Extra languages available :

Privacy Policy Lucky Draw

Thank you for visiting our website and for participating in the sweepstake. Compliance with data privacy regulations has special significance for us. The purpose of this Privacy Policy is to inform you, as the user of the website, of the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you are a data subject within the meaning of Article 4 No. 1 of the General Data Protection Regulation (GDPR).

1. Data Controller

This website, lucky.arctic.ac, and the services offered on this website (in particular sweepstakes) are operated by:

ARCTIC (HK) Ltd.
Unit 1302-05, The Octagon
6 Sha Tsui Road
Tsuen Wan N.T.
Hong Kong

2.Representative in the European Union

If you are a data subject residing within the European Union and have concerns regarding data privacy, you can also contact Arctic GmbH, which represents us there in such matters in accordance with Article 27 of the GDPR:

ARCTIC GmbH
Bevenroder Straße 149 
38108 Braunschweig
Germany

3. General Information

We have designed the development of the website to collect as little data as possible from you. In principle, you can visit our website without providing personal data. The processing of personal data is required only when you decide to take advantage of certain services (e.g., ordering goods in the online shop or using the contact form). In doing so, we always ensure to process your personal data only in accordance with a legal basis or your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018, and the respective applicable national regulations, such as the German Federal Data Protection Act, the German Telemedia Act, or other more specific data protection laws.

4. Purpose and Legal Basis of the Processing of Personal Data

We process your personal data specifically for the purpose of technically implementing our website and to be able to provide our information to you on this website (e.g., IP address, cookies, browser information).

The following applies with regard to the legal basis for the processing of your personal data:

Personal data that is required for the establishment, implementation or processing of our services (contract execution) on the legal basis of Art. 6 para. 1 (b) of the GDPR. Insofar as we obtain your consent for the processing of your personal data, the consent shall form the legal basis for data processing pursuant to Art. 6 para. 1 (a) of the GDPR. Data processing is also permissible if we process your data to safeguard our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not prevail. Insofar as we use external service providers in the context of the commissioned data processing, the processing shall take place on the legal basis of Art. 28 of the GDPR.

5. Collected and Processed Personal Data

When you visit our website, we collect and process some of your personal data. On the one hand, you can see which data is actually processed by the data you have to provide when filling out forms on the website (e.g. Sweepstakes form), and on the other hand, we inform you about the data processed for the processing procedures described herein.

In short, we collect and process the following data about you through our website:

Sweepstakes:

• First name
• Last name
• Address
• Postal code
• City
• Country
• Email address

We need the data collected when you participate in a sweepstake to, e.g., determine whether you are eligible to participate. Depending on the sweepstake, additional data may also be requested (for example, answers to sweepstake questions). If you do not provide us with the respective required data, participation in the sweepstake is not possible. 

We will only collect and process your data for the purposes stated in this Privacy Policy. Any use beyond the stated purpose requires your express consent. The same applies to the transfer and transmission of your data to third parties.

Counterfeits

If you have scanned the QR code on your product and the message appears that the product you have purchased is a counterfeit, you can voluntarily provide us with further information, in particular:

• Purchase Receipt
• Seller / marketplace from which you received the counterfeit product.

The processing of the above-mentioned optional information takes place on the basis of a weighing of interests (Art. 6 (1) (f) of the GDPR). We use this information on the one hand to contact the shop and, if necessary, to take action against the sale of counterfeit products. If you have given us your e-mail address to participate in the competition, we will also use it to be able to contact you if you have any questions about counterfeit products. This can be the case, for example, if the information about the shop is insufficient for us to be able to clearly identify the shop. You can object to being contacted via the e-mail address for these purposes at any time. You will then not receive any further emails from us. Since we use your e-mail address strictly for the purpose of combating product piracy and only process it if you have given us your e-mail address voluntarily, the processing is carried out to safeguard our legitimate interests in accordance with Art. 6 (1) (f) GDPR. We do not pass this data on to third parties and only store it for as long as we need it to contact you about the counterfeit product.

6. Collection of Personal Data When You Visit Our Website

In the event that the website is used for merely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically required by us to display our website to you and to ensure stability and security (the legal basis is Article 6 (1) sentence 1 of the GDPR):

• IP address
• date and time of request
• time zone difference from Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• amount of data transferred in each case
• website making the request
• browser
• operating system and its interface
• language and version of browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Further information can be found under "Cookies" in this Privacy Policy.

7. Cookies

On our website, information is collected and stored by using the so-called browser cookies. Cookies are small text files that are stored on your data carrier and that store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain, from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier.

Cookies allow our systems to recognize the user's device and to make any presets available immediately. As soon as a user accesses the platform, a cookie is transmitted to the hard disk of the user's computer. Cookies help us improve our website and offer you a better and more personalized service. They allow us to recognize your computer or your (mobile) end device when you return to our website and thereby:

• Save information about your preferred activities on the website and thus tailor our website to your individual interests.
• Speed up the processing of your requests.

We work with third-party services that help us make the website more interesting for you. Therefore, cookies from these partner companies (third-party providers) will also be stored on your hard drive when you visit the website. These are cookies that are automatically deleted after a predefined period of time.

A list of cookies we set can be found in the following table:

If you do not wish to use browser cookies, you can set your browser so that the storage of cookies is not accepted. Please note that in this case you may only be able to use our website to a limited extent or may not be able to use it at all. If you only wish to accept our own cookies but not those of our service providers and partners, you may choose to "Block third-party cookies" in your browser's settings. We assume no responsibility for the use of third-party cookies.

The integration of cookies is based on the legal basis of Art. 6 para. 1 (f) of the GDPR, insofar as it concerns the so-called functional cookies that are mandatory for the operation of the website, and on the other hand, on the legal basis of Art. 6 para. 1 (a) of the GDPR, or your consent, for cookies that are used to evaluate user behavior and manage statistics. The legitimate interest within the meaning of Art. 6 para. 1 (f) of the GDPR results from the purposes mentioned in Section 3 b) above.

8. Integration of Third-Party Services

Our website uses content, offerings and services of other providers. These include e.g., services for integrating videos from video-sharing platforms, e.g., YouTube. In order for this data to be accessed and displayed in the user's browser, the transmission of the IP address of the user to this third-party provider is mandatory.

Although we make every effort to only use third-party providers that only need the IP address to deliver content or even work with anonymized IP addresses, we do not have control over whether the IP address may be stored. Information on the third-party providers used can be found below in this Privacy Policy.

9. Contacting Us

You can contact us by email. When doing so, we store the personal data you provide in order to process your request and to contact you in order to respond to your request or concern.

Depending on the nature of the request, the legal basis for such processing is Article 6 (1) (b) of the GDPR for requests that you submit yourself as part of a pre-contractual measure, or Article 6 (1) sentence 1 (f) of the GDPR if your request is of a different nature. The legitimate interest results from the purposes stated under Section 3 a). Should personal data be requested which we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transmission of data to us is based on consent given by you pursuant to Article 6 (1) (a) of the GDPR.

10. Social Media Buttons

We display social media buttons (Facebook, Instagram, Twitter, LinkedIn, etc.) on our website in the form of a static link to our social media pages on the corresponding platforms. These do not represent a direct integration of the respective providers.

11. Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. It is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After you click on an ad placed by Google, a cookie will be set for conversion tracking. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used for personal identification of the users. The cookie lets Google and us recognize that you clicked on an ad and were redirected to our website. Conversion cookies are stored on the basis of Art. 6 para. 1 (f) of the GDPR. As the website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords customer websites. Conversion cookies are used to generate conversion statistics for AdWords customers who use conversion tracking. AdWords customers can see how many users clicked on their ad and were redirected to the pages with a conversion tracking tag. However, AdWords customers do not receive any information that enables personal identification of the users. If you do not wish to participate in tracking, you can opt out from it. To do this, you need to disable conversion cookies in the browser's user settings. In addition, you will not be included in the conversion tracking statistics.

More information on Google AdWords and Google conversion tracking can be found in Google's Privacy Policy: https://policies.google.com/privacy.

With a modern web browser, you can monitor, restrict, or stop the setting of cookies at https://www.google.com/settings/ads/onweb/. Disabling cookies may limit the functionality of our website.

12. Google Adwords / Remarketing

Our website uses the Google AdWords service. Google AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). We use the Remarketing function included in the Google AdWords service. The Remarketing feature allows us to show you advertisements on other websites within the Google advertising network, based on your interests. In order to do this, your browsing behaviour on our website is analysed, e.g. which offers you have viewed. After you have visited our website, this also enables us to show you so-called "Google ads" on the Google online search engine itself, and to display individualised advertising on other websites. To do this, Google stores a cookie in your browser when you use Google services or visit websites that are part of the Google advertising network. This cookie is used to record your visits. The cookie serves to uniquely identify your web browser and not to identify you personally. The legal basis for this data processing activity is Article 6, paragraph 1, letter f of the GDPR.

You can deactivate the use of cookies by Google and thus revoke the consent you have given us to use the Google AdWords / Google Remarketing service by clicking the link below and downloading and installing the plug-in provided by Google: www.google.com/settings/ads/plugin

More detailed information about Google Remarketing and Google's privacy policy can be found at www.google.com/privacy/ads/

13. Rights of the Data Subject

You have the right:

• to request information about your personal data processed by us pursuant to Art. 15 of the GDPR. In particular, you can request information about the purposes of data processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the right to correction, deletion, restriction of processing, or objection, the existence of the right of appeal, the source of your data if not collected by us, as well as the existence of automated decision-making including profiling and any other meaningful detailed information about the data;
• to request the rectification of incorrect or completion of personal data stored by us immediately pursuant to Art. 16 of the GDPR;
• to request the erasure of your personal data stored by us unless the processing is required for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims pursuant to Art. 17 of the GDPR;
• to request the restriction of the processing of your personal data pursuant to Art. 18 of the GDPR if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it erased and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have filed an objection to the processing in accordance with Art. 21 of the GDPR;
• to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transmission to another controller pursuant to Art. 20 of the GDPR (data portability);
• to revoke your consent provided to us at any time pursuant to Art. 7 para. 3 of the GDPR. As a result, we will no longer be able to continue the processing of data based on this consent with effect for the future; and
• to appeal to a supervisory authority pursuant to Art. 77 of the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work, or our company headquarters.
• Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation

If you wish to exercise your right to revoke your consent or object, please send please send a letter.

14. Transfer of Your Personal Data

Your personal data is transferred as described below.

We only transfer your personal data to third parties to the extent necessary for the performance of the sweepstake or for the transmission of the prize (e.g., to banks).

In addition, data is also transferred if we are entitled or obliged to transfer data due to statutory provisions and/or official or judicial orders. In particular, this may include the provision of information for law enforcement and security purposes, or for the enforcement of intellectual property rights.

Insofar as your data is transferred to service providers to the required extent, they will only have access to your personal data to the extent necessary to fulfill their obligations. These service providers are obliged to process your personal data in accordance with the applicable data protection laws, in particular the GDPR. As far as data processing on behalf of the controller is concerned, we have concluded data processing agreements with the data processor in accordance with Art. 28 of the GDPR.

We will not transmit your data to third parties without your consent beyond the aforementioned circumstances. In particular, we do not transfer personally identifiable information to any place in a third country or an international organization.

15. Data processing outside the European Union

The website hosting and related data processing is done outside of the European Union on a server operated by us in Hong Kong. The associated data processing is required for the operation of the website, as well as for the establishment, implementation and execution of the existing usage contract, and is also possible without your consent.

No data processing takes place in other countries outside the European Union.

16. Data Security

Unfortunately, the transmission of information over the Internet is never 100% secure, which is why we cannot guarantee the security of data transmitted to our website over the Internet.

However, we use technical and organizational measures to secure our website against loss, destruction, access, modification, or dissemination of your data by unauthorized persons.

In particular, your personal data is transmitted in encrypted form. In doing so, we use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. Our security measures are continuously improved in line with the technological developments.

17. Retention period for personal data

With regard to the storage duration, we delete personal data as soon as its storage is no longer necessary for the fulfillment of the original purpose and there are no longer any statutory retention periods. The statutory retention periods ultimately form the criterion for the final duration of the storage of personal data. The corresponding data is routinely deleted after the period has expired. If there are any retention periods, the processing is restricted by blocking the data.

In particular in connection with the implementation of sweepstakes, the following applies for the storage duration:

We will delete your personal information when the sweepstake has ended and a winner has been determined, however, no later than sixty (60) days after the sweepstake has ended. This does not apply if you yourself are the winner. In this case, legal retention periods comprise the criterion for the final duration of the storage of your data.

18. References and Links

When you access Internet pages referred to on our website, you may be asked again for information such as your name, address, email address, browser properties, etc. This Privacy Policy does not govern the collection, transfer, or handling of personal data by third parties.

Third-party service providers may have different and specific provisions with regard to the collection, processing, and use of personal data. We therefore recommend that you learn about the practice for the handling of personal data before entering your personal data on the websites of third parties.

19. Changes to the Privacy Policy

We are constantly developing our website to provide you with an increasingly better service. We will always keep this Privacy Policy up to date and adapt it accordingly if and insofar as this should become necessary.

Of course, we will inform you of any changes to this Privacy Policy in a timely manner. For example, we will do this by sending an email to the email address provided by you. Should further consent be required from you to our handling of your data, we will of course obtain it from you before any appropriate changes take effect.

You can always download the latest version of our Privacy Policy at https://lucky-mx.arctic.ac/privacy-policy

As of: October 2021