1. INFORMATION ON THE COLLECTION OF PERSONAL DATA
(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible pursuant to Article 4 (7) of the EU General Data Protection Regulation (DS-GVO) is Paul H. Kübler, Bekleidungswerk GmbH & Co. KG, Jakob-Schüle-Str. 11-25, 73655 Plüderhausen, Germany, telephone: +49 7181 8003-0, fax: +49 7181 8003-31, e-mail: email@example.com (see our imprint ).
You can reach our data protection officer at firstname.lastname@example.org or at our postal address with the addition "the data protection officer".
(3) If you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain data.
(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
(1) You have the following rights with regard to the personal data concerning you:
- right to information,
- right to correction or deletion,
- right to restriction of processing,
- right to object to processing,
- right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
The competent data protection supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstr. 10a, 70172 Stuttgart, Germany, telephone: 0711 6155410, fax: 0711 61554115, e-mail: email@example.com
PERSONAL DATA WHEN VISITING OUR WEBSITE
(1) In the case of purely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that a browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
- IP address
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- access status/HTTP status code
- amount of data transmitted
- website from which the request came
- operating system and its interface
- language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are assigned to the browser you are using and stored on your hard disk and which provide the party setting the cookie (in this case us) with certain information. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
) This website uses the following types of cookies, the scope and function of which are explained below:
- Transient cookies (b)
- Persistent cookies (c).
b) Transient cookies are automatically deleted when you close the browser.
These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This means that your computer can be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies.
Please note that you may not be able to use all the features of this website.
FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested.
For this purpose, you will usually have to provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.
OR REVOCATION TO THE PROCESSING OF YOUR DATA
(1) If you have given your consent to the processing of your data, you may revoke this consent at any time.
Such a withdrawal will affect the lawfulness of the processing of your personal data after you have given it to us.
(2) Where we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which will be described by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
or our postal address with the addition of "the data protection officer".
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising at the following contact details: firstname.lastname@example.org
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising at the following contact details: email@example.com
USE OF OUR END CUSTOMER ONLINE
(1) When placing an order via our end customer online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order.
The data processed by the respective payment service provider includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as the contract-, sum- and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed by and stored with the payment service provider. Mandatory details required for the processing of contracts are marked separately, other details are voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this data processing and the use of external payment service providers is Art. 6 Para. 1 S. 1 lit. b DS-GVO. Furthermore, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO. DSGVO in order to offer our users effective and secure payment options.
(2) Your payment data will be transmitted to the corresponding payment service provider depending on the payment method you have selected. The payment service provider is responsible for your payment data. The terms and conditions and the data protection information of the respective payment service providers apply to the payment transactions and can be accessed within the respective websites or transaction applications.
We use the following external payment service providers:
(3) In order to minimise the risk of payment defaults and to minimise costs, we reserve the right to obtain creditworthiness and identity information about our customers prior to the conclusion of the contract for payment methods that are risky for us (i.e. if we make advance payments, in particular for purchases on account).
The processing of the purchase on account is carried out by the payment service provider Crefo Payment GmbH & Co KG, Schloßstraße 20, 12163 Berlin ("CrefoPay"), to whom we pass on your personal data provided during the ordering process as well as information about your order, if you choose the payment method invoice during the ordering process. Your data will only be passed on to CrefoPay for the purpose of payment processing and only to the extent necessary for this purpose.
Based on this information, a statistical probability of a credit default and thus your solvency is calculated. If the credit check is positive, an order on account is possible. If the credit check is negative, you will not be offered payment on account in our shop system. The scope of the scoring is limited solely to whether an order can also be placed on account. The processing is carried out for the execution of the contract and for the purpose of the credit assessment to avoid a payment default. The legal basis for this is Art. 6 Para. 1 lit. b and f , 22 Para. 2 lit. a DSGVO, taking into account the provisions of § 31 BDSG. The legitimate interest according to Art. 6 para. 1 lit. f DS-GVO lies in minimising the risk of non-payment and minimising costs.
You can object to the transfer of this data to CrefoPay at any time until it is carried out, but in this case it will no longer be possible to order on account via our website. We may still be entitled to process your data if this is necessary for the contractual processing of payments.
(4) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.
(5) To prevent unauthorised access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.
(1) If you register for our newsletter (service provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg im Breisgau, Germany), we use the data required for this purpose or transmitted separately from your data in order to send you our email newsletter on a recurring basis (until revocation) with your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO. Voluntary data such as title, first name and surname are used exclusively to personalise the newsletter. They will not be passed on to other third parties.
(2) On our online shop or website, we offer you the opportunity to register for the newsletter. In order to be able to guarantee that no errors occur when entering the e-mail address or that there is no misuse, the recipient receives a so-called double opt-in mailing with a confirmation link immediately after sending the newsletter registration form. Only when the confirmation link is called up is the subscription to the newsletter effected. To prove valid consent to receive the newsletter, the date and time of calling up the confirmation link, the IP address of the calling user and the e-mail address of the recipient are stored together in a log file. In addition, a copy of the double opt-in mailing is stored and archived in an audit-proof manner. The legal basis for this data processing is Article 6(1)(a) DSGVO.
(3) You can cancel the newsletter at any time and thus revoke your consent to receive the newsletter. Any existing consent to the collection of data on the personal usage behaviour of the newsletter will also expire with this. To do this, you have the option of cancelling the newsletter yourself at any time via the unsubscribe link contained in each newsletter or by sending a corresponding message to firstname.lastname@example.org. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.
8. USE OF GOOGLE ANALYTICS
(1) This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
If you click here, you can revoke your consent:
(4) This website uses Google Analytics with the extension "anonymizeIp()". This means that IP addresses are processed in a shortened form, thus making it impossible to relate them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Article 6 (1) sentence 1 lit. f DS-GVO.
(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html and the data protection declaration: http: //www.google.de/intl/de/policies/privacy
9. GOOGLE ADS AND GOOGLE REMARKETING
(1) We use the Google Ads service of the responsible service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), in order to draw attention to our attractive offers with the help of advertising media on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The legal basis for the processing of your data is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DS-GVO.
(2) These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies usually lose their validity after 30 days and are not intended to identify you personally.
(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer will be able to recognise that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. The information obtained with the help of the cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. These evaluations allow us to see which of the advertising measures used are particularly effective. Ads clients learn the total number of users who clicked on your ad and were redirected to a page tagged with a conversion tracking tag. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.
(4) In addition to Google Ads, we use the Google Remarketing application. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website.
(5) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. A data transfer to the USA is possible. As a safeguard, we have concluded the EU standard data protection clauses. We have no influence on the scope and further use of the data collected by Google through the use of this tool. If you are registered with a Google service, Google can assign the visit to your account and, if necessary, merge it with other data collected by Google. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address.
(6) In addition to the setting options in our Consent Banner, you can also prevent participation in this tracking procedure in various ways:
a) by adjusting the settings of your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any advertisements from third-party providers
b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies
c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies
d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browser at the link http://www.google.com/settings/ads/plugin.
We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
(7) Further information on data protection at Google can be found here: http: //www.google.com/intl/de/policies/privacy, https://services.google.com/sitestats/de.html, https://support.google.com/google-ads/answer/1722022?hl = de and https://support.google.com/google-ads/answer/2453998?hl = de.
10. USE OF SOCIAL MEDIA PLUG-INS
(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by marking the box with its initial letter or logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
(2) We have neither influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as a usage profile and uses this for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid an assignment to your profile with the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy. An appropriate level of protection for the transfer of data is ensured by the conclusion of the EU standard data protection clauses (available at https://eur-lex.europa.eu/legal-content/DE/TXT/?qid=1487055654356&uri=CELEX:32010D0087). The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO.
(6) Addresses of the respective plug-in providers and URL with their data protection notices:
a) Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; For more information on the provider and its data processing, please visit: https: //www.facebook.com/about/privacy, https://www.facebook.com/terms, https://www.facebook.com/policies/cookies. An adequate level of protection for the transfer of data is ensured by the conclusion of the EU standard data protection clauses (available at https://eur-lex.europa.eu/legal-content/DE/TXT/?qid=1487055654356&uri=CELEX:32010D0087).
c) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. An adequate level of protection for the transfer of data is ensured by the conclusion of the EU standard data protection clauses (available at https://eur-lex.europa.eu/legal-content/DE/TXT/?qid=1487055654356&uri=CELEX:32010D0087).
d) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; http://www.xing.com/privacy.
e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. An adequate level of protection in the transfer of data is ensured by the conclusion of the EU standard data protection clauses (available at https://eur-lex.europa.eu/legal-content/DE/TXT/?qid=1487055654356&uri=CELEX:32010D0087).
11. USE OF FACEBOOK PIXEL
(1) Within our online offer, we use the so-called "Facebook pixel" of the social network Facebook for the purpose of analysis, optimisation and economic operation of our online offer. This is operated by the European service provider Facebook Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (hereinafter "Facebook").
(2) The legal basis for the use of Facebook Pixel is your consent pursuant to Art. 6 (1) lit. a DSGVO.
(3) With the help of the Facebook Pixel, it is possible, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"), in that we can track your actions after you have viewed or clicked on an advertisement on Facebook. This allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion"). Accordingly, we use the Facebook pixel to display Facebook ads placed by us only to Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). We also want to make sure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect.
(4) Furthermore, when using the Facebook Pixel, we use the additional function "extended matching" This involves the transmission of data such as telephone numbers, email addresses or Facebook IDs of the users to Facebook (encrypted) for the formation of target groups ("Custom Audiences" or "Look Alike Audiences"). Further information on "advanced matching" is available at https://www.facebook.com/business/help/611774685654668.
(5) We also use the "Custom Audiences from File" procedure. In this case, the email addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload is used solely to determine recipients of our Facebook ads. In this way, we want to ensure that the ads are only displayed to users who are interested in our information and services. The data collected in this way is anonymous for us. However, they are stored and processed by Facebook so that a connection to your Facebook account is possible and Facebook uses the data for its own advertising purposes in accordance with its data usage policy. This concerns the user name, cookie ID, user ID and advertising ID.
(6) General information on the display of Facebook ads, in Facebook's data usage policy, can be found at https://www.facebook.com/policy.php. Specific information and details on the Facebook Pixel and how it works can be found in the Facebook help area: https://www.facebook.com/business/help/651294705016616
(7) You can prevent tracking by Facebook via our Cookie Consent banner.
(8) In order to set which types of advertisements are displayed to you within Facebook, you can also visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising(About Facebook ads | Facebook help area).
12. USE OF GETSITECONTROL
(1) We use the GetSiteControl tool of the provider Getwebcraft Limited (Klimentos 41-43, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus) on this website in order to offer you a possibility for communication and consultation by means of pop-ups and overlay windows. The windows are controlled according to certain rules (e.g. number of page visits). The setting of technically necessary cookies is therefore necessary for the provision of these functions.
(2) If you use GetSiteControl, the following data is processed so that we can process your request:
- Mandatory data: Name, e-mail address or telephone number
- Further information provided by you
- Number of page visits
(4) The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in the use of GetSiteControl lies in the functioning provision and implementation of a quick contact and answering of your questions as well as in the user-optimised presentation of our website.
(5) In the event of an order-related contact, i.e. for the initiation or execution of a contract, the data processing is carried out on the basis of Art. 6 Para. 1 lit. b DSGVO.
(6) We have no influence on the data processing and storage by GetWebCraft Limited.
13. USE OF MOUSEFLOW
(1) On this website we use the tool Mouseflow, a web analytics service provided by Mouseflow, ApS, to track randomly selected visitors with anonymised IP addresses.
(2) Mouseflow enables an analysis of the use of our website (e.g. mouse clicks, mouse movements, scrolling, activities with form fields).
(3) We use this anonymised information to better design our website and improve user-friendliness. Mouseflow creates aggregated anonymised reports for us based on anonymised data of your user behaviour on our website.
(4) For more information on the data collection by Mouseflow, please refer to the DSGVO provisions or the Mouseflow data protection provisions.
14. INTEGRATION OF YOUTUBE VIDEOS
(1) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website.
(2) By visiting the website, YouTube receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under 3. of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
15. INTEGRATION OF GOOGLE MAPS
(1) On this website we use the offer of Google Maps. This allows us to display your interactive maps directly on the website and enables you to use the map function conveniently.
(2) By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under 3. of this declaration will be transmitted. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website to meet your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
Status: July 2022