Privacy Policy
last updated: 02/24/2025
We are pleased that you are visiting our webshop and thank you for your interest.
With this data protection declaration, we inform you about the collection of personal data on the website https://remonte.com (hereinafter: "website" / "our website"). Insofar as reference is made to other websites or other areas of the website www.remonte.com via links, we are not responsible for the data processing on these websites. Further information on data processing in connection with the linked websites can be found in the data protection declarations of these websites.
In the following, we explain what personal data we collect on our website, how and for what purposes we process this data and what rights you have when you visit the website and use its individual functions. The protection of your personal data is important to us.
According to the EU General Data Protection Regulation ("GDPR"), personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the data subject. This means that both your personal data, such as your name, postal address or e-mail address, and the technical data generated or processed when you use the website that can be assigned to you, such as the IP address, the operating system or browser of your end device or your user behavior recorded via cookies, are personal data.
1. Names and contact details of the data controller and the representative
Responsible under data protection law for the collection and processing of your personal data when you visit and use our website is
Rieker Schuh AG
Stockwiesenstrasse 1
8240 Thayngen
Switzerland
E-Mail: [email protected]
Phone: +49 7462 201101
The data protection representative in the European Union pursuant to Art. 27 GDPR is the
Rieker Schuh GmbH
Gansäcker 31
78532 Tuttlingen
Germany
E-mail: [email protected]
If you have any questions, concerns or suggestions regarding data protection on our website, you can contact us at any time via the e-mail address [email protected]. You can also use this e-mail address to assert your rights as a data subject. You can find more information on this in section 10 of this privacy policy.
2. Automatic data processing when visiting our website - purposes and basis
You can visit our website and use it purely for information purposes without having to provide personal data yourself (e.g. by registering or submitting online forms). However, in order to enable you to use our website in a user-friendly, stable and secure manner and to provide you with additional services, we automatically collect and process the (pseudonymous) technical data required for this in conjunction with your end device and your browser.
2.1 Automatic data collection and processing by web servers
In order to the individual pages of our website to you, our web servers automatically collect and process the following personal data transmitted by your browser:
- Called address on the web server (URL)
- "User agent" identifier, which contains further information depending on the browser
- Operating system used
- Browser type and browser version
- Referrer URL (last page visited, if transmitted from this page)
- Date and time of the server request
- IP address
- Hostname of your internet service provider
The legal basis for this data processing is Art. 6 para. 1 lit. b) GDPR. The data processing is necessary for the implementation of pre-contractual measures that take place at your request, as such pre-contractual measures also include website visits.
The (pseudonymous) technical communication data collected and processed for the use of the website (connection establishment) is temporarily stored by our web servers in log files, so-called server log files. This data is not evaluated on a personal basis and is not merged with other data sources. We use the server log files for internal system-related purposes, in particular to ensure the stability and security of our web servers and the website. If we suspect illegal use of our website, we reserve the right to use the stored IP address to identify and track unauthorized or abusive attempts to access our web servers. The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR, which permits the processing of personal data in the context of our legitimate interests. Our legitimate interests lie in the easy administration and secure operation of our website.
2.2 Cookies
In order to make your visit to our website user-friendly and attractive and to enable the use of certain functions, we use cookies and other technologies that collect information about your use of our website. We also use services to enable us to analyze your use of the website and to show you content from third-party providers.
We use cookies that are required for certain functions of the website on the basis of our legitimate interest in providing and optimizing our offer. Cookies and tools for marketing or web analysis purposes or media offers from social networks are only used with your consent in accordance with the law.
To manage your consents, we have integrated the "Cookiebot" service of the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark into our website. "Cookiebot" enables you to give your consent to certain data processing procedures and to withdraw your consent. Cookiebot also helps us to provide proof of your declarations. Log data relating to your declarations are processed for this purpose. This data processing is necessary in order to be able to prove consent given and is carried out on the basis of Art. 6 para. 1 lit. c) GDPR. You can give your consent for all cookies by clicking the "Allow all cookies" button when you first visit our website. By clicking on the "Allow selection" button, you have the option of obtaining further information about the cookies used and restricting your consent to individual categories of cookies.
You can view information about the cookies and similar technologies used on our website and the consent you have given at any time in the cookie declaration in section 12 of this privacy policy. Here you can edit the consents you have given at any time and revoke them in whole or in part with effect for the future in accordance with Art. 7 para. 3 GDPR.
Cookies are small text files that are stored on your end device and assigned to the browser you are using and through which certain information flows to the site that sets the cookie. Cookies cannot execute any programs, transmit viruses to your end device or cause any other damage to your end device.
Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). With the help of session cookies, various requests from your browser can be assigned to a common session. This allows your browser to be recognized when you use several websites or return to our website before you close your browser. Other cookies remain on your end device for a predetermined period of time and make it possible to recognize your browser the next time you visit (so-called persistent cookies). Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. You can also set your browser so that all cookies are automatically deleted when you close the browser. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
· Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
· Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
· Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
· Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
· Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
· Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, individual functions of our website may be restricted.
If cookies are set, they collect and process certain user information such as browser and location data, IP address values and information about the use of the website to an individual extent. In addition to our own cookies, we also use third-party cookies on our website that help us to make our website more interesting for you. Further information on the individual cookies we use can be found in the cookie statement.
The cookies displayed in the "Necessary" category are required to ensure the secure and trouble-free operation of the website and to be able to offer you certain functions. These cookies are stored on the basis of Art. 6 para. 1 lit. f) GDPR, § 25 para. 2 sentence 2 TTDSG. Our legitimate interests lie in the technically error-free and optimized provision of our website.
The other cookies and tools listed in the categories "External media cookies", "Statistics" and "Marketing" are only used if you give us your consent. This is done on the basis of Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 sentence 1 TTDSG. You can revoke your consent to the use of non-essential cookies and tools at any time in accordance with Art. 7 para. 3 GDPR in whole or in part with effect for the future by changing the settings in the cookie declaration or by preventing the storage of cookies in whole or in part by setting your browser accordingly or by deleting the stored cookies in whole or in part. Further information on the cookies and tools used that are not necessary can be found in the cookie declaration and in the following sections of the privacy policy.
2.3 Services for the provision of our website
2.3.1 Amazon Web Services
We use Amazon Web Services (AWS) for web hosting. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. When you visit our store, your personal data is processed on the servers of AWS. Personal data may also be transferred to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses, Art. 46 GDPR. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
AWS is also certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. Further information on this can be found at: https:
The legal basis for the use of AWS is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the error-free operation of our web store.
2.3.2 Cloudflare - Content Delivery Network
We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. For this purpose, personal data may be processed in Cloudflare's server log files. This data processing is in our legitimate interest (Art. 6 para. 1 lit. f GDPR) to increase the security and loading time when visiting our website.
Cloudflare is the recipient of your personal data and acts as a processor for us.
Further information on data processing by Cloudflare can be found here: https:
2.3.3 Google Maps
We use interactive maps from Google Maps on our website. Google Maps is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
By accessing the web pages with the integrated Google Maps, Google receives the information that you have accessed the corresponding page of our website, as well as the (pseudonymous) technical communication data transmitted by your browser (see section 2.1) and possibly other personal data, such as your location data or data on the use of other pages of this website, in order to display the relevant interactive maps. Data is transmitted to Google regardless of whether you have a Google user account that you are logged into or not.
The legal basis for data processing in the context of Google Maps is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in increasing the user-friendliness and attractiveness of our website and improving our service.
If you are logged in to Google, your personal data transmitted to Google will be assigned directly to your Google user account and your profile stored there. If you do not wish your data to be assigned to your Google profile, you must log out before accessing pages with Google Maps. Google stores your data as user profiles and uses them on its own responsibility for the purposes of customizing its offers, advertising and/or market research. Such an evaluation of your data, in particular for the provision of needs-based advertising, is carried out on a pseudonymous basis even if you are not logged in to Google or do not have a user account with Google. In this context, personal data may also be transferred to affiliated Google companies in the USA. Google is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. Further information on this can be found at: https:
You have the right to object to the creation of these (pseudonymous) user profiles, whereby you must contact Google to exercise this right
Further information on the purposes and scope of data collection and processing by Google, the legal basis for this data processing and your rights and settings options for protecting your privacy can be found in Google's privacy policy at https://policies.google.com/privacy and in the terms of use for Google Maps at https://www.google.com/intl/de_de/help/terms_maps.
2.3.4 Google reCAPTCHA
On this website, we also use the "reCAPTCHA" service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This function is primarily used to differentiate whether an entry is made by a natural person or is misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.
Data processing by Google reCAPTCHA is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and preventing misuse of our web store.
Further information on data processing by Google reCAPTCHA can be found in Google's privacy policy at https://policies.google.com/privacy.
2.4 Analysis and marketing services
2.4.1 Google Analytics
The website uses the web analytics service Google Analytics 4 of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the purpose of measuring reach and analyzing your usage behavior as well as evaluating and improving the website. Google is contractually obliged to strictly comply with this privacy policy, the applicable statutory data protection regulations and our instructions (so-called processor pursuant to Art. 28 GDPR). Google Analytics is only activated if you have given your consent to the corresponding cookies in the "Statistics" category under "Cookiebot". The data processing within the framework of Google Analytics is carried out on the basis of Art. 6 para. 1 lit. a) GDPR.
The service uses cookies that enable an analysis of your usage behavior. The following information may be collected during your visit to our website: Start of the session, first visit to the website, page views, interaction with the website ("click and scroll path"), internal search queries, clicks on external links, video views, file downloads, ads viewed and clicked on, language setting. Google Analytics also collects the technical communication data mentioned in section 2.1, including your IP address.
The information generated about your use of the website is generally transmitted to a Google server in the USA, where it is stored and processed. However, by activating IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will process this information on our behalf for the purpose of evaluating your use of the website, compiling reports on your website activity and providing us with other services relating to website activity and internet usage. Pseudonymous user profiles can be created from the processed data. This data processing and, in particular, the associated data transfers to Google in the USA are also carried out on the legal basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Google is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. Further information on this can be found at: https://policies.google.com/privacy/frameworks?hl=de.
You can revoke your consent at any time by deactivating the "Statistics" category in the cookie declaration. You can also prevent data processing by Google Analytics using one of the following options:
· You can prevent the storage of cookies by Google by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website.
· You can also prevent Google from collecting the data generated by the cookies and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Further information on the Google Analytics user conditions can be found here https://marketingplatform.google.com/about/analytics/terms/de/, further information on data protection here https://policies.google.com/technologies/partner-sites?hl=de and in Google's privacy policy here https://policies.google.com/privacy.
2.4.2 Google Marketing Platform / Google Ads / Google Display & Video 360 and Google Campaign Manager 360
This website uses services of the "Google Marketing Platform". These are web analysis services of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The services are activated if you have given your consent to the corresponding cookies in the "Marketing" category under "Cookiebot". The data processing is carried out on the basis of Art. 6 para. 1 lit. a) GDPR.
Cookies are used in this context to display ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees an ad and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, the cookies used in this process do not contain any personal information
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
In addition, the cookies used enable us to understand whether you perform certain actions on our website after you have accessed or clicked on one of our ads on Google or on another platform (conversion tracking). The service uses this cookie to understand the content you have interacted with on our websites in order to be able to send you targeted advertising later
We also use the online marketing service "Display & Video 360" (formerly Double Click Bid Manager, "DV360") and the online marketing service "Campaign Manager 360" (formerly Double Click Campaign Manager, "CM360") from Google. We process the data on your behavior on our websites for marketing purposes and the delivery of individually tailored advertising messages. For example, you will be addressed with content that is relevant to you based on your behavior. DV360 and CM360 generally use cookies to track where and how our advertisements have been displayed. In addition to the activities on our website, we collect and process information about your user behavior in the Google advertising network. On our behalf, Google will use the information collected to evaluate the impact of our advertising activities and to create reports on the campaigns. There is a technical connection between DV360, CM360 and Google Analytics. This allows data and information that has already been collected to flow between the tools. On our behalf, Google will import the data from CM360 and GA into DV360 and make it available to us there. Your data will only be available to us if you have actively consented to this in the cookie banner on our websites.
The legal basis for the processing of data in these cases is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. Google is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. Further information on this can be found at: https://policies.google.com/privacy/frameworks?hl=de.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration. You can also prevent participation in Google tracking procedures by using the following options:
· You disable personalized ads on the website https://www.google.de/settings/ads, which blocks cookies from the domain googleadservices.com. This setting will be deleted when you delete your cookies.
· You can deactivate interest-based ads from providers that are part of the "About Ads" self-regulation campaign via the link https://www.aboutads.info/choices. This setting will be deleted when you delete your cookies.
Further information on data protection can be found in Google's privacy policy at https://policies.google.com/privacy.
2.4.3 Microsoft Ads
We use "Microsoft Advertising" on our website, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as: "Microsoft")
Microsoft Advertising collects and stores data from which user profiles are created using pseudonyms. This enables us to track user activities on our website if the users have reached our website via advertisements from Microsoft Ads. If you reach our website via such an ad, a cookie is set on your device.
A Microsoft Advertising UET tag is integrated on our website. This is a code that is used in conjunction with the cookie to store some non-personal data about the use of the website. This includes, among other things, the time spent on the website, which areas of the website you have accessed and which advertisement you to the website.
The IP address is only collected in encrypted form, the cookie also collects a so-called Global UID (Globally Unique Identifier), which is assigned to your browser and/or a user ID, which is assigned to your Microsoft account, if you have one.
The information collected may be transferred to Microsoft servers in the USA.
We use this service on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time. Microsoft is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. You can find further information on this at
https://policies.google.com/privacy/frameworks?hl=de.
In addition, Microsoft may be able to track your usage behavior across several of your electronic devices through so-called cross-device tracking and is thus able to display personalized advertising on or in Microsoft websites and apps.
You can change this behavior under
Deactivate http://choice.microsoft.com/de-de/opt-out.
2.4.4 Meta
We use the "Meta Pixel" service on our website for marketing and targeting purposes. Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is responsible for the Meta Pixel service in Europe.
The Meta Pixel is a JavaScript code integrated into our website that makes it possible to track the actions of users on our website via cookies. In this context, user interactions on our website and interactions with the ads we place on other websites (e.g. whether a user clicks on an ad and then registers on our website) are recorded and stored on Meta's servers. These servers are located in the USA and are operated by Meta Platforms, Inc. In addition, the information collected also includes the IP address and other data of the device used (e.g. device ID, operating system). The respective information and interactions are usually collected by storing cookies on the user's device and evaluating tags embedded on our website.
Based on the information and interactions collected, we can improve the targeting of our advertising and optimize the offers and functions on our website. It is also possible for us to draw users' attention to our offers and products again, e.g. by placing individual advertisements tailored to the interests of the respective user on other websites of the respective third-party providers and the advertising networks operated by them.
In addition, Meta is able to match the information collected with your Facebook account data. This means that if you are a Facebook user and are logged into your Facebook account, your visit to our website is automatically assigned to your Facebook user account. Meta uses the collected data for analysis purposes and its own advertisements. Users can adjust their settings and objections to the use of data for advertising purposes in the Facebook profile settings. The profile settings can be accessed here:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
The use of the service is based on your consent. The legal basis for the processing of personal data in connection with the use of Meta Pixel is Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the use of the service in the "Cookie settings". Meta is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for the transfer is therefore also Art. 45 GDPR. Further information on this can be found at
Further information on the processing of your data by Meta and on exercising your rights as a data subject vis-à-vis Meta can be found here:
https://www.facebook.com/about/privacy
2.4.5 Pinterest
We use the "Pinterest Tag" on our website, a service provided by the
Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). We use the Pinterest tag to optimize our marketing, in particular to create target groups and to display interest-based advertising. The Pinterest tag is only activated if you have given your consent in the "Marketing" category under "Cookiebot". The data processing in connection with the Pinterest tag is carried out on the basis of Art. 6 para. 1 lit. a) GDPR
The Pinterest tag is a code fragment that gives us and Pinterest insight into the usage behavior of a person on our website. Pinterest uses this information to form target groups for the improved display of advertisements, to assess and improve the effectiveness of advertisements and to determine what type of advertisements should be displayed to users. Pinterest uses cookies for this purpose. The information generated by the cookies about the use of this website is transmitted to a Pinterest server in the USA and stored there. The data transfer between Pinterest Europe Ltd. and Pinterest, Inc. takes place on the basis of the EU standard contractual clauses within the meaning of Art. 46 GDPR.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration.
Further information on data processing by Pinterest can be found in Pinterest's privacy policy at:
https://about.pinterest.com/de/privacy-policy/.
2.4.6 DotDigital
We use the "DotDigital" service on our website, a marketing service provided by dotdigital EMEA Ltd, No. 1 London Bridge, London, SE1 9BG, United Kingdom. With the help of DotDigital, various marketing activities can be controlled and synchronized via a central user interface. DotDigital enables the generation of leads, centralized e-mail and newsletter marketing and effective contact management in the form of user segmentation
DotDigital uses cookies to perform these functions. In addition to the technical communication data mentioned in section 2.1, these cookies also record your approximate location and other information about your use of our website. The information collected by DotDigital is stored on DotDigital servers and analyzed on our behalf. For the United Kingdom, the EU Commission has issued an adequacy decision (C(2021) 4800 final), so that the appropriate level of data protection is ensured in accordance with Art. 45 GDPR.
Data processing by cookies in the context of DotDigital only takes place if you have given your consent in the "Marketing" category of "Cookiebot". The data processing and the associated data transfers to DotDigital are carried out on the basis of Art. 6 para. 1 lit. a) GDPR.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration. Other legal bases for data processing that intervene in the context of specific DotDigital services (see section 3.2 on sending email newsletters) remain unaffected by this.
We have concluded an agreement with dotdigital EMEA Ltd. for order processing in accordance with Art. 28 GDPR, which obliges dotdigital EMEA Ltd. to strictly comply with this privacy policy, the applicable statutory data protection regulations and our instructions.
Further information on data processing by dotdigital EMEA Ltd. can be found in DotDigital's privacy policy at https://dotdigital.com/terms/privacy-policy/.
2.4.7 Amazon Ad Tag
From time to time, we run video campaigns via the services Amazon Prime Video, Amazon Fire TV and the Twitch platform. We use the so-called Amazon Advertising Tag of Amazon Online Germany GmbH (hereinafter referred to as "Amazon"). This makes it possible to track conversions, retarget website visitors and obtain additional information about Amazon users who our advertisements, e.g. via Prime Video, Fire TV and the Twitch streaming platform
The Amazon Ad Tag places a cookie in your web browser or uses a pixel. This enables the collection of data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics, timestamps and page views. Amazon does not share any personal data with us, but only provides summarized reports on website audience and ad performance.
The use is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time by clicking on the following link:
Further information on data protection at Amazon can be found here:
https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010
For the US data transfer from Amazon, see section 2.3.1.
2.4.8 TikTok
We use the "TikTok Pixel" service on our website. This service is offered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, 125 Kingsway, London, WC2B 6NH, United Kingdom, which are jointly responsible for the associated data processing (both companies hereinafter jointly referred to as "TikTok"). We use the TikTok pixel for marketing purposes, in particular to place relevant and interesting ads for you on the social network "TikTok" in order to improve our offer and make it more interesting and to avoid annoying ads
The "TikTok pixel" is only activated if you have given your consent in the "Marketing" category of "Cookiebot". The data processing and transmission in connection with the "TikTok pixel" is carried out on the basis of Art. 6 para. 1 lit. a) GDPR.
If the "TikTok pixel" is activated, a direct connection to the TikTok servers is automatically established and information about your use of our website is transmitted. This includes data about your use of the website, which is generated with the help of cookies, as well as the technical communication data mentioned in section 2.1. This data is used in the social network "TikTok" to display personalized advertising across devices. We can also use the data transmitted with the "TikTok pixel" to determine how successful the individual advertising measures are. Cookies are used for this purpose, which can be used to determine certain parameters for measuring reach, such as the display of ads, duration of viewing or clicks by users
The data collected with the "TikTok pixel" is anonymous for us, i.e. it does not allow us to draw any conclusions about the identity of the user. If users are registered with a TikTok service, TikTok can also assign the data collected with the "TikTok pixel" to the respective "TikTok" account and, if necessary, link it to other data. Furthermore, TikTok reserves the right to transfer this data to TikTok Inc, 10100 Venice Boulevard, Culver City, California, USA, and to process it in other countries outside the European Economic Area. We have no influence on the further processing of the data collected by the "TikTok pixel" by TikTok. Data transfers take place on the basis of the EU standard contractual clauses within the meaning of Art. 46 GDPR.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration settings.
Further information on data processing by TikTok can be found in the privacy policy at https://www.tiktok.com/legal/new-privacy-policy?lang=de.
2.4.9 Snap Pixel
We use the "Snap Pixel" service of Snap Inc, 2772 Donald Douglas Loop North, Santa Monica, CA 90405, USA ("Snap") on our website. We use "Snap Pixel" for marketing purposes, namely to optimize our ads on the social network "Snapchat", to be able to place ads that are particularly relevant or interesting for users on the social network "Snapchat" and to measure the success of our "Snapchat" advertising campaigns.
"Snap Pixel" is only activated if you have given your consent in the "Marketing" category of "Cookiebot". The data processing and transfers in connection with "Snap Pixel" are carried out on the basis of Art. 6 para. 1 lit. a) GDPR. Data transfers outside the European Economic Area are carried out on the basis of the EU standard contractual clauses within the meaning of Art. 46 GDPR.
If "Snap Pixel" is activated, a connection to the Snap servers is automatically established when you visit our website and information about your use of our website is transmitted. In addition to the individual pages visited on our website, other information and parameters required to optimize our advertisements, increase relevance and measure success are transmitted, in particular purchases, reservations or registrations ("conversion events"). Snap processes this information on our behalf in order to determine visitors to our website as a target group for advertisements on the social network "Snapchat" and to create anonymized reports on our "Snapchat" advertising campaigns.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration settings.
Further information on data processing by Snap can be found in Snap's privacy policy at https://snap.com/de-DE/privacy/privacy-policy.
2.4.10 X Pixel
We use the "X Pixel" service of X Corp, 865 FM 1209, Building 2, Bastrop, TX 78602, USA ("X") on our website. We use "X Pixel" for marketing purposes, namely to optimize our advertisements in the social network "X", to be able to place particularly relevant or interesting advertisements for users in the social network "X" and to measure the success of our "X" advertising campaigns.
"X" is only activated if you have given your consent to "Cookiebot" in the "Marketing" category. The data processing and transmission in connection with "X Pixel" is carried out on the basis of Art. 6 para. 1 lit. a) GDPR. X is certified in accordance with the "EU-US Data Privacy Framework". The legal basis for any transfer of data to the USA is therefore also Art. 45 GDPR.
If "X Pixel" is activated, a connection to the X servers is automatically established when you visit our website and information about your use of our website is transmitted. In addition to the individual pages visited on our website, other information and parameters required to optimize our advertisements, increase relevance and measure success are transmitted, in particular purchases, reservations or registrations ("conversion events"). X processes this information on our behalf in order to determine visitors to our website as a target group for advertisements in the social network "X" and to create anonymized reports on our "X" advertising campaigns.
You can revoke your consent at any time by deactivating the "Marketing" category in the cookie declaration settings.
Further information on data processing by X can be found in X's privacy policy at https://x.com/de/privacy
2.4.11 Salesforce
When you visit our website, we record your interactions on our website (such as the click path, completed forms) and create an individual pseudonymized usage profile using Salesforce Marketing Cloud Personalization, a service of salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich ("Salesforce"). When you register for the newsletter or create a customer account, we can assign your previous interactions on our website to your person. This also applies if you interact with our website while you are logged into your user account. The data stored in the Salesforce Marketing Cloud is also stored and processed on Salesforce servers in the USA. Saleforce is certified under the EU-U.S. Data Privacy Framework. For the USA, the EU-U.S. Data Privacy Framework is currently an adequacy decision that serves as the basis for data transfers to certified organizations in the USA. We have concluded an order processing agreement with Salesforce.
By saving the data, we can send you more targeted advertising via the AdStudio, e.g. also via social networks. We can specify the groups of users to whom the advertisements are to be displayed ("Custom Audiences").
The collection and evaluation of the interaction is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the "Marketing" category in the cookie declaration settings.
Further information on data protection at Salesforce can be found at: https://www.salesforce.com/privacy/resources/.
2.4.12 The Trade Desk
We use the retargeting technology of The Trade Desk, Inc, 42 N. Chestnut Street, Ventura, CA 93001 ("The Trade Desk").
This is used to present interest-based advertisements to visitors to the website as part of The Trade Desk advertising network. The website visitor's browser stores cookies, which are saved on your computer and make it possible to recognize you when you visit websites that belong to The Trade Desk's advertising network. On these pages, advertisements can then be presented that relate to content that the visitor has previously accessed on websites that also use The Trade Desk's retargeting technology. According to its own information, The Trade Desk collects pseudonymized data during this process. Data transfers outside the European Economic Area are carried out on the basis of the EU standard contractual clauses within the meaning of Art. 46 GDPR.
The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time. You can do this in the following ways:
About our cookie settings tool
About https://www.youronlinechoices.com
Further information on The Trade Desk's retargeting technology, The Trade Desk's privacy policy and opt-out options can be found at: https://www.thetradedesk.com/general/privacy.
3. Collection and processing of data provided by you - purposes and bases
The use of certain functions of our website requires the collection and processing of personal data. We only process such data on our website if you provide it to us yourself and this is permitted by law.
If your prior consent is also required for certain data collection and processing, we will ask for your consent at the relevant point on our website. This declaration of consent will be recorded by us. You are entitled to revoke your declaration of consent in whole or in part at any time with effect for the future. Such a revocation will also be logged by us.
3.1 Contact form
Under the heading "Contact" we provide a contact form for you to send us your inquiries, requests and suggestions.
In order to process and respond to your request, we need your e-mail address to which we will send our reply in addition to your request and the subject. The legal basis for the processing of this data is Art. 6 para. 1 lit. b) GDPR. The data processing is necessary for the implementation of a pre-contractual measure that takes place on request, as such measures also include contact requests.
In addition, you can voluntarily provide your name and telephone number to enable us to contact you personally. If you provide your name and/or telephone number, we will only use this data to process your specific request. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to be able to contact you better and more personally. If you do not wish us to do this, please leave the "Name" and "Telephone" fields blank.
3.2 E-mail newsletter
You can also register for the e-mail newsletter on our website using the form provided for this purpose. With your consent, we will process the personal data provided in the form in order to inform you about offers from the Rieker Group for shoes and leather goods by means of an e-mail newsletter.
Your e-mail address is required for sending the newsletter. We also collect your first name and gender (via the "Salutation" field) so that we can address you personally and compile a newsletter with products that are of interest to you. We process this data with your consent on the basis of Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time and unsubscribe from the email newsletter. This is possible via the link contained in every newsletter or by sending a message to one of the addresses given in section 1.
You can also voluntarily provide us with your surname and date of birth. We use this data exclusively to personalize the newsletter and to send you a birthday gift. The processing of this data voluntarily provided by you is carried out on the basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to be able to address you more personally as a customer.
We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 72 hours, your data will be deleted automatically. We also store the IP addresses you use and the times of registration and confirmation. This is done on the basis of Art. 6 para. 1 lit. f) GDPR and serves our legitimate interest in being able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
To send the email newsletter, we use the service DotDigital, a marketing service of dotdigital EMEA Ltd, No. 1 London Bridge, London, SE1 9BG, United Kingdom. The EU Commission has issued an adequacy decision for the United Kingdom (C(2021) 4800 final), so that the appropriate level of data protection is ensured in accordance with Art. 45 GDPR. dotdigital EMEA Ltd. processes your data on our behalf on the basis of an agreement pursuant to Art. 28 GDPR, which obliges it to strictly comply with this privacy policy, the applicable legal data protection regulations and our instructions. Further information on data processing within the framework of DotDigital and the data protection provisions of dotdigital EMEA Ltd. can be found at https://dotdigital.com/terms/privacy-policy/. It is not possible to subscribe to the e-mail newsletter without your consent.
We carry out statistical evaluations and use DotDigital to analyze the opening rates and click behavior of our newsletter users. For these evaluations, the emails sent contain so-called web beacons or tracking pixels, which we use to collect and process the connection data mentioned in section 2.1 as well as pseudonymized usage data. We cannot merge this usage data with your e-mail address or your IP address. It is therefore not possible for us to draw any conclusions about your person or carry out a personal analysis. The legal basis for the analyses is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in being able to analyze the use of our email newsletter and to regularly improve the newsletter. You can object to the statistical analysis of the newsletter at any time by sending a message to one of the addresses listed in section 1 or by unsubscribing from our newsletter.
3.3 Customer service platform Zendesk
We use the customer service platform "Zendesk" to answer user queries via live chat, email and telephone. Zendesk is a service of Zendesk, Inc, 1019 Market Street, San Francisco, CA 94103, USA. As our processor in accordance with Art. 28 GDPR, Zendesk Inc. is contractually obliged to strictly comply with this privacy policy, the applicable statutory data protection regulations and our instructions. We have agreed with Zendesk Inc. that the data collected as part of the service will be processed exclusively within the European Union.
We use Zendesk to process your requests quickly and efficiently. If you give us your consent in the context of an inquiry, the legal basis for the associated data processing is Art. 6 para. 1 lit. a) GDPR. If your request is aimed at initiating or processing an order in our web store, your data will be processed on the basis of Art. 6 para. 1 lit. b) GDPR. In all other cases, data processing is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to provide you with various communication channels for your inquiries and to be able to process your request quickly and efficiently.
If you use the Zendesk live chat module, the information you enter and the following data will be processed: IP address, country of origin, chat history, pages visited, duration of visit to the pages. You also have the option of entering your name and contact details to make it easier for us to contact you. To use Zendesk, it is only necessary to enter a correct e-mail address. All other information is voluntary. The data collected will not be passed on to third parties and will only be used to process your request.
If you do not wish your data to be processed by Zendesk, we offer you alternative contact options, for example via the contact details provided in section 1.
Further information on data processing by Zendesk can be found in the privacy policy of Zendesk Inc. at https://www.zendesk.com/company/agreements-and-terms/privacy-policy/.
4. Data processing when using the web store - purposes and legal basis
If you would like to place an order in our webshop, we ask you to provide some personal data. The data required for processing the order is marked as mandatory, further information is voluntary.
4.1 Order and delivery
In order to place an order in our web store or by telephone, you must provide the products you wish to order, your first name and surname, a delivery address and a billing address. We process this data on the basis of Art. 6 para. 1 lit. b) GDPR. Data processing is necessary in order to process your order and deliver the ordered products.
In addition, you have the option of voluntarily providing further information on your gender, date of birth, company and telephone number in the order form in our webshop. This data is used by us to address our customers in a more personal and targeted manner and to contact you in the event of queries about your order or in the event of delays. The processing of the voluntarily provided data takes place on the basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interests consist in facilitating contact with you and defining and implementing target group-specific and other marketing measures.
The data collected by us will be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of your goods. This is done on the basis of Art. 6 para. 1 lit. b) GDPR.
RDG - Rieker Dienstleistungsgesellschaft mbH, Gänsäcker 31, 78532 Tuttlingen, Germany acts as a service provider on our behalf for the dispatch of goods and returns management. The data collected when you place your order and the data relating to the processing of your current order will be forwarded to RDG - Rieker Dienstleistungsgesellschaft mbH insofar as this is necessary for the dispatch of your goods or the processing of returns. The transfer takes place on the basis of Art. 6 para. 1 lit. b) GDPR. We have concluded an order processing agreement with RDG - Rieker Dienstleistungsgesellschaft mbH in accordance with Art. 28 GDPR, according to which RDG - Rieker Dienstleistungsgesellschaft mbH is obliged to strictly comply with this privacy policy, the applicable statutory data protection regulations and our instructions.
The service provider Billbee GmbH, Arolser Straße 10, 34477 Twistetal, Germany ("billbee") creates the receipts for invoices and returns on our behalf. For this purpose, we pass on your name, address and any other data required for invoices and returns to billbee. Your data will only be passed on if this is actually necessary for processing the order. The legal basis for the transfer of data to billbee is Art. 6 para. 1 lit. b) GDPR. We have concluded an order processing agreement with billbee in accordance with Art. 28 GDPR, according to which billbee is obliged to strictly comply with this privacy policy, the applicable statutory data protection regulations and our instructions. Further information on the processing of your data by billbee can be found at https://www.billbee.io/datenschutz/.
The data provided when placing the order will also be processed as part of payment processing (see section 4.2).
4.2 Payment and credit check
To complete your order process, you can choose between different payment methods. We process the payment data provided by you exclusively for the purpose of payment processing. Depending on the selected payment method, we work together with payment service providers as described below, who support us in processing your order
4.2.1 Adyen
If you choose to pay by credit card or invoice, payment will be processed by the payment service provider Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands ("Adyen"), to whom we will pass on the data you provided when placing your order in accordance with Art. 6 para. 1 lit. b) GDPR. Data processing is necessary in order to process and fulfill your order. Your data will only be passed on for the purpose of payment processing with the payment service provider Adyen and only to the extent that it is necessary for this purpose.
All data is transmitted in encrypted form. Adyen collects and stores the data and - depending on the selected payment method - passes it on to the companies involved in the payment process. We also transmit your IP address to Adyen for the purpose of fraud prevention and detection. The data transmitted to Adyen may be processed in order to identify suspicious, atypical order transactions, for example the simultaneous ordering of a large number of goods to the same address using different customer accounts. This is done on the basis of Art. 6 para. 1 lit. f) GDPR and serves our legitimate interest in preventing the misuse of our web store.
We have concluded an agreement with Adyen for order processing in accordance with Art. 28 GDPR, according to which Adyen is obliged to strictly comply with this data protection declaration, the applicable statutory data protection regulations and our instructions. Information on data protection at Adyen can be found at https://www.adyen.com/policies-and-disclaimer/privacy-policy and at https://www.adyen.help/hc/en-us/categories/360002679940-Adyen-on-my-bank-statement.
4.2.2 Credit card
If you decide to pay by credit card, the necessary payment data will be collected (name of the cardholder, card number, expiration date, CVC/CVV). Your payment data is collected and stored by Adyen and only passed on to the credit card company involved in the payment process. This is necessary for the processing of the credit card payment and is carried out on the basis of Art. 6 para. 1 lit. b) GDPR.
4.2.3 Invoice with Klarna
If you select the payment method "Invoice with Klarna", you will be redirected to the website of Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna") after completing the order, which will take over the further payment processing. For this purpose, the data you provided when placing the order (name, address, e-mail address, telephone number, invoice amount, items ordered) and your IP address will be transmitted to Klarna. This is necessary for the processing of the order via invoice and for fraud prevention and is carried out on the basis of Art. 6 para. 1 lit. b) GDPR.
Klarna processes your data for the purpose of identity and credit checks and for payment processing on its own responsibility. Your data will be processed in accordance with the applicable data protection regulations. Further information on data processing by Klarna can be found in the privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy. Information on the credit agencies with which Klarna works can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
4.2.4 PayPal
If you select the payment method "PayPal", you will be redirected to the website of PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") after completing the order, which will take over the further payment processing. For this purpose, the data you provide when ordering (name, address, e-mail address, telephone number) and your IP address will be transmitted to PayPal. This is necessary for the processing of the order via PayPal and for fraud prevention and is carried out on the basis of Art. 6 para. 1 lit. b) GDPR.
Further information on data processing by PayPal can be found in the privacy policy at .www.paypal.com/de/webapps/mpp/ua/privacy-full
4.2.5 ApplePay
We offer ApplePay as a payment method. This is a service provided by Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland ("Apple"). When you complete your order and select "ApplePay" as the payment method, your payment data will be encrypted by Apple and forwarded to the payment service provider for the purpose of processing the payment. We do not receive the payment data stored in your Wallet. Apple processes the personal data you have provided to ApplePay under its own responsibility. Rieker has no influence on this processing. The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR.
You can find more information about ApplePay here: https://www.apple.com/de/legal/privacy/data/de/apple-pay/.
4.2.6 GooglePay
We offer GooglePay as a payment method. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). If you complete your order and select "GooglePay" as the payment method, your payment data will be encrypted by Google and forwarded to the payment service provider for the purpose of processing the payment. We do not receive the payment data stored in your wallet. Google processes your personal data that you have provided to GooglePay under its own responsibility. Rieker has no influence on this processing. The legal basis for data processing is Art. 6 para. 1 lit. b) GDPR
You can find more information about GooglePay here: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de.
4.2.7 Mollie
We use Mollie HQ, Keizersgracht 126, 1015CW Amsterdam, The Netherlands ("Mollie") as a service provider when you order from us by telephone and pay in advance. We transmit the data you provide during the ordering process to Mollie exclusively for the purpose of payment processing. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.
You can find more information about Mollie's privacy policy here: https:
4.2.8 Carte Bancieres
For customers ordering from France, we payment by Cartes Bancaires. This is an offer from the Groupement d'Intérêt économique Cartes Bancaires CB. We transmit the data you provide during the ordering process to Cartes Bancaires solely for the purpose of processing payments. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.
You can find Cartes Bancaires' privacy policy here:
https://www.cartes-bancaires.com/protegezvosdonnees/porteurs/
4.3 Customer account
In the "My account" section and during the ordering process, you have the option of creating a personal customer account. In your customer account you can save your address details for your future purchases. You can also view your last orders and the current status of your current orders
When you create a customer account, we save your e-mail address with a password selected by you. We also store your orders from the last three years and your address data, if you have stored these in your customer account
You can delete your customer account at any time. To do so, please send a message to one of the addresses listed in section 1.
The legal basis for the processing of your e-mail address and your personal password is Art. 6 para. 1 lit. b) GDPR. The data processing is necessary to provide your customer account. We process the other address and order data stored in your customer account on the basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interests consist in providing you with a customer account to facilitate the processing of orders
If you order from us by telephone and do not yet have a customer account, our order hotline employee will create a customer account for you. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests are to provide you with a customer account to facilitate the processing of orders.
If you have a customer account and contact us via live chat, email or telephone, we can assist you directly in your customer account, e.g. by adding suitable items to your shopping cart, managing your shopping cart or changing your address details. However, we cannot complete any orders for you or change your access data. The legal basis for data processing is Art. 6 para. 1 lit. f) GDPR. Data processing for this purpose is in our legitimate interest. We would like to use this measure to improve our customer service and make your customer experience with us as pleasant as possible.
You can delete your customer account at any time in the account itself or contact our customer support at . [email protected]
4.4 Postal advertising
We reserve the right to use the first and last name you provide when ordering and the postal address you provide to send you interesting information and offers about our products by post
The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to send you personalized direct advertising.
You can object to the use of your data for advertising purposes at any time by sending a message to one of the addresses listed in section 1. Further information on your right to object can be found in section 9.
5. To what extent do we process your data under joint responsibility?
In principle, we process your data under our own responsibility. In addition, as part of certain processing activities, we also process your data with other companies under joint responsibility in accordance with Art. 26 GDPR. Below you will find further information on the processing activities for which this is the case and the associated data protection consequences.
5.1 Shared responsibility with Meta Platforms
We are joint controllers with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland in relation to the use of the Meta Pixel, Meta Conversion Tracking and Meta Social Media Plugins (Meta Sharer) services.
Insofar as personal data is collected on our website in connection with the use of this service and forwarded to Meta, we and Meta Platforms Ireland Limited are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Meta Platforms Ireland Limited. The processing carried out by Meta Platforms Ireland Limited after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly are set out in a joint controllership agreement.
According to this agreement, we are responsible for providing the data protection information when using the social media plugins and for the correct technical implementation on our website. Meta Platforms Ireland Limited is responsible for ensuring the rights of data subjects, insofar as this concerns data processed within the scope of joint responsibility. For this purpose, you can contact Meta Platforms Ireland Limited directly to exercise your data subject rights. If you assert your data subject rights with us, we will forward them to Meta Platforms Ireland Limited.
Further information on the joint controllership agreement, the processing of your data by Meta Platforms and the exercise of your data subject rights vis-à-vis Meta Platforms can be found here:
https://www.facebook.com/legal/controller_addendum
https://www.facebook.com/about/privacy
5.2 Shared responsibility with Pinterest
We are joint controllers with Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland in connection with the Pinterest Tag and Pinterest Conversion Tracking service and Pinterest social media plugins.
Insofar as personal data is collected on our website with the help of these services and forwarded to Pinterest, we and Pinterest Europe Ltd. are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Pinterest Europe Ltd. The processing carried out by Pinterest Europe Ltd. after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly are set out in an agreement on joint responsibility.
According to this agreement, we are responsible for providing the data protection information when using the social media plugins and for the correct technical implementation on our website. Pinterest Europe Ltd. is responsible for ensuring the rights of data subjects, insofar as this concerns data that is processed within the scope of joint responsibility. For this purpose, you can contact Pinterest Europe Ltd. directly to exercise your data subject rights. If you assert your data subject rights with us, we will forward them to Pinterest Europe Ltd.
Further information on the joint controllership agreement, the processing of your data by Pinterest and the exercise of your data subject rights vis-à-vis Pinterest can be found here:
https://business.pinterest.com/de/pinterest-advertising-services-agreement
https://policy.pinterest.com/privacy-policy
5.3 Shared responsibility with TikTok
We are joint controllers with TikTok Information Technologies UK Limited, 6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom ("TikTok UK") and TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok Ireland") in relation to the TikTok Pixel service.
The joint controllership covers the collection and transmission of event data processed in connection with the service. There is an agreement with TikTok on processing as joint controllers, in which the distribution of data protection obligations between us as the provider of the website and TikTok is defined. In this agreement, both parties have agreed, among other things
o that we, as the provider of the website, are responsible for providing visitors with information in accordance with Art. 13, 14 GDPR on the joint processing of personal data;
o that TikTok is responsible for enabling the rights of data subjects in accordance with Art. 15 to 20 GDPR with regard to the personal data stored by TikTok after joint processing.
The existing agreement with TikTok on joint responsibility with the stipulations made therein as well as information on data processing by TikTok and the possibility of asserting data subject rights can be accessed here:
https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms
https://www.tiktok.com/legal/page/eea/privacy-policy/
6. Recipients of personal data
The personal data collected by us when you visit and use our website for purely informational purposes (see section 2.) and also the personal data collected by us when you use certain functions and offers on our website (see section 3.) and our web store (see section 4.) will not be passed on to other recipients or transmitted in any other way, unless this is expressly stated in the privacy policy. Exceptions to this are mandatory transfers of personal data to state institutions and authorities as well as private rights holders on the basis of legal regulations or judicial or official decisions as well as the necessary transfer to state institutions and authorities in the event of attacks on our legal interests for the purposes of legal or criminal prosecution.
When operating our website and providing and processing individual functions and offers, we sometimes use external technical and other service providers who support us in the provision of our services and have been carefully selected by us. If necessary, these service providers engaged by us will process your personal data within the scope of their respective assignment in accordance with our instructions for the purposes stated in this data protection notice. They are contractually obliged to strictly comply with this privacy policy, the applicable statutory data protection provisions and our instructions (so-called processors pursuant to Art. 28 GDPR). The same applies to any subcontractors, insofar as our processors use them with our prior consent.
As part of website hosting and troubleshooting, maxcluster GmbH, Technologiepark 8, 33100 Paderborn, Germany, processes the data collected on our behalf (see section 2.1)
As part of the "DotDigital" marketing service, dotdigital EMEA Ltd, No. 1 London Bridge, London, SE1 9BG, United Kingdom, processes the data required for this on our behalf (see sections 2.2.6 and 3.2)
We verify your address data as part of your order. For this purpose, we use the Loqate program of GBG Group plc, 128 Queen Victoria Street, London, EC4V 4BJ, United Kingdom, with whom we have concluded a data processing agreement. In June 2021, the EU Commission adopted an adequacy decision that recognizes the level of data protection in the UK as equivalent to EU standards. The data processing is in our legitimate interest in the validation of entered addresses on the basis of Art. 6 para. 1 lit. f) GDPR.
We work with the following additional service providers to process your orders (see section 4.):
- RDG - Rieker Dienstleistungsgesellschaft mbH, Gänsäcker 31, 78532 Tuttlingen, Germany
- Billbee GmbH, Arolser Straße 10, 34477 Twistetal, Germany
- DHL Paket GmbH, Sträßchensweg 10; 53113 Bonn, Germany
7. Processing of personal data in "third countries"
We generally process the personal data collected on the website within Switzerland or the member states of the European Union. The EU Commission has issued an adequacy decision for Switzerland (2000/518/EC), so that the appropriate level of data protection is ensured in accordance with Art. 45 GDPR. Personal data will only be transferred to other "third countries", i.e. countries outside the European Union and the European Economic Area, if we expressly inform you of this
Some of the processing operations listed in section 2. involve the transfer of data to the servers of third-party providers in the USA. Insofar as you have consented to this processing by activating the categories "Statistics" and/or "Marketing" and/or "External media cookies" in the consent management tool "Cookiebot", the data processing thus enabled is also based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR in conjunction with Art. 49 para. 1 lit. a) GDPR. For the USA, there is currently an adequacy decision with the EU-U.S. Data Privacy Framework, which serves as the basis for data transfers to certified organizations in the USA.
If the data transfer is based on Article 46, 47 or 49 (1) subparagraph 2 GDPR, you can obtain from us a copy of the guarantees for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of the guarantees. Please use the information in section 1 for this purpose.
The Zendesk group of companies (Section 3.3) has Binding Corporate Rules (BCR) approved by the Irish Data Protection Authority. These are binding corporate rules that legitimize the internal transfer of data to third countries outside the EU and the EEA. Details on the BCR and the additional security measures within Zendesk can be found here: https://www.zendesk.de/blog/update-privacy-shield-invalidationeuropean-court-justice/.
8. Data security
We take extensive technical and organizational precautions to protect your personal data stored and processed by us against misuse, accidental or intentional manipulation, loss, access by unauthorized persons and other data security risks. We use state-of-the-art hashing procedures for passwords. Our data security precautions are continuously improved in line with technological developments. Our employees are obliged by us to maintain confidentiality and to comply with the relevant data protection regulations.
This website uses TLS encryption to protect the transmission of personal data and other confidential content.
9. Duration of storage
In general, we only store personal data for as long as this is necessary to fulfill the purpose of the respective data processing or until you request us to delete the personal data for other legitimate reasons (see Art. 17 para. 1 GDPR). After expiry of these storage periods or upon your justified request for deletion, we will check whether certain personal data is still required for (other) legitimate purposes and, if not, whether contractual or statutory retention periods prevent the deletion of the personal data. In these cases, the personal data concerned will continue to be stored for as long as necessary to fulfill this (other) legitimate purpose or for the duration of the respective contractual or statutory retention period for these purposes. For other purposes, however, they will be blocked and then permanently deleted after expiry of the last contractual or statutory retention period.
The technical communication data contained in the server log files (see section 2.1.) will be deleted after 7 days at the latest.
The session cookies we use are deleted when you close your browser. Persistent cookies used by us remain stored on your end device until their specified lifespan has expired or until you remove them manually (see section 2.2.1.). The storage period of the individual cookies can be found in our cookie statement. The data collected via Google Analytics is deleted when the IP addresses are anonymized (see section 2.2.4.). We have limited the storage period of the data collected by Google Analytics to a maximum of 14 months by agreement with Google. Data whose maximum storage period has been reached is automatically deleted once a month.
The data collected via the contact form (see section 3.1) will only be stored by us for as long as is necessary to process your inquiry and any follow-up questions. The data will be deleted on a regular basis no later than six months after the last active contact from you.
The data collected in the course of sending the newsletter (section 3.2) will be stored for as long as is necessary to send the newsletter. If you unsubscribe from the newsletter, your data will be deleted. The data from the statistical analysis of the e-mail newsletter is stored anonymously.
The data collected in the context of an inquiry via Zendesk (Section 3.3) will be stored for as long as is necessary to process your inquiry and any follow-up questions.
The data from your web store orders (sections 4.1 and 4.2) will be stored for as long as is necessary for the purposes for which they are processed or for as long as you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, regardless of the processing purposes.
The data linked to your customer account (section 4.3) will be stored for as long as your customer account exists. If you delete your customer account, the associated data will be deleted unless there is a legal obligation to retain it.
10. Your rights
Insofar as the legal requirements pursuant to Art. 15 et seq. GDPR, you have the following rights with regard to your personal data stored by us:
- You can request information from us at any time as to whether personal data and which categories of personal data about you are stored by us, for which purposes they are processed and which recipients or categories of recipients may receive them. purposes for which they are processed and which recipients or categories of recipients may receive them. Furthermore, you can request the other information listed in Art. 15 GDPR about your personal data from us (right of access).
- In accordance with the legal requirements, you also have a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR) and a right to restriction of processing (blocking) (Art. 18 GDPR) of your personal data.
- In accordance with Art. 20 GDPR, you also have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format; you may also transmit this personal data to other controllers or have it transmitted (right to data portability).
- You also have the right to withdraw your consent at any time.
- In addition, you have the right to object to data processing based on the legitimate interests of the controller or a third party in accordance with Art. 6 para. 1 lit. f) GDPR (see sections 2.3, 3.1, 3.2, 3.3, 4.1, 4.2.1, 4.3, 4.4) if the legal requirements under Art. 21 GDPR are met.
To assert your rights as a data subject, you can send a message at any time to one of the addresses listed under point 1.
Furthermore, pursuant to Art. 77 (1) GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
11. Changes to the privacy policy
We may amend this Privacy Policy at any time to reflect changes in factual or legal circumstances and will always publish the latest version of this Privacy Policy here. You can tell when this privacy policy was last amended by the date ("Last updated") at the beginning of this privacy policy.
12. Cookie declaration