Data Privacy
Your Cookie settings
Introduction
We are committed to protecting your personal data and would like to inform you about the data protection measures taken by our company.
In this statement (“privacy policy”) we inform you about how we process your personal data.
A) General
1.) Definitions
Based on Art. 4 GDPR [German] General Data Protection Regulation] the following terms have the following meaning in this privacy policy statement:
- “personal data” (Art. 4 no. 1 GDPR) means any information relating to an identified or identifiable natural person (“data subject”). An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or by means of information specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. A person may also be identified by combining such information or by linking it with additional information. The way in which the information is obtained or the form the information takes (also photos, videos or audio recordings may contain personal data) is irrelevant.
- “processing” (Art. 4 no. 2 GDPR) means any operation which is performed on personal data, whether or not by automated (i.e. computer-assisted) means. This includes in particular the collection (i.e. the procurement), recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction of personal data and the alteration of the original purpose of the data processing.
- “controller” (Art. 4 no. 7 GDPR) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- “third party” (Art. 4 no. 10 GDPR) means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process the personal data; these include also intra-group legal persons.
- “processor” (Art. 4 no. 8 GDPR) means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with the controller’s instructions (e.g. IT service provider). Within the meaning of the data protection laws a processor is, in particular, not a third party.
- “consent” (Art 4 no. 11 GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2.) Name and address of the controller
The controller responsible for the processing of your personal data within the meaning of Art 4 no. 7 GDPR is the company itself:
Citizen Watch Europe G.m.b.H.
Hans-Duncker-Str. 8
D-21035 Hamburg
Telefax: +49 40 226 307 330
Email: shop@citizenwatch.de
3.) Legal bases for data processing
In principle, the processing of personal data is not legally permitted and lawful only if one of the following justifications applies:
- Art. 6 (1) a GDPR (“consent”): If the data subject has given his or her consent freely by way of an informed and unambiguous statement or a clear affirmative action to the processing of personal data relating to his or her personal data for one or more specific purposes;
- Art. 6 (1) b GDPR: If the processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
- Art. 6 (1) c GDPR: If the processing is necessary for compliance with a legal obligation to which the controller is subject (such as the legally required retention of documents);
- Art. 6 (1) d GDPR: If the processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- Art. 6 (1) e GDPR: If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
- Art. 6 (1) f GDPR (“legitimate interests”): If the processing is necessary for the purposes of the legitimate (in particular legal or economic) interests pursued by the controller or by a third party, except where such interests are overridden by the opposing interests or rights of the data subject (in particular where the data subject is a minor).
The storage of information in the terminal equipment of the end user or the access to information already stored in the terminal equipment is not permitted unless one of the following justifications applies:
- Sec. 25 (1) TTDSG [German Telecommunications-Telemedia Data Protection Act]: If the end user has given his or her consent on the basis of clear and comprehensive information. The consent must be given in accordance with Art. 6 (1) a GDPR;
- Sec. 25 (2) no. 1 TTDSG: If the sole purpose is the transmission of a message by means of a public telecommunication network or
- Sec. 25 (2) no. 2 TTDSG: If the storage or the access is essential for the provider of the telemedia service to make available a telemedia service that was expressly requested by the user.
In the following we set out the processing operations we perform and the relevant legal basis. In some cases more than one legal basis may be applicable.
4.) Erasure of data and storage term
In the following we indicate for how long we will store the data we have processed and when these data will be erased or blocked. If in the following no storage term is mentioned, your personal data will be erased or blocked as soon as the purpose or the legal basis for the storage ceases to exist.
However, the data may be stored for longer periods than those indicated if we have entered or may enter into a lawsuit or any other legal proceeding against you or if the storage is required by law (such as sec. 257 HGB [German Commercial Code], sec. 147 AO [German Fiscal Code] to which we, as the controller, are subject to. Once the legally required storage period has expired, the personal data will be blocked or erased unless we are required to continue to store the data and there is a legal basis for doing so.
5.) Cooperation with processors
Like other larger enterprises we engage service providers in Germany and abroad for dealing with our business processes (e.g. with regard to IT, logistics, telecommunication, sales and marketing). Such service providers act strictly according to our instructions and are bound by contract to comply with the provisions of the data protection laws within the meaning of Art. 28 GDPR.
6.) Your rights
At any time you may assert the rights you have as a data subject whose personal data we have processed using the contact data shown under A. (2) above. As a data subject you have the following rights:
- Under Art. 15 GDPR you may request information about your personal data we processed. In particular you may request information about the purposes of the processing, the categories of data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right of rectification, erasure, restriction of processing or the right to object to such processing, the existence of a right to lodge a complaint, the source of your data if these were not collected from you and about the existence of automatic decision-making including profiling and, if applicable, meaningful information about details.
- Under Art. 16 GDPR you may request that we rectify without undue delay any inaccurate personal data we have processed or that we complete your personal data.
- Under Art. 17 GDPR you may request the erasure of your personal data we stored unless the processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for establishing, exercising or defending legal claims.
- Under Art. 18 GDPR you may request the restriction of the processing of your data to the extent you contest the accuracy of the data or if the processing is unlawful.
- Under Art. 20 GDPR you may request that we provide to you the data you provided to us in a structured, commonly used and machine-readable format or that we transmit the data to another controller;
- Under Art. 21 GDPR you may object to the processing if the processing is performed under Art. 6 (1) e or f GDPR. This applies in particular to cases where the processing of the data is not necessary for performing a contract we concluded with you. Unless you object to direct marketing, we would ask you, when exercising your right to object, to set out the reasons why you do not wish us to process the data in the way we have processed your data. If you provide valid reasons for your objection, we will check the facts and either discontinue the data processing or adjust it accordingly or set out the compelling and legitimate grounds for continuing the processing.
- Under Art. 7 (3) GDPR you may inform us that you wish to withdraw your consent given to us earlier (also if it was given prior to the GDPR coming into force, i.e. 25 May 2018) – that means your consent you have given freely by way of an informed and unambiguous statement or a clear affirmative action to the processing of relevant personal data for one or more specific purposes, if you have given such consent. As a consequence in future we are not allowed to process the data for which the consent was given and
- under Art. 77 GDPR you may lodge a complaint with a data protection authority with regard to the processing of your personal data in our company.
B) Personal data we process
While you are using our website we will collect, store and process the following categories of personal data:
1.) Log Files
While you are visiting our website a so-called server log file will be temporarily stored in our web server in anonymised form. This file contains:
- the page from which the page was referred (referrer URL)
- he name and the URL of the requested page
- the date and the time of the request
- the description of the type, language and version of the web browser used
- the IP address of the computer making the request, which will be shortened in such a way that it is no longer possible to identify a person
- the size of the data transmitted
- the operating system
- information about whether the request was successful (access status/http status code)
- the GMT time zone difference
The log file data are processed for statistical purposes and for enhancing the quality of our website, in particular its stability and the connection security (legal basis is Art 6 (1) a or f GDPR).
Your data will be processed only for such periods that are necessary for achieving the above-mentioned processing purposes and the legal bases applicable to the processing purposes apply to them analogously.
2.) Contact form data
When using contact forms the data transmitted will be processed (e.g. gender, name and first name, email address and time of transmission). These data are collected for the purpose of attributing the request to you and to reply to the inquiry. The legal basis is your express consent that you have given with your request for replying to your inquiry (Art. 6 (1) a GDPR). You may withdraw such consent at any time. For this purpose you may send us an informal email. The data we collected in connection with the contact form will be erased once your inquiry has been finally dealt with.
3.) Customer account
For your convenience we offer to store your personal data permanently in a password-protected customer account.
Creating a customer account is always optional and is made on the basis of your consent given under Art. 6 (1) a GDPR. You may access your customer account and make changes at any time.
In addition to the data requested when making an order you have to enter your own password for your customer account. You can access your customer account using your password together with your email address. Please note that after leaving our website you will remain logged in unless you have logged yourself out. The deletion of your customer account is possible at any time if there are no other legal bases to prevent this (e.g. warranty/guarantee claims, unpaid invoices etc.). Please note that the data visible in the customer account are not erased as well if you have placed an order with us at any one time. Your data will be erased automatically after the retention periods applicable under commercial and tax laws have expired. The legal basis for this data processing is Art. 6 (1) c GDPR and Art. 6 (1) f GDPR.
4.) Hosting
The contents of our website are hosted with the provider Hetzner. The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (“Hetzner”). For details please refer to Hetzner’s own privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz. Using Hetzner is based on Art. 6 (1) f GDPR. We have a legitimate interest in that our website is presented as reliably as possible. If you were requested to give your consent, the data are processed exclusively on the basis of Art. 6 (1) a GDPR and sec. 25 (1) TTDSG, if such consent encompasses the storage of cookies or the access to information on the end user’s terminal (e.g. device fingerprinting) within the meaning of the TTDSG. You may withdraw your consent at any time. We have entered into a processing agreement for using the above-mentioned service. Such agreement is required under the data protection laws and guarantees that the personal data of the visitors of our website are processed by the service provider strictly according to our instructions and in compliance with the GDPR.
5.) Mailjet
Our website uses Mailjet for sending newsletters. The service provider is Mailjet SAS, 13-13 bis, Rue de l’Aubrac – 75012 Paris, France, with whom we have entered into a processing agreement as required under Art. 28 GDPR. Mailjet is a service for organising and analysing the sending of newsletters. The data you entered for receiving a newsletter (e.g. email address) are stored on the servers of Mailjet in the EU. The newsletter we send using Mailjet enable us to analyse the behaviour of the recipients of the newsletters. The analysis includes information about how many recipients have opened the newsletter message and how many times a link in a newsletter was clicked. By means of the so-called conversion tracking we are also able to analyse whether after clicking a link in a newsletter a pre-defined action is performed (e.g. purchase of a product on our website). The privacy policy adopted by Mailjet applies: https://www.mailjet.de/privacy-policy/. For more detailed information about the functions provided by Mailjet please click the following link: https://www.mailjet.com/products/.
The data are processed in accordance with your consent (Art. 6 (1) a GDPR). You may withdraw such consent at any time by unsubscribing from the newsletter. Any data processing activities performed prior to your withdrawing your consent will remain lawful. If you do not wish an analysis by Mailjet, please unsubscribe from the newsletter. The relevant link is provided in every newsletter message. We store the data you enter on our website for receiving our newsletter until you unsubscribe from the newsletter and will then erase the data both from our servers and from the Mailjet servers. This does not affect any data we store for other purposes (such as email addresses for the members’ area). For further details please refer to the information provided by Mailjet about “Security and Privacy” at https://www.mailjet.de/sicherheit-datenschutz/,
6.) Product reviews
You may add a review of any product in our online shop using the link “Add Review!”. The following data will then be processed by us: the number of stars you have given for the product, your email address and your commentary. We process your data to publish your review on our website. We process your email address to ensure that the review is genuine, i.e. was written by a human and not by a computer programme (bot). The recipients of the data are the technical operator and the hosting provider of our website (cf above B (4)). Your review will be stored in the online shop for an indefinite time. Your email address, however, will be anonymised after two months. The data processing is based on Art. 6 (1) f GDPR because we have an interest in making the presentation of our products more attractive by adding our customers’ experience.
7.) Notification service “product availability”
If a product presented in our online shop is temporarily not available, you may use the notification function and enter an email address to which we will send an automatic email notification once the product is again available. When using the notification function the following data will be processed: Your email address and the relevant product. You submit the data on a voluntary basis. However, if you do not submit these data, you cannot use the notification function. We process your personal data to deal with your inquiry and to contact you for this purpose. The recipients of the data are the technical operator and the hosting provider of our website. We will store your data until we have sent you a reply. If the product is not available within six months, your data will be erased automatically without notification. We process the data because these are measures taken prior to entering into a contract in accordance with Art. 6 (1) b GDPR.
8.) Payments
We process your payment details for dealing with the payment, e.g. when you buy a product. Depending on the method of payment, we will forward the information to a third party. The legal bases for the processing of such data are Art. 6 (1) a, Art. 6 (1) b and Art. 6 (1) f GDPR.
PayPal
- If you use PayPal for the payment, we will transmit your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“Paypal”) for dealing with the payment. Paypal offers its services credit card via Paypal, direct debit via Paypal or - if offered - “purchase on account” via Paypal subject to credit checks. Paypal uses the result of the credit check in relation to the statistical probability of payment defaults for determining which payment method to offer. The credit check may be based on probability values (so-called score values). Any score values taken into account in arriving at the result of the credit check are based on a scientifically recognized mathematical statistical method. In calculating the score values, address data are, among other data, taken into account. For further information please refer to Paypal’s own privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Mollie
- Our website uses Mollie, an online payment service provided by Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. For further details about data processed by Mollie please refer to https://www.mollie.com/at/privacy?tid=331689755931.
9.) Cookies
Our website uses cookies. Cookies are small text files that are stored in your computer and assigned to your browser through a specific character string so that certain information will be provided to the website placing the cookie. Cookies cannot execute programmes or transmit a virus to your computer so that they do not cause any harm. They are used to make a website more user-friendly and more effective for your convenience.
Cookies may contain data that recognise the device used. Some cookies contain data that merely relate to certain settings that cannot be tracked to a person. Cookies cannot directly identify a user.
A distinction is made between cookies placed at a session, which are erased as soon as you close your browser, and permanent cookies, which remain stored after a session has ended. Cookies are also distinguished by function:
- Technical cookies: These cookies are essential for using a website and its basic functions and for ensuring that the website is secure. They neither collect information about you for marketing purposes nor do they store any information about what websites you visited;
- Technical cookies: These cookies are essential for using a website and its basic functions and for ensuring that the website is secure. They neither collect information about you for marketing purposes nor do they store any information about what websites you visited;
- Advertising cookies, targeting cookies: These cookies are used to offer advertisements tailored to the website user’s requirements or to make offers by third parties and to analyse the effectiveness of these offers. Advertising and targeting cookies are stored for a maximum of 13 months.
- Sharing cookies: These cookies are used to improve the interaction of our website with other services (e.g. social networks). They are stored for a maximum of 13 months.
The legal basis for cookies that are essential for providing the services you expressly request is sec. 25 (2) no. 2 TTDSG. Any use of cookies that are technically not necessary requires your consent that you have expressly and actively given in accordance with sec. 25 (1) TTDSG in connection with Art. 6 (1) a GDPR. This applies in particular to the use of performance, advertising, targeting or sharing cookies.
10.) YouTube
On YouTube we maintain an online presence in order to present our company and our services and to communicate with our customers. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Please note that it is possible that user data may be processed outside of the European Union, in particular in the USA. This may involve higher risks for users in that e.g. access at a later date may be more difficult. We are unable to access such user data. Only YouTube has access to such data.
We use YouTube for presenting our online offers in an appealing manner. This is a legitimate interest within the meaning of Art. 6 (1) f GDPR. If you were requested to give your consent, the data are processed exclusively on the basis of Art. 6 (1) a GDPR and sec. 25 (1) TTDSG, if such consent encompasses the storage of cookies or the access to information on the end user’s terminal (e.g. device fingerprinting) within the meaning of the TTDSG. You may withdraw your consent at any time. For further information about Youtube’s own privacy policy please refer to
https://policies.google.com/privacy?hl=de.
11.) Google Tag Manager
Our website uses Google Tag Manager, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is designed for sellers to administer website tags via an interface. The tool is a mere domain that implements tags but that neither uses nor stores personal data. The tool triggers other tags that may collect data under certain circumstances. Google Tag Manager does not access these data. If at domain or cookie level any tags were deactivated, this remains in place for all tracking tags provided that they are implemented using Google Tag Manager. The legal basis for using Google Tag Manager is our legitimate interest in accordance with Art. 6 (1) f GDPR.
Google processes your data i.a. in the USA. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF). The processing of data by recipients located in third countries or a transmission to such recipients by Google is based also on Art. 46 GDPR, the so-called standard contract clauses. Standard contract clauses are designed to ensure that your data are processed according to European data protection standards whenever they are transmitted to third countries and stored there.
For details refer to https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. For further information about the processing of user data please refer to Google’s own privacy policy at https://policies.google.com/privacy?hl=de.
12.) Google Analytics
Our website uses Google Analytics. This is a website analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Our using Google Analytics is subject to your consent, which we will have obtained by means of our cookie policy menu. Such consent is, in accordance with Art. 6 (1) a GDPR, the legal basis for processing personal data that may be collected by Web Analytics Tools. In addition to the consent there is a legitimate interest to analyse website usage. Our legitimate interest is the analysis, optimisation and effective operation of our internet presence. The relevant legal basis is Art. 6 (1) f GDPR. However, we do not use Google Analytics unless we have obtained your consent.
Our using Google Analytics is subject to your consent, which we will have obtained by means of our cookie policy menu. Such consent is, in accordance with Art. 6 (1) a GDPR, the legal basis for processing personal data that may be collected by Web Analytics Tools. In addition to the consent there is a legitimate interest to analyse website usage. Our legitimate interest is the analysis, optimisation and effective operation of our internet presence. The relevant legal basis is Art. 6 (1) f GDPR. However, we do not use Google Analytics unless we have obtained your consent.
The data collected in this way are used by Google to provide us with reports about website visits and user activities. Such data may also be used to provide further services connected with our internet presence and internet usage. Google states that it does not link your IP address to any other data. For further information about data protection at Google please refer to https://www.google.com/intl/de/policies/privacy/partners, these include ways to opt out of their use of the data. In addition, Google offers an opt-out browser add-on and further information at https://tools.google.com/dlpage/gaoptout?hl=de. This add-on can be installed by any commonly used internet browser and offers you further ways of monitoring your data that is collected by Google while you are visiting our website. The add-on informs Google Analytics’ JavaScript (ga.js) that information related to the visit of our website must not be transmitted to Google Analytics. However, this would not prevent the information from being transmitted to us or other web analysis service providers.
Google processes your data i.a. in the USA. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
13.) Google Ads
Our website uses Google Ads. Google Ads is an online advertising programme provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to run advertisements in the Google search engine or on third parties’ websites if the user enters certain keywords in the Google search engine (keyword targeting). In addition, targeted advertisements can be run based on the user data collected by Google (e.g. geographical location and interests) (target group targeting). We can analyse these data for the keywords that have resulted in running our advertisements and for how many advertisements have led to the relevant clicks. Google Ads is used subject to the consent you have given in accordance with Art. 6 (1) a GDPR and sec. 25 (1) TTDSG. You may withdraw your consent at any time.
The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF). In addition, the data transmission to the USA is based on the standard contract clauses defined by the EU Commission. For details refer to https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
14.) Google Conversion Tracking
Our website uses Google Conversion Tracking provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Conversion Tracking enables both Google and ourselves to establish whether users have performed certain actions. For example, we can analyse which buttons on our website were clicked and how often and which products have been most often been viewed or bought. This information is used to prepare conversion statistics. These show the total number of users who clicked our advertisements and which actions they have performed. We do not generate information that would enable us to identify a user personally. Google uses cookies or similar recognition technologies for identification purposes. Google Conversion Tracking is used subject to the consent you have given in accordance with Art. 6 (1) a GDPR and sec. 25 (1) TTDSG. You may withdraw your consent at any time. For further information about Google Conversion Tracking please refer to Google’s own privacy policies at https://policies.google.com/privacy?hl=de. Google processes your data i.a. in the USA. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
15.) Google Looker Studio
Our website uses the software Google Looker Studio, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use segments for marketing and optimisation purposes, in particular to analyse the usage of our internet presence and to continually improve individual functions and offers and the user experience. Such analyses of the user behaviour enable us to improve our range of products and make it more interesting to you as a user. Google Looker Studio is used subject to the consent you have given in accordance with Art. 6 (1) a GDPR. For further details about how Google Looker Studio processes your data please refer to https://looker.com/trust-center/privacy/policy. Please note that it is possible that user data may be processed outside of the European Union, in particular in the USA. This may involve higher risks for users in that e.g. access at a later date may be more difficult. We are unable to access such user data. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
16.) Google Maps
Our website uses the map service Google Maps. The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. For using the functions provided by Google Maps it is necessary to store your IP address. Usually such information is transmitted to and stored on a server operated by Google in the USA. The owner of this website has no control over such data transmission. If Google Maps is activated, Google may use Google fonts to ensure standardised presentation. When visiting Google Maps your browser will download the relevant web fonts to your browser cache in order to show texts and fonts correctly. We use Google Maps for presenting our online offers in an appealing manner and to facilitate finding the places indicated on our website. This is a legitimate interest within the meaning of Art. 6 (1) f GDPR. If you were requested to give your consent, the data are processed exclusively on the basis of Art. 6 (1) a GDPR and sec. 25 (1) TTDSG, if such consent encompasses the storage of cookies or the access to information on the end user’s terminal (e.g. device fingerprinting) within the meaning of the TTDSG. You may withdraw your consent at any time.
Please note that it is possible that user data may be processed outside of the European Union, in particular in the USA. This may involve higher risks for users in that e.g. access at a later date may be more difficult. We are unable to access such user data. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
The use of Google Maps and the information obtained by using Google Maps is subject to Google’s Terms of Service https://policies.google.com/terms?gl=DE&hl=de and the terms of Google Maps https://www.google.com/intl/de_de/help/terms_maps.html. In addition, Google offers further information at https://adssettings.google.com/authenticated, https://policies.google.com/privacy.
17.) Google reCAPTCHA
Our website uses Google reCAPTCHA for checking and preventing interactions on our website through automated access e.g. by so-called bots. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).
This service enables Google to locate the website from which a request is sent and the IP address you use for the so-called reCAPTCHA entry box. Apart from your IP address Google may collect further information necessary for providing this service and for ensuring its proper operation.
The legal basis is Art. 6 (1) f GDPR. Our legitimate interest is ensuring the security of our internet presence and preventing unwanted, automated access such as spam. Google offers further information at https://policies.google.com/privacy with regard to their treatment of your user data.
Google processes your data i.a. in the USA. The data are transmitted to the USA under Art. 45 (1) GDPR on the basis of the adequacy decision made by the European Commission. The US enterprises involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
18.) Facebook-Pixel
Our website uses for tracking visitors’ actions on Facebook the conversion tracking Facebook Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook Pixel can trace visitors’ activities on a website after they have clicked on a Facebook ad and are referred to the owner of the website. This allows assessing the effectiveness of Facebook advertising for statistical and market research purposes so that future advertising measures can be optimised. As the collected data are anonymised, we do not know the identity of the users. However, the data are stored and processed by Facebook so that they can match the website visitor to the respective Facebook user account. Facebook is therefore able to use the data for its own advertising purposes in accordance with the Facebook privacy policy. This enables Facebook to place ads on Facebook pages as well as outside Facebook. We do not have any control over the use of the data. Facebook Pixel is used subject to the consent you have given under Art. 6 (1) a GDPR and sec. 25 (1) TTDSG. You may withdraw your consent at any time.
Please note that it is possible that user data may be processed outside of the European Union, in particular in the USA. This may involve higher risks for users in that e.g. access at a later date may be more difficult. We are unable to access such user data. The data transmission to the USA is based on the standard contract clauses defined by the EU Commission. For details refer to https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For further information about Facebook’s own privacy policy please refer to https://de-de.facebook.com/about/privacy/. You may opt out of the remarketing function ‘Custom Audiences’ under settings for ads at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you have to log in to your Facebook account. If you do not have a Facebook account, you may opt out of user-based advertising on the website provided by the European Interactive Digital Advertising Alliance at http://www.youronlinechoices.com/de/praferenzmanagement/.
19.) Tangiblee
For comparing sizes on our website we use Tangiblee provided by yRuler Inc., 420 W. Huron Street, Chicago, Illinois 60654. For this purpose your browser will transmit to Tangiblee several data such as an anonymised IP address, device type and information about the use of our website. The data will be transmitted to and stored on the servers operated by Tangiblee in the United States of America. Furthermore, Tangiblee uses the data in an aggregated form for improving their services. For further details refer to https://www.tangiblee.com/privacy-policy. The legal basis for using Tangiblee is our legitimate interest in accordance with Art. 6 (1) f GDPR.
20.) Semknox
Our website uses the services of SEMKNOX GmbH, Webergasse 1, 01067 Dresden, for our product search, which enables us to show you the products that fit the search query you entered in the search box. The product search processes in particular your IP address, the contents of your search query, the session ID and the query ID. The information collected by Java-Script-Code about your use of the search function, i.e. the content of your search query, the session ID and the query ID, is processed by SEMKNOX on our behalf in order to respond to your search query or to suggest possible products while you are entering your search query. The data transmitted include the IP address, which is used by SEMKNOX exclusively for purposes of data security. The recipient of the data is SEMKNOX GmbH, Webergasse 1, 01067 Dresden. The query ID will be stored for 24 hours. The transmitted IP address will be erased by SEMKNOX after 30 days. The contents of the search query will be permanently stored by SEMKNOX without reference to you personally. The session ID will be stored by SEMKNOX until the purpose is achieved and then erased. The legal basis for the data processing is our legitimate interest in presenting our website tailored to the customers’ needs in accordance with Art. 6 (1) f GDPR.