, these details are decisive for the user’s consent. In addition, our newsletters contain information about our services, offers, and promotions. Providing a valid email address is sufficient for receiving the newsletter. If further information is requested, providing such information is always voluntary.
For newsletter registration, we use the double opt-in procedure, which means that we will only send you a newsletter by email after you have explicitly confirmed that we should activate the newsletter service. To do this, we will send you a notification email and ask you to confirm that you wish to receive our newsletter by personally responding from your registered email address or by clicking on a link contained in that email.
By subscribing to the newsletter, we store your IP address and the date of registration. This storage serves as evidence of your registration for our newsletter. Likewise, changes to the data stored with the shipping service provider are logged.
The data processing is based on your consent (Article 6 section 1 page 1 a) of the GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing that has already taken place remains unaffected by the revocation. You can unsubscribe via a link in the newsletter itself or by notifying us through the contact options provided above.
4. Processing of Customer Data
In the course of fulfilling the contract concluded with you, we process the following personal data:
Title, first name, last name, email address, address, telephone number (landline and/or mobile), ID card, bank details, information about professional activity, net salary, income from rent/lease/self-employment/pension/child benefits, rent/housing costs, cost of living, insurance premiums, information about assets and liabilities, information about existing dunning procedures, ZVS procedures, and Schufa score.
This data processing is necessary for the performance of the contract between you and us. The legal basis for this data processing is Article 6 section 1 page 1 b) of the GDPR.
5. Activity as an Affiliate
For the conclusion and performance of a contract as an affiliate, we process the following personal data:
- Company name (if applicable)
- First name
- Last name
- Full address
- Date of birth
- Landline telephone numer(s)
- Mobile phone number(s)
- Fax number
- Email address(es)
Necessary data for potential commission payments:
- Information regarding VAT eligibility (“VAT-eligible” or “small business”)
- VAT identification number
- Account holder
- Name oft he bank
- Credit card information
- Any other mandatory information related to commission payments
Additional data related tot he activity as an affiliate:
- Affiliate number assigned by Be Rich Company GmbH
- Date of joining as an affiliate at Be Rich Company GmbH
- Achieved and subsequent rank according to the achievable career levels in Be Rich GmbH marketing plan
- Any other mandatory information related to the activity as an affiliate
- Sponsor assignment
- Referral assignment
- Position within the Be Rich GmbH structure
- Information about issued orders/purchases
- Revenue and sales statistics
If the affiliate achieves a leadership position or intends to work as a sponsor or manager, their name and contact details will be published and shared within the team internally.
The affiliate’s data will also be shared with the respective organizational leader (manager) so that they can access the data of the entire structure (downline).
This data processing is necessary for the establishment and performance of the contract as an affiliate, particularly for commission payments processing and the implementation of the sales structure. The legal basis for processing this data is Article 6 section 1 page 1 b) of the GDPR.
For publicity purposes, Be Rich GmbH will process photos and video recordings of the affiliate, including their name, on their website, official social media accounts, as well as selected online or print advertising materials.
The legal basis for this data processing is Article 6 section 1 page 1 f) of the GDPR.
We use so-called cookies on our website. Cookies do not harm your computer and do not contain any viruses. They serve to make our offer more user-friendly, effective, and secure, and to enable the provision of certain functions. Cookies are small text files that are stored on your computer by your browser. A cookie contains a unique string of characters that allows your browser to be identified when you revisit the website.
Most of the cookies we use are called “session cookies”. They are automatically deleted after your visit or when you close your browser (so-called transient cookies). Other cookies remain stored on your device for a specified period or until you delete them (so-called persistent cookies). These cookies allow us to recognize your browser on your next visit. Upon written request, we are happy to provide further information about the functional cookies used. Please contact the above-mentioned contact details.
You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when closing the browser. You can regularly obtain instructions on how to deactivate cookies via the “Help” function of your internet browser. If cookies are deactivated, the functionality and/or complete availability of this website may be restricted. For further cookie-specific settings and deactivation options, please refer to the specific explanations below regarding the cookies and related functions/technologies used during your visit to our website.
Some of the cookies we use on our website are provided by third parties who help us analyze the effectiveness of our website content and the interests of our visitors, measure the performance of our website, or display customized advertisements and other content on our or other websites. Within our website, we use both first-party cookies (visible only from the domain being visited) and third-party cookies (visible across domains and regularly set by third parties).
The cookie-based data processing is based on your provided consent according to Article 6(1)(a) of the GDPR (legal basis) or based on Article 6(1)(f) of the GDPR (legal basis) to safeguard our legitimate interests. Our legitimate interests particularly include being able to provide you with a technically optimized, user-friendly, and customized website, as well as ensuring the security of our systems. You can revoke the consents you have given us at any time, for example, by deactivating the cookie-based tools/plugins listed in detail in the following overview. By adjusting the settings accordingly, you can also object to processing based on legitimate interests.
Specifically, the following cookie-based tools/plugins are used on this website:
- Google Analytics
The information generated by the Google Analytics cookies regarding your use of this website (e.g., time, location, and frequency of your website visits, including IP address) is transmitted to a Google server in the United States and stored there. We have set the storage duration for this data at the user and event level to 14 months at the shortest possible option within Google’s storage settings.
We have activated the IP anonymization feature on this website. As a result, your IP address is shortened and anonymized by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google’s own statements, the IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google to personally identify you.
You can prevent the storage of Google Analytics cookies by adjusting the settings of your browser software (as mentioned above). Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to Data Collection
Alternatively, you can enable/disable the collection of your data by Google Analytics, particularly on mobile devices, by clicking on the following link: Google Analytics Opt-out
By doing so, a cookie will be set to prevent the collection of your data during future visits to this website.
Specifically, the following tracking cookies are used by Google Analytics: __utmz, __utma, __utmb, __utmc, __utmt.
- Google Ads and Google Ads Conversion Tracking
This website uses Google Ads, an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google Ads, we use a feature called Conversion Tracking. When you click on an advertisement provided by Google, a cookie is set for conversion tracking. Cookies are small text files that are stored by the internet browser on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.
Each Google Ads customer receives a different cookie. The cookies cannot be tracked across websites of Google Ads customers. The information obtained through the use of conversion cookies is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that allows for the personal identification of users. If you do not wish to participate in tracking, you can opt out of this use by easily disabling the Google Conversion Tracking cookie in your internet browser settings. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” and the use of this tracking tool are based on Article 6 section 1 page 1 f) of the GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising. If you have given your consent (e.g., consent to the storage of cookies), the processing will be based exclusively on Article 6 section 1 page 1 a) of the GDPR, and consent can be revoked at any time.
You can configure your browser to notify you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for specific cases, or enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Our website uses plugins from the YouTube video platform to embed and play videos directly on our website. The video platform is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). YouTube is a subsidiary of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The embedding of YouTube videos is done in the “extended data protection mode,” which, according to the provider, only initiates the storage of user information upon playback of the video(s). However, the extended data protection mode does not necessarily exclude the transmission of data to YouTube partners. For example, regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.
If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.
The use of YouTube is in the interest of an appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
7. Additional Purposes of Data Processing
Compliance with Legal Obligations: We also process your personal data to fulfill any other legal obligations that may apply to us in connection with our business activities. This includes, in particular, commercial, trade, or tax retention periods. We process your personal data for this purpose in accordance with Article 6 section 1 page 1 c) of the GDPR (legal basis) to fulfill a legal obligation to which we are subject.
Enforcement of Legal Rights: We also process your personal data to assert our rights and enforce our legal claims. We may also process your personal data to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or investigate criminal offenses. We process your personal data for these purposes to protect our legitimate interests in accordance with Article 6 section 1 page 1 f) of the GDPR (legal basis) when asserting legal claims, defending ourselves in legal disputes, or preventing or investigating crimes (legitimate interest).
Consent: If you have given us consent to process your personal data for specific purposes (e.g., sending informational materials and offers), the lawfulness of such processing is based on your consent. Any consent given can be revoked at any time. Please note that the revocation will only take effect for the future and will not affect any processing that has occurred prior to the revocation.
IV. Recipients of Data
Within Be Rich Company GmbH, only those departments or individuals who need access to your data to fulfill our contractual and legal obligations will have access to it.
Personal data of our customers will be disclosed to the following recipients:
In the course of fulfilling the contract with you, we will disclose your personal data mentioned in section III, No. 4 to the independent affiliate responsible for you, as well as to our cooperation partner in the field of insurance consultancy and brokerage, WIFO GmbH, Gewerbering 15, 76287 Rheinstetten, Germany, for the purpose of facilitating the appropriate insurance for you. The legal basis for this data processing is Article 6 section 1 page 1 b) of the GDPR.
Furthermore, if necessary, your data may be shared with service providers and agents (e.g., technical service providers) employed by us.
In some cases, the recipients will process your personal data as data processors and will be strictly bound by our instructions regarding the handling of your personal data. In other cases, the recipients will act independently and have their own data protection responsibilities. They are also obliged to comply with the requirements of the GDPR and other data protection regulations.
Additionally, on a case-by-case basis, we may disclose personal data to our legal or tax advisors, who are bound by their professional duties to maintain confidentiality.
We may also share data with service providers and agents (e.g., technical service providers, IT service providers, payment service providers, hosting providers) as necessary for the purposes stated above. We limit the disclosure of your personal data to what is necessary, taking into account data protection requirements. The legal basis for this is Article 6 section 1 page 1 b) of the GDPR.
We are therefore, in the context of fulfilling our contractual obligations, permitted to engage in further contracts with subcontractors. The list of our partners potentially handling personal data is always available in this data privacy document.
Those recipients are for example:
- Blau direkt GmbH, Kaninchenborn 31, 23560 Lübeck
- Wifo GmbH, Gewerbering 15, 76287 Rheinstetten
- Wifix AG, Gewerbering 15, 76287 Rheinstetten
- Fonds Akademie GmbH, Friedrich-Ebert-Straße 15, 82256 Fürstenfeldbruck
- Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin
- Hostpress GmbH, Bahnhofstraße 34, 66571 Eppelborn
- NOWPayments Ltd., Suite 1, Second floor, Sound & Vision house, Francis Rachel Str, Victoria, Mahe, Seychelles
- Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Dublin D02 H210, Irland
- SBS Tax Steuerberatungsgesellschaft mbH, Hans-Henny-Jahnn-Weg 49, 22085 Hamburg
- MongoDB Inc., 1633 Broadway 38th floor, New York, NY 10019, Vereinigte Staaten
- Amazon AWS, 410 Terry Ave N, Seattle 98109, WA
- Applaunch GmbH, Bavariafilmpl. 7, 82031 Grünwald b. München
V. Data Transfer to Third Countries
VI. Automated Decision Making/Profiling
We do not use automated decision-making processes that have legal effects on you or significantly affect you.
VII. Duration of Data Storage
We process and store your personal data for the duration required by the respective purpose of use (see above for the specific processing purposes). This includes, if applicable, the periods for initiating a contractual relationship (pre-contractual legal relationship) and for fulfilling a contract. Based on this, personal data is regularly deleted in the context of fulfilling our contractual and/or legal obligations, unless its temporary retention is necessary for the following purposes:
- Compliance with legal retention obligations arising from relevant laws. The prescribed periods for retention or documentation can be up to ten years.
- Preservation of evidence, taking into account the statute of limitations..
VIII. Data Security
We implement appropriate technical and organizational measures to protect personal data and ensure an adequate level of data security, in order to safeguard the rights and privacy of individuals. These measures are designed to prevent unauthorized access to the technical systems we use and to protect personal data from unauthorized disclosure by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the website operator. You can recognize an encrypted connection by the change in the address line of your browser from “http://” to “https://” and the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. However, we would like to point out that data transmission over the internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible in such cases.
IX. Your Rights as Data Subject
Under the conditions set forth by law, you have the following rights as a data subject:
Right to Information: You have the right, in accordance with Article 15 of the GDPR, to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you are also entitled, under Article 15 of the GDPR, to obtain information about this personal data, as well as certain other information (such as processing purposes, categories of personal data, categories of recipients, planned storage duration, the source of the data, the use of automated decision-making, and, in the case of data transfers to third countries, the appropriate safeguards), and to receive a copy of your data.
Right to Rectification: You have the right, under Article 16 of the GDPR, to request that we correct any inaccurate or incomplete personal data concerning you.
Right to Erasure: Under the conditions specified in Article 17 of the GDPR, you have the right to request the immediate deletion of personal data concerning you. The right to erasure does not apply, for example, if the processing of personal data is necessary to fulfill a legal obligation (such as legal retention obligations) or to assert, exercise, or defend legal claims.
Right to Restriction of Processing: Under the conditions specified in Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data.
Right to Data Portability: Under the conditions specified in Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: You have the right to withdraw your consent to the processing of personal data at any time. This also applies to the withdrawal of consent that was given to us before the GDPR came into effect, i.e., before May 25, 2018. Please note that the withdrawal will only take effect for the future. Processing activities that occurred before the withdrawal are not affected. To declare your withdrawal, a simple notification, for example via email, to us is sufficient.
Right to Object: Under the conditions specified in Article 21 of the GDPR, you have the right to object to the processing of your personal data, which may require us to cease processing your personal data. The right to object is subject to the limits set forth in Article 21 of the GDPR. Additionally, our interests may justify the continuation of the processing, which means that we may be entitled to process your personal data despite your objection.
Information about Your Right to Object according to Article 21 of the GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6 section 1 page 1 f) GDPR (processing for the purposes of legitimate interests) or Article 6 section 1 page 1 e) GDPR (processing for the performance of a task carried out in the public interest).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
The objection can be made in any form and should be addressed to:
Be Rich Company GmbH
Tel.: 0176 – 436 333 07
Right to Lodge a Complaint with a Supervisory Authority: Under the conditions specified in Article 77 of the GDPR, you have the right to lodge a complaint with a competent supervisory authority. A list of German data protection supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
You can reach the Austrian data protection supervisory authority here: https://www.dsb.gv.at/.
You can contact the Data Protection and Publicity Commissioner of the Swiss Confederation here: https://www.edoeb.admin.ch/edoeb/de/home.html.
Other concerns: For further privacy-related questions and concerns, we are available to assist you. Corresponding inquiries and the exercise of your rights as mentioned above should preferably be sent in writing to the address provided above or via email to email@example.com.
X. Obligation to Provide Data
In principle, you are not obliged to provide us with your personal data. However, if you choose not to do so, we may not be able to provide our website to you in full or respond to your inquiries. Personal data that is not strictly necessary for the aforementioned processing purposes is indicated as voluntary information.