Data Protection Policy

Controller & Contact Information

Boxine GmbH
Grafenberger Allee 120
40237 Düsseldorf, Germany

Data Protection Officer: Philipp Herold
Hafenstrasse 1 A, 23568 Lübeck, Germany

For US‑related inquiries:
Boxine US, Inc.
Attn: Privacy
3000 El Camino Real, Building 4, Suite 200
Palo Alto, CA 90502‑1031
Email: [email protected]

Purpose & Legal Basis of Data Processing

We collect minimal‑by‑design data. Personal data is only collected when required for orders, Tonie‑account creation, Audio‑Library usage, customer support, newsletter subscriptions or blog‑comment features. Consent will be obtained where no other legal ground applies; you may withdraw consent with future‑only effect.

• Art.6(1)(a) GDPR — Consent: contact‑form submissions, newsletter / SMS subscriptions, app‑permissions, certain analytics.
• Art.6(1)(b) GDPR — Contract performance: online‑shop orders, Tonie‑account, Toniebox pairing, Audio‑Library, fulfilment of contractual obligations.
• Art.6(1)(c) GDPR — Legal obligation: tax‑retention, statutory legal duties.
• Art.6(1)(f) GDPR — Legitimate interest: direct marketing (opt‑out available), fraud‑prevention, credit‑checks, service‑optimisation, system‑security.

Personal data will only be shared with service‑partners on a “need‑to‑know” basis (logistics, payment processors, customer‑support vendors). Data may be transferred in case of merger, acquisition, bankruptcy or valid law‑enforcement requests. We will update this policy when laws or business‑processes change.

Your Privacy Rights

Subject to local‑law restrictions you are entitled to:

• Right of access to your stored personal data
• Right to rectify inaccurate personal‑data
• Right to erasure / deletion
• Right to restriction of processing
• Right to object to processing
• Right to data portability

You may exercise rights via contact‑forms, account‑profile‑settings or official contact‑channels. You also hold the right to lodge a complaint with a data‑protection supervisory‑authority. California residents have additional rights described further within this policy.

Detailed Data‑Usage

Server Log‑Files

Browser‑automated log‑data: browser‑version, OS, referrer‑URL, host‑name, timestamp, IP‑address, request‑metadata. Log‑files are used for site‑delivery, security‑defence, cyber‑attack‑forensics and statistics. Log‑data is stored anonymously and not merged against user‑profiles unless concrete abuse‑indicators emerge.

Toniebox / my‑tonies / Tonie‑Account Data

Each Toniebox carries a unique client‑certificate plus hardware Toniebox‑ID (printed on‑device). Creating a Tonie‑Account requires email + password; you link your Toniebox‑ID to activate full‑features including Creative‑Tonies and Audio‑Library.

On‑device events (power‑on, Tonie insert‑remove, volume‑adjustment, headphone‑/charger‑connect, Wi‑Fi‑SSID, timestamps, IP‑address) are transmitted to my‑tonies. Normally this operational‑data is stored anonymously. Only if you open a support‑ticket and supply your Toniebox‑ID will this operational‑data become linked with your personal‑data for troubleshooting purposes; linked records get deleted once your case is closed. Fraud‑related evidence may be retained longer per‑law requirements.

Creative‑Tonie uploads: Original‑uploaded audio‑files get automatically erased after seven days; converted playable‑audio‑files remain stored. We reserve the right to sample uploaded‑content to check copyright‑ / decency‑compliance; violations may result in data‑deletion and account‑termination. When you close your Tonie‑Account: Audio‑Library‑content, Creative‑Tonie‑files, order‑history and personal‑user‑information will be deleted and cannot be transferred to another‑user.

Tonies‑App and Packaging QR‑Code

The iOS / Android tonies‑app requires Tonie‑account‑login. It requests device‑permissions (microphone, media‑files, network‑access, push‑token etc.) to record‑and‑upload Creative‑Tonie‑audio‑content. You must hold consent for voices you record (especially minors). App push‑notifications can be disabled inside your mobile‑OS‑settings.

Manufacturing QR‑codes on Toniebox‑packages are for internal‑ERP‑use only and are not linked to user‑accounts, unless fraud‑investigation conditions apply.

Customer & Product Reviews

Review‑functionality is powered by Bazaarvoice (US‑based processor under GDPR‑contract). Submitting‑reviews constitutes consent for processing including anti‑fraud‑checks, IP‑logging and device‑fingerprinting. Reviews are persisted until your deletion‑request; non‑fraud‑IP‑trails expire after two‑years. Use contact‑form to request review‑removal.

Newsletter & Promotional Communications

Marketing delivery uses Braze Inc. as data‑processor. Two‑legal‑bases apply:

• Consent‑based: email‑newsletter, SMS‑marketing, personalised‑age‑targeted‑offers (child‑birthday‑related‑recommendations). You supply email (mandatory); name, child‑birth‑dates are optional. You may unsubscribe‑any‑time via footer‑link or contact‑form. Unsubscribed‑records are anonymised afterwards.
• Legitimate‑interest‑direct‑marketing: existing‑customers may receive product‑related‑offers for similar‑goods without explicit‑opt‑in; you retain permanent‑opt‑out‑right.

Newsletter‑pixel‑tracking measures open‑rates /‑click‑rates for content‑optimisation; you may‑disable‑images‑inside‑your‑email‑client‑to‑block‑this‑behaviour. Push‑notifications from‑app‑may‑be‑turned‑off‑in‑device‑settings.

Personalised‑Product‑Recommendations

Logged‑in‑users‑receive‑product‑suggestions‑derived‑from‑order‑history,‑assigned‑devices‑and‑tonie‑figures‑(legitimate‑interest‑basis).‑Extended‑behaviour‑based‑personalisation‑(play‑time,‑skip‑events,‑volume‑changes,‑battery‑status‑etc.)‑requires‑your‑explicit‑opt‑in‑inside‑account‑settings‑and‑can‑be‑revoked‑at‑any‑time.‑Toniebox‑Offline‑Mode‑stops‑sending‑usage‑interaction‑data‑to‑servers.

Online‑Shop / Amazon‑FBA‑Fulfillment

Checkout‑collects‑title,‑forename,‑surname,‑shipping‑/‑billing‑address,‑email,‑phone‑and‑payment‑details‑for‑order‑fulfilment.‑FBA‑orders‑share‑necessary‑shipping‑/‑buyer‑data‑with‑Amazon‑EU‑S.à‑r.l.‑for‑logistics‑only;‑Amazon‑own‑data‑handling‑is‑covered‑by‑their‑own‑privacy‑notice.

Audio‑Library,‑Blog‑Comments,‑Customer‑Support‑Channels

Audio‑Library‑uses‑require‑Tonie‑account‑login‑only‑for‑content‑assignment‑operations.‑Blog‑comments‑store‑your‑pseudonym,‑comment‑text,‑timestamp,‑email‑and‑IP‑address‑for‑abuse‑defence‑purposes.‑Support‑channels‑include‑telephone‑recordings,‑contact‑form‑submissions‑and‑Guuru‑live‑chat‑(EU‑/‑UK‑/‑CH‑only‑operated‑by‑Guuru‑AG‑Switzerland).

Cookies‑&‑Tracking‑Technologies

Site‑uses‑necessary,‑statistical‑and‑marketing‑cookies.‑Session‑cookies‑auto‑delete‑on‑browser‑close;‑persistent‑cookies‑remain‑until‑expiry‑or‑manual‑browser‑deletion.‑You‑can‑adjust‑browser‑settings‑to‑block‑cookies‑(may‑break‑site‑features).‑Separate‑cookie‑setting‑links‑exist‑for‑regional‑shops‑and‑my‑tonies‑portal.‑Our‑systems‑do‑not‑honour‑browser‑Do‑Not‑Track‑(DNT)‑signals.

Full‑cookie‑inventory‑includes‑Awin,‑Bing,‑Hotjar,‑Klaviyo,‑Pinterest,‑Zendesk‑and‑others‑as‑documented‑inside‑original‑source‑document.

Third‑Party‑Services‑Overview

Platform‑integrates‑multiple‑US‑/‑EU‑providers‑for‑ads,‑analytics‑and‑CRM‑including‑Microsoft‑Bing‑Ads,‑Facebook‑Custom‑Audiences,‑Google‑Analytics‑/‑Optimize,‑Amplitude,‑Hotjar,‑Instagram‑Plugins,‑Klaviyo,‑Braze,‑Outbrain,‑Pinterest,‑Twitter‑X,‑Zendesk‑support‑system.‑Data‑transfers‑to‑USA‑rely‑upon‑EU‑Standard‑Contractual‑Clauses‑where‑applicable.‑Each‑third‑party‑has‑its‑own‑independent‑privacy‑policy‑you‑should‑review.

Data‑Retention‑Rules

Personal‑data‑is‑kept‑only‑as‑long‑as‑required‑to‑fulfil‑stated‑processing‑purposes.‑Contract‑related‑data‑is‑retained‑to‑meet‑commercial‑and‑tax‑statutory‑retention‑obligations.‑Support‑case‑linked‑operational‑device‑data‑gets‑erased‑once‑ticket‑is‑closed‑unless‑legal‑evidence‑holding‑is‑mandatory.‑Newsletter‑related‑data‑is‑anonymised‑upon‑unsubscribe‑request.

Data‑Security‑Measures

Industry‑standard‑technical‑&‑organisational‑protections‑including‑SSL‑encryption‑for‑checkout‑and‑portal‑traffic.‑Password‑protected‑Tonie‑accounts.‑No‑internet‑transmission‑can‑be‑guaranteed‑100‑percent‑secure.‑Users‑must‑keep‑login‑credentials‑confidential‑and‑log‑out‑on‑shared‑devices.

Children‑Related‑Provisions

Services‑are‑intended‑for‑adult‑account‑holders.‑We‑do‑not‑knowingly‑collect‑personal‑information‑from‑children‑under‑13‑years‑old.‑Uploading‑child‑audio‑requires‑parental‑/‑legal‑guardian‑explicit‑consent.‑If‑you‑discover‑child‑data‑collected‑without‑permission‑please‑contact‑us‑for‑prompt‑deletion.

Supplemental‑Notice‑for‑US‑Residents‑&‑CCPA‑Information‑(California‑Rights)

Boxine‑does‑not‑“sell”‑consumer‑personal‑information‑under‑CCPA‑definitions.‑California‑residents‑hold‑rights‑to‑know,‑correct,‑delete‑personal‑data,‑non‑discrimination‑for‑exercising‑rights‑and‑authorised‑agent‑representation.‑Nevada‑residents‑may‑submit‑opt‑out‑requests‑for‑potential‑data‑sales‑via‑[email protected]‑with‑subject‑line‑“Nevada‑Do‑Not‑Sell‑Request”.‑Cookie‑opt‑out‑resources‑for‑US‑users‑include‑Network‑Advertising‑Initiative‑and‑About‑Ads‑industry‑tools.

Social‑Media‑Profiles

We‑operate‑official‑profiles‑on‑Facebook,‑Instagram,‑Pinterest,‑LinkedIn,‑YouTube‑and‑TikTok.‑Visiting‑social‑pages‑triggers‑data‑processing‑by‑the‑respective‑platform‑operator‑(joint‑controller‑situation‑in‑some‑cases).‑Please‑consult‑each‑social‑network’s‑own‑privacy‑policy‑for‑full‑details‑on‑their‑data‑handling‑and‑your‑user‑rights.

Updates‑to‑this‑Policy

We‑reserve‑right‑to‑revise‑this‑Data‑Protection‑Policy.‑Revised‑version‑will‑be‑published‑online‑with‑updated‑revision‑date‑(Last‑updated:‑December‑2024).‑Continued‑usage‑of‑websites‑/‑apps‑constitutes‑acceptance‑of‑updated‑terms.