I. Name and contact details of the data controller
This data protection information applies to the data processing by:
Data controller:
Meindl Bekleidung GmbH & Co. KG
Dorfplatz 8-10
83417 Kirchanschöring
E-Mail: datenschutz-bekleidung@meindl.de
Tel.: +49 8685 950-0
II. Name and address of the data protection officer
Proliance GmbH / www.datenschutzexperte.de
Dominik Fünkner
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
E-Mail: datenschutzbeauftragter@datenschutzexperte.de or dsb@datenschutzexperte.de erreichbar.
III. General notes on data processing
1. Scope of processing of personal dataWe essentially process our users’ personal data only to the extent that is necessary to provide a functional website and to make our content and services available. We only regularly process our users’ personal data with the consent of those users. One exception to this applies in those cases in which it is not possible to first obtain consent for genuine reasons and processing of the data is permitted by statutory regulations.
2. Legal basis for the processing of personal data
Where we obtain consent to process personal data from the data subject, we do this on the legal basis of Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR).
The legal basis for the processing of personal data that is necessary for the performance of a contract where one of the contracting parties is the data subject is Art. 6 para. 1 lit. b GDPR. This also applies to processing that is necessary to take steps prior to entering into a contract. If it is necessary to necessary for compliance with a legal obligation to which our company is subject, the legal basis is Art. 6 para. 1 lit. GDPR. The legal basis in the event that the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person is Art. 6 para. 1 lit. d GDPR. If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR.
3. Erasure of data and retention periodThe personal data of the data subject is deleted or blocked as soon as the reason for retention ceases to apply. It may be retained for longer if this was provided for by European or national governments in regulations, laws or other directives that comply with EU law and to which the data controller is subject. The data will be blocked or erased even if a retention period prescribed by the aforementioned standards elapses, unless there is a necessity for further retention of the data for conclusion or performance of a contract.
IV. Provision of the website and creation of log files
1. Description and scope of the data processing
When you access our website (www.meindl-fashions.de), the browsers you use on your mobile device will automatically send information to the server for our website. This information is stored temporarily in a “log file”.
The following information is collected or recorded without you having to do anything and is retained until it is automatically erased:
(a) Type of browser and the version used
(b) Operating system
(c) Internet service provider
(d) Date and time the user accessed the site
(e) Websites from which the user’s system reached our website
(f) Websites that are accessed via our website by the user’s system
(g) Status code
(h) IP address
We process the above data for the following purposes:
(a) To guarantee a smooth connection to the website
(b) To guarantee comfortable use of our website
(c) To analyse the system security and stability, and
(d) For other administrative purposes.
2. Legal basis for the data processingThe legal basis for the temporary retention of the data and log files is Art. 6 Para. 1 lit. f GDPR.
3. Purpose of the data processing
The temporary retention of the IP address by the system is necessary in order to allow the website to be displayed on the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.
It is retained in log files to ensure the functionality of the website. We also use the data to optimise the website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context. If the data is stored in log files, this will be done for no more than seven days. It may be stored for a longer period. In this case, the users’ IP addresses will be deleted or anonymised so that they can no longer be allocated to the visiting client. The legal basis for these purposes is again our legitimate interest in the data processing as defined in Art. 6 Para. 1 lit. f GDPR.
4. Retention periodThe data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
5. Opportunity to object and opportunity for removalIt is strictly necessary to collect the data for providing the website and to store the data in log files in order to operate the Internet site. Consequently, the user has no opportunity to object.
V. Use of cookies
1. Technical/functional cookies
Cookies are tiny text files which are used to identify returning users and to analyse how our website is used. When you visit our website, those technical cookies that are strictly necessary in order to run the website or to provide a service that you have explicitly requested are set. To avoid accepting cookies automatically, you will need to change your browser settings so that they are only created or refused with your consent. We should point out, however, that you may not be able to access all or certain parts of the website if you refuse to accept cookies.
We use the following technical/functional cookies:
Legal basisThe legal basis for the use of technical/functional cookies is the legitimate interest of Meindl Bekleidung GmbH & Co.KG as defined in Art 6 para. 1 lit. f GDPR. These cookies are used to ensure that this website and the service work correctly. This means that the website would not work as it should without these cookies. This type of cookie is used exclusively by the website operator (first party cookie), and all information that is stored in the cookie is sent only to this website.
2. Performance cookies
Performance cookies collect information about how our website is used. These cookies help us to identify whether and which subpages of our website are visited, and which content is of particular interest to our users. We record the number of times a page is visited, the number of subpages accessed, the time spent on our website, the order in which pages are visited, the search terms that guided users to us, the country, region and possibly the city from which the website was accessed, and the proportion of mobile devices that access our website.
We use the following web analysis service on our website:
2.1 Google Analytics
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as part of the Google Analytics web analysis service, uses cookies which analyse how you use the website. This data allows usage profiles to be created under a pseudonym. The cookies allow your browser to be recognised again. However, the collected data is not used to identify you personally and is not combined with your personal data.
The following cookies are set and used:
CHANGING COOKIE SETTINGS
Google uses this data on our behalf to evaluate your use of the website, to compile reports about website activities and to provide further services connected with website and Internet usage for us.
The data processing associated with analysis of website usage carried out by Google serves the common purpose of optimising the website to the needs and wishes of website users.
Google reserves the right also to process the data on servers in the USA and in this respect applies the EU standard contractual clauses intended to guarantee an appropriate level of data protection. There is no adequate level of data protection in the USA at present. In particular, US authorities may access data without you having any effective legal remedy to prevent it. Since US authorities are not bound by the EU standard contractual clauses, we obtain your consent to data processing in the USA via the consent banner. The legal basis for the processing is thus your consent as defined in Art. 6 para. 1 lit. a GDPR.
To guarantee anonymised collection of IP addresses, the “anonymizeIP” code has been added to the source text from Google Analytics. Thus, the IP addresses are always further processed in their shortened form to exclude the possibility of establishing a direct link to a specific person. Google Analytics will also not combine the IP address transmitted by your browser with any other data held by Google.
You can also, at any time, prevent any recording by Google of data relating to your use of the website (including your IP address) that is generated by the cookie and any processing of this data by Google. To do this, download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Clicking this link sets an opt-out cookie that will prevent your data being recorded by Google. If you wish to maintain your opt-out, do not delete the associated opt-out cookie. Click the following links for further information about Google’s terms of service and privacy policy:
http://www.google.com/analytics/terms/de.html
http://www.google.com/intl/de/analytics/learn/privacy.html
http://www.google.de/intl/de/policies/privacy
3. Third-party cookies (= marketing)Many third-party cookies originate from external advertising companies and are used to collect information about the websites visited by users and so to provide target group-specific advertising for those users.
We use the following service: 3.1. Facebook pixelThe “Facebook pixel” is a service of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The Facebook pixel allows Facebook to display our Facebook ads to those Facebook users who have visited our website, especially to those who have demonstrated an interest in our online services or in certain topics or products.
We are thus pursuing the interest of displaying advertising to you that is of interest to you and so make our website more relevant for you. Your browser automatically connects directly to the Facebook server on the basis of the marketing tools used. If you have registered with a Facebook service, Facebook can allocate your visit to your account. Even if you aren’t registered with Facebook or are not logged in, it is still possible for the provider to learn and save your IP address and other identifying features.
The following cookies are set and used if you grant us your consent: None
Facebook is located in Ireland. This does not, however, exclude the possibility that data processing also takes place in the USA (= location of the Facebook Inc. parent company). There is no adequate level of data protection in the USA at present. In particular, US authorities may access data without you having any effective legal remedy to prevent it. Since US authorities are not bound by the EU standard contractual clauses, we obtain your consent to data processing in the USA via the consent banner. The legal basis for the processing is thus your consent as defined in Art. 6 para. 1 lit. a GDPR. You may at any time withdraw your consent to the recording by the Facebook pixel described above and the use of your data to display Facebook ads. You can to a large extent determine which types of advertisement are displayed to you in Facebook on the following Facebook page:
https://www.facebook.com/settings?tab=ads
You will find further information from Facebook concerning data protection on the following Facebook page:
https://www.facebook.com/about/privacy
You will find further information about the Facebook pixel on the following Facebook page:
https://www.facebook.com/business/help/651294705016616
3.2. Google AdsWe use Google Ads, a Google service, on our website. Google Ads allows us to draw your attention to our offers with the aid of advertising materials in search engines and external websites. These advertising materials are delivered by Google via ad servers. Our ad server cookies are able to measure certain parameters to determine success, such as the number of times an advertisement appears or how often it is clicked by users. To determine performance, Google uses cookies which are stored on your computer as soon as you click on an ad. Cookies normally remain active on your computer for around 30 days. If you visit certain pages on the website of an Ads customer during this period, Google and the Ads customer will be informed that you have seen the advertisement displayed by Google. Every Ads customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of Ads customers. We do not ourselves collect or process any personal data in these advertising measures. Your browser automatically connects directly to the Google server on the basis of the marketing tools used. We are not able to influence the scope and further use of the data that is collected by Google through the use of Google Ads. You will find further information on the Google privacy policy here: http://www.google.com/intl/de/policies/privacy.
We use the Google Analytics tag for Google Ads remarketing. Remarketing target groups are created on the basis of browsing behaviour on our website and are then used as the basis for remarketing campaigns in Google Ads. Target groups based on Google Analytics measured values and dimensions may contain the session duration, town, and goal conversions, for example. The remarketing function also allows us to present our website users with advertisements based on their interests on other websites within the Google Ads network (e.g., in Google Search or on other websites). To do this, the user interaction on our website is analysed, e.g., to identify which offers have interested the users, so we can then display targeted advertising to our users on other sites after they have visited our website. We obtain your consent to our use of third-party cookies (=marketing cookies) via the cookie banner. The legal basis for the processing of your data and use of cookies is your consent as defined in Art. 6 para. 1 lit. a GDPR. Please also note the information about Google provided under point 3.2.1. You may withdraw your consent at any time and prevent participation in this tracking method in various ways: You can prevent the installation of cookies by deleting existing cookies and disabling the saving of new cookies in your web browser settings. You can also prevent the saving of cookies by setting your web browser to block cookies from the domain “www.googleadservices.com”. Click this link to make the settings: https://consent.google.de/ml?continue=https://adssettings.google.de/&gl=AT&hl=de&pc=ads&src=1 Please note that this setting is cleared if you delete your cookies. You can also disable targeted advertising via this link: https://optout.aboutads.info/?c=2&long Please note that this setting is also cleared if you delete your cookies.
VI. Newsletters
If you have explicitly consented in accordance with Art. 6 para. 1 lit. a GDPR, we will use your email address to regularly send you our newsletter. To receive the newsletter, all you need to do is enter an email address. In this case, you will only be sent direct advertising for our own similar merchandise or services via the newsletter. We will not pass on to third parties the data we collect in association with the data processing for sending out newsletters. This data will only be used for sending out the newsletter.
2. Legal basis for the data processingThe legal basis for the data processing after the user has registered for the newsletter is Art. 6 para. 1 lit. a GDPR, provided the user has granted their consent. The legal basis for sending out the newsletter following the sale of merchandise or services is § 7 para. 3 of the Unfair Competition Act (UWG).
3. Purpose of the data processingUsers’ email addresses are collected for the purpose of sending out the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the service or the email address used.
4. Retention period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address will therefore only be stored for as long as the newsletter subscription remains active.
The other personal data collected as part of the registration process will generally be deleted after a period of seven days.
5. Opportunity to object and opportunity for removalThe user concerned may end their subscription to the newsletter at any time. Every newsletter contains a link for this purpose. The user concerned may end their subscription to the newsletter at any time. Every newsletter contains a link for this purpose. If the newsletter is sent in response to registration on our website, it is also possible to withdraw your consent for storage of the personal data collected during the registration process. If the newsletter is sent in response to registration on our website, it is also possible to withdraw your consent for storage of the personal data collected during the registration process.
VII. Registration
On our website we offer users the opportunity to register by entering personal data. This data is entered in a data entry form and is sent to us and stored. The following data is collected during the registration process or when placing an order as a guest:
(a) The user’s IP address
(b) Date and time of registration or guest order
(c) First name, surname, address, country, telephone, email
(d) Notes about the order
(e) Delivery address (if different)
(f) Payment information
The user’s consent to the processing of this data is obtained during the registration process.
2. Legal basis for the data processingThe legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR, provided the user has granted their consent. If the registration is used to fulfil a contract for which the user is a contracting party or in order to take steps prior to entering into a contract, the additional legal basis for processing of the data is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processingRegistration by the user is necessary in order to fulfil a contract with the user or in order to take steps prior to entering into a contract.
4. Retention periodThe data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for the data collected during the registration process in order to fulfil a contract or in order to take steps prior to entering into a contract when the data is no longer necessary in order to carry out the contract. Even after the contract has ended, it may be necessary to store personal data of the contracting party in order to meet contractual or statutory obligations.
5. Opportunity to object and opportunity for removalAs a user you have the opportunity to cancel your registration at any time. You can have the stored data amended at any time.
6. Description of how to erase your account and change dataIf the data is necessary in order to fulfil a contract or to take steps prior to entering into a contract, it is only possible to erase the data ahead of schedule if there are no contractual or statutory obligations that prevent such erasure.
7. Recipients
Your personal data is sent for the specified purposes and only to the extent that is essential to
If it is essential for order processing, data may also be transmitted to recipients in third countries (Art. 49 para. 1 lit. b GDPR and Art. 6 para. 1 lit. b GDPR).
VIII. Email contact
1. Description and scope of the data processingYou may be contacted via the email address that you provided. In this case, the user’s personal data that is transferred will be stored with the email. The data will not be passed on to third parties in this context. The data will only be used for processing the conversation.
2. Legal basis for the data processingThe legal basis for the processing of the data that is transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact is aimed at conclusion of a contract, the additional legal basis for processing of the data is Art. 6 para. 1 lit. b GDPR.
3. Purpose of the data processingWe process the personal data sent by email solely in order to make contact. In the event that contact is made by email, this also implies an essential legitimate interest in processing the data.
5. Opportunity to object and opportunity for removalThe user has the opportunity to withdraw consent for the processing of their personal data at any time. If the user makes contact with us by email, they may opt out of the storage of their personal data at any time by sending an email to support-fashion@meindl.de. In such a case, the conversation cannot be continued.
All personal data that was stored in the course of making contact will be deleted in this case.
6. Recipients
IX. Social networksWe use links to other websites on the websites and services of third parties, e.g., on social media channels such as Facebook or Instagram. Our presence on social media networks and platforms serves to improve our active communication with our customers and potential clients. We use it to provide information about our products and special promotions. When you click on a link, you go directly to the relevant social media network. It is these third parties that are exclusively responsible for data processing by the social networks on their website and their privacy notices apply (Facebook: https://www.facebook.com/about/privacy/); Instagram: (https://help.instagram.com/155833707900388).
X. Rights of the data subjectIf your personal data is processed, you are the data subject as defined in the GDPR and you have the following rights with respect to the data controller:
1. Right to informationYou can request the data controller to confirm whether your personal data is processed by us. If such processing takes place, you can request the data controller to provide the following information:(a) the purposes for which the personal data is processed;
(b) the categories of personal data that are processed;
(c) the recipients or the categories of recipient to whom your personal data was disclosed or is still being disclosed;
(d) the period for which your personal data will be stored, or if that is not possible, the criteria used to determine that period;
(e) the existence of the right to rectification or erasure of the personal data concerning you, a right to restriction of the processing by the data controller or a right to object to this processing;
(f) the existence of a right to lodge a complaint with a supervisory authority;
(g) all available information about the origin of the data if the personal data was not collected from the data subject;
(h) the existence of an automated decision-making process, including profiling as defined in Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved, the scope and the desired effects of such processing for the data subject.
You have the right to request information about whether your personal data is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards as defined in Art. 46 GDPR in association with the transfer.
2. Right to rectificationYou have a right to rectification and/or completion by the data controller where the processed personal data is incorrect or incomplete. The controller must carry out the rectification without undue delay.
3. Right to restriction of the processingYou may request the processing of your personal data to be restricted where one of the following applies:
(a) if you contest the accuracy of your personal data for a period that enables the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and you refuse the erasure of the personal data and request restriction of its use instead;
(c) the controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims, or
(d) you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been verified whether the legitimate grounds of the controller override your grounds. Where processing of your personal data has been restricted, such data may – with the exception of storage – only be processed with your consent or in order to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained restriction of processing pursuant to the above requirements, you will be informed by the controller before the restriction of processing is lifted.
4. Right to erasure4.1. Erasure obligationYou have the right to request the controller to erase your personal data without undue delay, i.e. the controller has the obligation to erase such data without undue delay where one of the following grounds applies:
(a) Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
(b) You withdraw your consent on which the processing is based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
(c) You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
(d) Your personal data has been unlawfully processed.
(e) Your personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(f) Your personal data was collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
4.2. Information to third partiesWhere the controller has made the personal data public and is obliged pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers who are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.
4.3. ExceptionsThe right to erasure does not apply if the processing is necessary
(a) for exercising the right of freedom of expression and information;
(b) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(c) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 para. 1 GDPR in so far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or (e) for the establishment, exercise or defence of legal claims.
5. Right to notificationIf you have asserted your right to rectification, erasure or restriction of the processing with respect to the data controller, the controller is required to communicate such rectification or erasure of the data or restriction of the processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipient by the controller.
6. Right to data portabilityYou have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided, where:
(a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and
(b) the processing is carried out by automated means. In exercising this right you also have the right to have your personal data transmitted directly from one controller to another, where this is technically feasible. This must not adversely affect the freedoms and rights of other persons. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority vested in the controller.
7. Right to objectYou have the right to object, on grounds relating to your situation, at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on those provisions. The controller will no longer process the personal data unless the controller is able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services – and notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications. If you wish to exercise your right to withdraw or object, simply send an email to support-fashion@meindl.de.
8. Right to withdraw your consent for data processingYou have the right to withdraw your consent under the data protection regulations at any time. Your withdrawal of consent will not affect the lawfulness of processing based on your consent before its withdrawal.
9. Automated individual decision-making, including profilingYou have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This will not apply if the decision
(a) is necessary for entering into, or performance of, a contract between you and the data controller;
(b) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or
(c) is based on your explicit consent. However, these decisions must not be based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies, and suitable measures are in place to safeguard your rights and freedoms and legitimate interests. In the cases referred to in points (a) and (c), the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
10. Right to appeal to a supervisory authorityWithout prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
11. Data securityWhen you visit the website, we use the widely used SSL (Secure Socket Layer) method to establish the connection with the highest encryption level that your browser will support. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use the 128-bitv3 technology. You can tell whether a given page of our website is encrypted by looking for the locked key or padlock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorized by third parties. Our security measures are continuously improved to take account of technological developments.
12. Currentness and changes to this privacy policyThis privacy policy is currently valid and is the version dated January 2022. Further development of our website and offers on it or changing statutory or official requirements may make it necessary to change this privacy policy. You can view and print out the latest version of our privacy policy at any time on the website at https://meindl-fashion.de/en/data-privacy/.
13. Newsletter CleverReach
If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address as mandatory information. The provision of additional data is voluntary so that we can address you personally in the newsletter.
We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR that we may use your personal data for the purpose of sending the desired newsletter.
When you register for the newsletter, in addition to the e-mail address required for sending the newsletter, we store the IP address you used to register for the newsletter, as well as the date and time of registration and confirmation, in order to be able to trace possible misuse at a later date. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
You can unsubscribe from the newsletter at any time via the link included in every newsletter or by sending an email to the controller named above. Once you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is otherwise permitted by law.
Our e-mail newsletters are sent via a technical service provider to whom we pass on the data you provided when registering for the newsletter. We have concluded an order processing contract with our email service provider in which we oblige them to protect our customers’ data and not to pass it on to third parties.The service provider uses the information from the newsletter registration to send and statistically evaluate the newsletter on our behalf on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on. Conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.If you wish to withdraw your consent to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Service provider: CleverReach GmbH & Co. KG
Address: Schafjückenweg 2, 26180 Rastede, Germany
Privacy policy: Privacy policy of CleverReach
