Privacy Policy
Introduction
We, Wortmann Fashion Retail GmbH & Co. KG, Klingenbergstraße 1–3, D-32758 Detmold, as the operator of this online offering, are the controller responsible for processing the personal data of users of the online offering. You can find our contact details in the imprint of the online offering; the contacts for questions about the processing of personal data are named directly in this Privacy Policy.
We take the protection of your privacy and your personal data very seriously. We collect, store and use your personal data only in accordance with this Privacy Policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection provisions.
With this Privacy Policy, we inform you about the scope and purposes for which personal data is processed in connection with the use of the online offering.
Personal data
Personal data is any information relating to an identified or identifiable natural person. This includes all information relating to your identity, such as your name, email address or postal address. Information that cannot be linked to your identity (for example, statistical information about the number of users of the online offering) is not considered personal data.
You can generally use our online offering without disclosing your identity and without providing personal data. In that case, we only collect general information about your visit to our online offering. For some of the services offered, however, personal data will be collected from you. We then process this data solely for the purposes of using this online offering, in particular to provide the information you request. When personal data is collected, you are only required to provide the data that is absolutely necessary. You may be able to provide additional information; this is voluntary. We will always indicate whether a field is mandatory or whether information is voluntary. We provide specific details in the relevant section of this Privacy Policy.
No automated decision-making based on your personal data takes place in connection with the use of our online offering.
Processing of personal information
We store your data on specially protected servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, alteration or dissemination of your data by unauthorised persons. Only a few authorised persons have access to your data. These persons are responsible for the technical, commercial or editorial maintenance of the servers. Despite regular checks, complete protection against all risks is not possible.
Your personal data is transmitted over the internet in encrypted form. For data transfer, we use TLS / SSL encryption (Transport Layer Security / Secure Socket Layer).
Disclosure of personal data to third parties
We generally use your personal information only to provide the services you have requested. Where we involve external service providers in delivering these services, their access to the data is also solely for this purpose. Through technical and organisational measures, we ensure compliance with data protection regulations and also require our external service providers to comply with them.
Beyond this, we do not pass on your data to third parties without your explicit consent, especially not for advertising purposes. Your personal data will only be disclosed if you yourself have consented to the transfer of data or if we are authorised or obliged to do so on the basis of legal provisions and/or official or court orders. This may be the case, in particular, for providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
If we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the specific requirements of Art. 44 et seq. GDPR and require our service providers to do the same. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is ensured in particular by an adequacy decision of the EU Commission or by appropriate safeguards in accordance with Art. 46 GDPR.
Legal bases for data processing
Where we obtain your consent for processing your personal data, Art. 6 (1) (a) GDPR is the legal basis for the data processing.
If we process your personal data because this is necessary for the performance of a contract or a quasi-contractual relationship with you, Art. 6 (1) (b) GDPR is the legal basis for the data processing.
If we process your personal data to fulfil a legal obligation, Art. 6 (1) (c) GDPR is the legal basis for the data processing.
Furthermore, Art. 6 (1) (f) GDPR may serve as the legal basis if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.
Within this Privacy Policy, we always indicate which legal basis we rely on for the processing of your personal data.
Data deletion and storage period
We generally delete or block your personal data whenever the purpose for storing it no longer applies. Data may be stored beyond this if required by legal provisions to which we are subject, for example statutory retention and documentation obligations. In such a case, we delete or block your personal data once these provisions cease to apply.
Use of our online offering
Information about your device
Every time you access our online offering, we collect the following information about your device, regardless of whether you register: the IP address of your device, your browser request and the time of this request. We also record the status and the amount of data transferred in connection with this request. In addition, we collect product and version information about the browser and operating system you use on your device. We also record the website from which you accessed the online offering. The IP address of your device is stored only for the duration of your use of the online offering and is then deleted or anonymised by shortening it. The remaining data is stored for a limited period.
We use this data to operate the online offering, in particular to identify and correct errors, to determine utilisation of the online offering and to implement adjustments or improvements. These purposes also constitute our legitimate interest in data processing under Art. 6 (1) (f) GDPR.
Use of cookies
Like many websites, our online offering uses cookies. Cookies are small text files that are stored on your device and save certain settings and data for exchange with our online offering via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.
Cookies enable us to recognise your device and make any presettings and preferences immediately available. The cookies we use are – where possible – so-called session cookies, which are automatically deleted after the end of the browser session. In some cases, cookies with a longer storage period may be used so that your presettings and preferences can also be taken into account during your next visit to our online offering.
Most browsers are set to accept cookies automatically. However, you can disable the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to delete cookies that have already been stored manually via your browser settings. Please note that you may only be able to use our online offering to a limited extent or not at all if you refuse the storage of cookies or delete necessary cookies.
Where cookies are not required for our online offering, we will ask for your consent to the use of cookies when you first access the online offering. With regard to non-essential third-party cookies, you will find a more detailed description of the services we use from these third parties below. The legal basis for the associated data processing, including any transfer of data, is your consent within the meaning of Art. 6 (1) (a) GDPR. You can withdraw any consent given at any time with effect for the future, in particular by changing the settings you have selected.
The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offering within the meaning of Art. 6 (1) (f) GDPR and – where contracts are concluded or performed via our online offering – performance of the contract within the meaning of Art. 6 (1) (b) GDPR.
Integration of third-party services
For some functions in our online offering, we use services from third-party providers. These services are mostly optional functions that you must actively select or use. We have concluded contractual agreements with the respective providers for the provision or integration of their services and, within our possibilities, we endeavour to ensure that these third-party providers also transparently inform about the scope of the processing of personal data and comply with data protection regulations.
Necessary services for managing user data
For our online offering, we use external services for central management of user data and for taking account of user preferences, for example regarding acceptance of the storage of non-essential cookies. Specifically, we use Google Tag Manager and Commanders Act.
We believe that, given the safeguards in place (anonymisation and the option to object), data processing for the optimisation of our online offering constitutes a legitimate interest in data processing under Art. 6 (1) (f) GDPR.
Google Tag Manager
For our online offering, we use Google Tag Manager from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google Tag Manager is a tag management system (TMS) that allows tags, i.e. tracking codes and related code snippets, to be managed on our website. Google services can be integrated into a website via Google Tag Manager.
When using Google Tag Manager, a connection to Google’s servers is established. This results in the IP address of the browser used on the visitor’s device being stored by Google. It cannot be ruled out that data may be transferred to Google in the USA and that US security authorities could gain access to the data. However, no cookies are set in connection with the use of Google Tag Manager. Further information about Google Tag Manager and data processing by Google can be found at https://support.google.com/tagmanager/answer/6102821?hl and https://www.google.com/policies/privacy/.
The legal basis for our use of Google Tag Manager is our legitimate interest under Art. 6 (1) (f) GDPR. Our legitimate interest lies in managing tracking codes in our online offering, which enables us to analyse use of our online offering and to improve and personalise our services.
Commanders Act
Within our online offering, we also use Commanders Act, a service of Fjord Technologies, 3 Rue Saint-Georges, 75009 Paris. This is an administration tool for marketing campaigns. We use the service as a consent tool and for editing metadata. By using it, we can provide our services to you as a user.
Commanders Act processes and stores information about your user behaviour on our website. For this purpose, Commanders Act uses, among other things, cookies, i.e. small text files that are stored locally in your browser cache on your device and enable an analysis of your use of our website.
The legal basis for managing your consent settings is, on the one hand, our legitimate interest in optimal design of our online offering. On the other hand, the data is processed to obtain and document legally required consents for the use of certain technologies, Art. 6 (1) (c) GDPR.
The legal basis for further data processing by Commanders Act is your consent under Art. 6 (1) (a) GDPR.
Further information about data processing at Commanders Act can be found at https://www.commandersact.com/de/datenschutz/.
Analytics services
We use various services to help us monitor and assess which content of our online offering is of particular interest and how users respond to certain layouts. In addition to classic analytics services such as Google Analytics and Webtrekk / Mapp Intelligence, we also use tools to evaluate different versions (A/B testing).
Google Analytics
We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google. As part of Google Analytics, Google uses cookies for analysis. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your use of the online offering is transmitted to and stored on a Google server. It cannot be ruled out that data may be transferred to the USA and that government bodies there could gain access to this data.
We also use the AB Tasty tool from AB Tasty SAS, France (https://www.abtasty.com/) for A/B testing and continuous improvement of the online offering. The cookies used enable us to change the page and analyse changes. You can object to data collection and storage at any time by adding /#abtastyoptout=1 to the URL. Further information and a more detailed explanation of the opt-out option can be found at https://www.abtasty.com/de/nutzungsbedingungen/.
Through standardised IP anonymisation, your IP address is shortened by Google beforehand on servers in the European Union.
On our behalf, Google uses this information to evaluate your use of the online offering, compile reports on website activity and provide us, as the operator of the online offering, with further services related to website and internet usage. In addition, Google may use the data for its own purposes. For these purposes, Google may, for example, create profiles of user behaviour or link the data with other data, such as an existing Google account. We have no influence on these data processing activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For more information, please refer to Google’s privacy information, which is linked for you further below.
We also use the “Demographics” feature in Google Analytics. This allows reports to be created containing information on the age, gender and interests of visitors to the site. These data come from interest-based advertising by Google and from visitor data of third-party providers. You can deactivate this feature at any time through the ads settings in your Google account or generally prevent your data being collected by Google Analytics as described in the following paragraph. Further information on the “Demographics” feature can be found at Google under https://support.google.com/analytics/answer/2799357?hl.
Further information on Google Analytics can be found at http://tools.google.com/dlpage/gaoptout?hl and http://www.google.com/intl/de/analytics/privacyoverview.html. Please note that on our websites Google Analytics has been extended by the code “anonymizeIp();” to anonymise IP addresses by deleting the last octet.
The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR.
Google Signals
In our online offering, we also use Google Signals from Google as an extension of Google Analytics.
We use this service to create cross-device evaluations of our online offering. If your devices are linked to your Google account, your usage behaviour is analysed across devices and database models are created, including for cross-device conversions.
As part of Google Signals, Google uses cookies for cross-device analyses. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your cross-device use of the online offering is transmitted to and stored on a Google server. It cannot be ruled out that data may be transferred to the USA and that government bodies there could gain access to this data. Through standardised IP anonymisation, your IP address is shortened by Google beforehand on servers in the European Union.
On our behalf, Google uses this information to evaluate your cross-device use of the online offering, compile reports on website activity and provide us, as the operator of the online offering, with further services related to website and internet usage. In addition, Google may use the data for its own purposes. For these purposes, Google may, for example, create profiles of user behaviour or link the data with other data, in particular with an existing Google account. We have no influence on these data processing activities. Further information can be found in Google’s privacy information at https://policies.google.com/privacy.
The legal basis for use of Google Signals is your consent under Art. 6 (1) (a) GDPR.
Google Enhanced Conversion Tracking
For our online offering, we use Google Enhanced Conversion Tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Enhanced Conversions supplement the existing conversion tags. Conversion tracking is used to compile statistics to determine the total number of website users and gather information about which actions they have carried out. Enhanced conversions allow conversions to be recorded even more accurately. Conversion data that we collect ourselves as the controller of the online offering and that is provided by users can be encrypted and sent to Google via enhanced conversions. The data of website visitors is encrypted using a one-way hash algorithm (SHA256), so it is not possible to identify the person. Enhanced conversions are used for customers who have provided data such as email address, name, home address or phone number themselves, for example in the context of a customer account. Based on this information, customers are linked to the relevant Google accounts in which they were signed in when an interaction with the online offering took place. It cannot be ruled out in this context that data may be transferred to the USA and that US security authorities could gain access to this data.
Further information can be found in Google’s privacy policy at https://policies.google.com/privacy and at https://support.google.com/google-ads/answer/9888656.
Use of this service is subject to your explicit consent. The legal basis for using the service is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.
Microsoft Advertising
In our online offering, we use the “Microsoft Advertising” conversion tracking technology provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). This service uses cookies or similar technologies. If you reach our online offering via a Microsoft Advertising ad, interactions carried out by you (such as page views, clicks on an ad or downloads) are recorded and analysed. The service is used to show you interest-based ads for our products on other websites and to optimise our online offering. In the course of this technical process, personal data may be stored on Microsoft servers in the United States. It cannot be ruled out that US security authorities could gain access to this data. The USA does not provide a level of data protection comparable to that in the EU.
If you have a Microsoft account, Microsoft may link your web and app browsing history to your Microsoft account and use information from your account to personalise ads. If you do not want such a link to your account, you must log out of your Microsoft account before visiting our online offering.
The legal basis for this data processing is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future.
Further information on data protection at Microsoft can be found at https://privacy.microsoft.com.
Mapp Intelligence
We use services provided by Webtrekk GmbH, Robert-Koch-Platz 4, D-10115 Berlin (“Webtrekk”) for statistical evaluations. During your visit to our online presence, information transmitted by your browser is collected and evaluated for our web controlling. This is done using a pixel embedded on every webpage and through the use of cookies, provided you have consented to the use of cookies.
The data collected is used to create anonymous usage profiles that serve as the basis for web statistics. Personal identification of individual users or merging with other data does not take place. Creating web statistics constitutes our legitimate interest in data processing under Art. 6 (1) (f) GDPR; where data is collected using cookies, the legal basis is your consent under Art. 6 (1) (a) GDPR.
Amplitude
In our online offering, we also use the analytics service Amplitude provided by Amplitude Inc., 501 2nd Street, Suite 100, San Francisco, CA 94107, USA.
When using this service, your order number and your IP address in anonymised form are recorded, among other things. In addition, the service records several parameters for evaluation of the use of our online offering, such as clicks and page views. These statistical data are used to evaluate use of our online offering and optimise your visit experience. If the order number is not recorded, only evaluations without any personal reference are carried out. Further information on data protection at Amplitude can be found at https://amplitude.com/privacy.
The legal basis for use of Amplitude is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future. If the order number is not recorded, the legal basis is our legitimate interest in optimal design of our online offering under Art. 6 (1) (f) GDPR.
A/B Tasty
We use the AB Tasty tool from AB Tasty SAS, 17–19 Rue Michel-le-Comte, 75003 Paris, France for A/B testing and continuous improvement of the online offering. The cookies used enable us to change the page and analyse changes. The privacy policy and more detailed explanations on cookie use can be found here: https://www.abtasty.com/de/datenschutzerklarung/ and here: https://support.abtasty.com/hc/en-us/articles/6416315967004-Cookies-Privacy. A more detailed explanation of the opt-out options can be found at https://support.abtasty.com/hc/en-us/articles/6397541297820. The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR.
Contentsquare
We also use Contentsquare to evaluate visits to our websites. Contentsquare is analytics software provided by Contentsquare GmbH, Implerstraße 2a, 81371 Munich. Contentsquare uses cookies that enable an analysis of your use of the website. During analysis by Contentsquare, your IP address, cookie IDs, technical information about your device and your behaviour on the website are recorded and stored. Analysing your behaviour on our website helps us to optimise the website so that you benefit from a more pleasant and clearer visit.
If you do not want data to be collected by Contentsquare, you can disable this in the way described above.
Further information can be found at https://contentsquare.com/en-en/privacy-center/cookie-policy/.
The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR. You can withdraw any consent given at any time with effect for the future by adjusting the cookie settings.
Survicate
We also use Survicate for statistical evaluations. Survicate is a survey tool provided by Survicate S.p. z o.o., Zamiany 8 LU2, Warsaw, mazowieckie, Poland. In the course of the survey, no personal data is stored unless you additionally provide such data in the respective text fields. As a rule, the survey is not intended to be personally identifiable. The surveys are used to improve our services.
Further information can be found at https://help.survicate.com/en/articles/3943207-terms-of-service-privacy-policy-gdpr-and-dpa#h_4fd40e7e44.
The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR.
Pixlee TurnTo
We also use Pixlee TurnTo to enable product reviews. Pixlee TurnTo is a service provided by Pixlee Inc., 625 Market St, San Francisco, California 94105. Pixlee TurnTo uses cookies that enable emails to be sent for product reviews. Using Pixlee TurnTo makes product reviews on our website possible. For this purpose, Pixlee TurnTo processes your IP address, cookie IDs and technical information about your device.
If you do not want data to be collected by Pixlee TurnTo, you can disable this in the way described above.
Further information can be found at https://www.pixlee.com/privacy-policy.
The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR. You can withdraw any consent given at any time with effect for the future by adjusting the cookie settings.
Bloomreach
For our online offering, we use Bloomreach provided by Bloomreach Inc., 700 E El Camino Real 130 Mountain View, CA 94041, USA. Bloomreach is a cloud-based e-commerce experience platform and B2B service specialising in marketing automation, product search and content management systems. We use Bloomreach to centralise, consolidate and store customer data. This increases transparency across different customer touchpoints along the entire customer journey and creates a database for targeted, personalised implementation of further marketing activities. In this way, we can tailor the content of our email marketing activities to the specific needs of each recipient so that our email campaigns remain dynamically adaptable and relevant and meaningful to each recipient.
The personal data processed by Bloomreach and the content of the online offering are stored on Bloomreach servers. The personal data processed may include information such as names, contact details, IP addresses, device and browser data, location data, online activities, interaction and transaction history, user preferences and other data that is provided directly by you or collected during your visit to our website. This data can be used, among other things, to determine which content of the online offering is relevant to the user and to analyse and evaluate user behaviour. It cannot be ruled out that data may be transferred to the USA in this context and that US security authorities could gain access to the data. However, Bloomreach Inc. is an active participant in the EU–U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection. All data processed in this context is used solely for the processing purposes we have specified. Use of the service is based on our legitimate interests under Art. 6 (1) (f) GDPR, arising from the processing purposes described. Further information on data protection at Bloomreach can be found at https://www.bloomreach.com/de/legal/privacy.
Cookies are also used when Bloomreach is employed. The legal basis for the use of cookies is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example by adjusting the cookie settings in your browser. Otherwise, the data collected is stored until you ask us to delete it, delete the cookies set by Bloomreach yourself or the purpose for data storage no longer applies. Statutory retention periods remain unaffected.
Retargeting and remarketing
Retargeting and remarketing refer to technologies that display suitable advertising to users who have previously visited a particular website even after they have left that website. To do this, internet users must be recognised beyond the original website; this is done using cookies from the relevant service providers, and previous usage behaviour is also taken into account. For example, if a user views certain products, these or similar products can later be displayed as advertising on other websites. This is personalised advertising that is tailored to the needs of individual users. For this personalised advertising, it is not necessary to identify the user beyond recognition. We therefore do not merge the data used for retargeting or remarketing with other data.
Google Remarketing and Google AdWords Conversion Tracking
We use such technologies to place ads on the internet. For placing ads, we rely on third-party providers. We use, among other things, services from Google that enable automatic display of products that are of interest to internet users. This function is implemented via cookies. It cannot be ruled out that data may be transferred to Google in the USA in the course of this process and that US security authorities could gain access to this data.
Further information on this technology can be found in Google’s privacy policy at https://policies.google.com/privacy?hl. You can prevent cookies for Google Remarketing and Google AdWords Conversion Tracking from being installed altogether by changing the relevant browser settings via the website http://www.google.com/policies/privacy/ads/.
The legal basis is your consent under Art. 6 (1) (a) GDPR.
Facebook Custom Audience
Our online offering incorporates remarketing tags from Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (hereinafter “Facebook”). When you visit our online offering, a direct connection between your browser and the Facebook server is established via the remarketing tags. This provides Facebook with the information that you have visited our online offering using your IP address. This allows Facebook to assign the visit to our online offering to your user account on Facebook, provided you are registered there. We can use the information obtained in this way to place ads via Facebook. It cannot be ruled out that data will be transferred to Facebook servers in the USA and that US security authorities could gain access to such data. Please note that we do not receive any further information about the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
The legal basis for use of the remarketing tags is your consent under Art. 6 (1) (a) GDPR. If you do not want data to be collected via Facebook’s remarketing tags, you can also deactivate Facebook Custom Audience via the following link: https://www.facebook.com/ads/website_custom_audiences/.
Affiliate marketing
As part of our online offering, we also use affiliate marketing. This is an online-based distribution model in which providers of other online offerings (often called “merchants” or “advertisers”) refer users to our online offering. If, as a result of such a referral, our site is visited or a purchase is made in our online offering, a commission may be paid based on clicks or sales. For affiliate marketing, we work with a service provider.
The service provider uses cookies to record activities. The tracking cookie does not store personal data; it only stores an identification number of the affiliate, i.e. the partner who referred the potential customer, and a reference number. The purpose of storing this data is to process commission payments. The legal basis is your consent under Art. 6 (1) (a) GDPR.
Interactive elements and additional features
To implement various services within our online offering, we use third-party services, for example when integrating maps, displaying fonts or embedding videos.
Google Maps
For our online offering, we use the Google Maps map service. Google Maps is provided by Google. Only technically necessary cookies are set for the maps embedded in our online offering.
To comply with data protection regulations, the terms of use for the map service include provisions that serve to protect you. Google’s terms of use for the map service can be found at https://www.google.com/intl/de_US/help/terms_maps.html, and general information from Google on data protection is available at https://policies.google.com/privacy. The legal basis for embedding the map service is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing map material for your orientation. The legal basis for setting cookies in connection with the use of Google Maps is your consent in accordance with Art. 6 (1) (a) GDPR.
Use of web fonts
For our online offering, we use web fonts from Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and Adobe (Adobe Systems Software Ireland Limited, 4–6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland) as external fonts. These web fonts are embedded through a server call, usually to a server operated by Google or Adobe. This informs the server which of our web pages you have visited. The IP address of the browser on the visitor’s device is also stored by Google or Adobe. It cannot be ruled out that data may be transferred to the USA in this context and that US security authorities could gain access to the data. Further information on data processing by Google and Adobe can be found in the privacy notices of Google and Adobe, which can be accessed here:
https://www.google.com/fonts#AboutPlace:about
https://www.google.com/policies/privacy/
https://www.adobe.com/de/privacy/policies/typekit.html
The legal basis for embedding web fonts is Art. 6 (1) (f) GDPR; our legitimate interest is to optimise our online offering.
Use of YouTube
Our online offering includes embedded YouTube videos. To play these, we use a plugin of YouTube, a service operated by Google (hereinafter “YouTube”). The service is operated by Google. We use YouTube in extended privacy mode to protect your privacy as much as possible. When you access a page of our online offering that contains an embedded YouTube video, Google initially only receives the information necessary for embedding, and no cookies are set for usage analysis. Only when you play the embedded video does Google receive further information; in this context, Google can also set cookies to analyse your user behaviour. When the video is played, the YouTube servers operated by Google are informed, for example, from which page of our online offering you are playing the video.
If you are logged into your Google account, you allow Google (or YouTube) to link your browsing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent data from being linked to your Google profile by logging out of your YouTube account. Further information on how user data is handled can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.
We use YouTube to show you videos and thereby inform you more effectively about us and our services. The legal basis for embedding videos is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR; playing the videos and the associated further data processing only takes place based on your consent within the meaning of Art. 6 (1) (a) GDPR.
Embedding videos via bunny.net
Our online offering also embeds videos via bunny.net using the native video player or an iframe. The service is operated by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (hereinafter “Bunny”).
When you access a page of our online offering that contains a video via Bunny, a connection to Bunny’s servers is established. The video or the content of the iframe is transmitted directly from Bunny to your browser and embedded in the page. The server is informed, for example, which web pages of our online offering you have visited. If you interact with the video, this information is also transmitted to Bunny’s servers.
Further information about data protection at Bunny can be found in Bunny’s privacy policy at https://bunny.net/privacy/.
We use Bunny to show you videos and inform you about us and our services. The legal basis for embedding the videos is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
Liveshows
Through our online offering, we also provide the opportunity to take part in liveshows, including interaction during the shows. In the liveshows, we present current fashion trends and collections. You can ask questions that may be answered during the liveshow.
We use the data you provide in this context, especially your name, to address your enquiry. The legal basis for data processing is your consent under Art. 6 (1) (a) GDPR. Please note that the liveshows are recorded so that users can watch them afterwards as well. The chat history is shown in this context. However, you are free to choose the name displayed and can use a pseudonym. During the liveshow, you can also order products directly via the shop icon. As regards the purchase function, we refer you to the following notes on order processing.
Order processing
We use your personal data for orders only within our company and affiliated companies as well as with the company entrusted with processing the orders.
Storage and transfer of data for orders
For order processing, we work with various companies responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. For example, we pass on your address data (name and address) to the relevant transport company that delivers the products you ordered. The legal basis for this is Art. 6 (1) (b) GDPR. Processing your personal data is necessary to fulfil the contract with you.
We store the data for as long as necessary to fulfil the contract. Beyond this, we store this data to fulfil post-contractual obligations and on the basis of commercial and tax retention periods for the legally required duration. As a rule, this retention period is 10 years from the end of the relevant calendar year.
Payment processing for orders
Depending on the payment method chosen, payment processing for orders may be carried out via a service provider.
If you pay by credit card, the data required for this, such as name, address and purchase details, are transmitted to the relevant credit card company.
If you pay via PayPal, you are redirected via a link to PayPal’s website. In this process, personal data is processed. This includes your name, address, email address, phone number (if applicable) and bank account or credit card details. Please refer to the General Terms and Conditions, Terms of Use and Privacy Policy of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg at www.paypal.com.
If you choose a Klarna service for payment, the data required for this, in particular your name, contact details and other identification information, as well as payment information and credit information, is transmitted to Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden (“Klarna”) and processed by them. Information on data protection at Klarna can be found at https://www.klarna.com/ and https://www.klarna.com/international/privacy-policy/.
If you purchase on account, a credit check is carried out during the order process, which we explain in more detail below. If the credit check is positive, you will receive the relevant invoice from our service provider, which you can pay by bank transfer to our account. If you pay in advance, no assessment by service providers is carried out; the goods are dispatched after we receive payment.
The legal basis for payment processing is Art. 6 (1) (b) GDPR. Processing your personal data is necessary to fulfil the contract with you, and you are free to choose the payment method.
We store the data for as long as necessary to fulfil the contract. Beyond this, we store this data to fulfil post-contractual obligations and on the basis of commercial and tax retention periods for the legally required duration. As a rule, this retention period is 10 years from the end of the relevant calendar year.
Credit check
Depending on the payment method selected, it may be necessary to carry out a credit check. Specifically, a credit check is only required for purchase on account. In this case, and provided we have your consent to the credit check, we use external service providers to whom we transmit your data (name, address, date of birth, order value). We send this data to Payolution GmbH, Columbusplatz 7–8, Stiege 1 / 5. Stock, 1120 Vienna, Austria. The legal basis for the credit check is Art. 6 (1) (a) GDPR. If you do not wish to give consent for the credit check, you may have to select a different payment method.
During the credit check, an assessment is obtained of the probability that our claim arising from the order will not be paid. For data processing by Payolution, the provider’s privacy policy and additional data protection information apply, which can be accessed at https://www.unzer.com/de/privacy-payolution-consumers/ and https://payment.payolution.com/payolution-payment/infoport/dataprivacydeclaration/.
Customer account
You can voluntarily create a customer account for our online offering. All information about you and your use of the various services is managed centrally in the customer account. This gives you the opportunity to manage, update and delete all data where necessary. The legal basis for processing the data for registration is, when you give consent, Art. 6 (1) (a) GDPR. If you register with us to fulfil or initiate a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.
Registration for the customer account
You can register online for the customer account. To create the customer account, you only need to provide your name, an email address and a password. We reserve the right to offer further registration options in addition to registration via the online offering, in which case the regulations will apply accordingly.
To use the full functionality of the customer account, it may be necessary to verify the email address provided during registration. For this purpose, we send a confirmation link to the email address you have provided, which you must open. This procedure serves to protect your data and to ensure that communications relating to services, delivery status or payment status are sent to a valid email address.
Data collected via the customer account
All data relating to use of the online offerings is stored in the customer account, provided you log in with your customer account. This includes, in particular, your personal data (name, age, addresses, delivery and payment information), vouchers, wishlists, purchase history, communications history, search and navigation behaviour, consents to individual services (such as newsletters), discount affinity and information about your interests provided explicitly or implicitly by you. We can create segments from this data and assign customers to these segments. Segment membership is also stored in the customer account. Location-related data such as your delivery addresses or your location are stored if you have given your consent.
Your current location may be used to make location-based offers to you. If you do not want data to be stored in your customer account in individual cases, you can use the relevant services without your customer account. If you want to stop data being stored in the customer account altogether, you can request that your customer account be deleted.
Social login
We offer you the option of using your existing profile with the social networks Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA) and Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for registration and login to our online offering. To do this, you can click on the relevant Facebook or Google icon during registration or login. By clicking on the respective icon, a new window opens in which you can log in with the chosen provider. In this window, you will also be informed which data is transmitted for authentication and for registration or login. Based on your consent, further data from your profile may also be shared with us. This data (for example, your age or your “like” behaviour) helps us to optimise our offering, including tailoring our offering to your interests. The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
To perform authentication, a connection is established between your device and the servers of the respective providers. As a result, the provider receives, in particular, your IP address and may also receive further information about your device. We have no influence on data processing by the provider in this respect. The respective providers’ privacy notices apply and can be found at http://www.facebook.com/policy.php and https://policies.google.com/privacy.
Use of data from the customer account
We use the stored data to manage our business relationship with you and – where we have the relevant consent – to offer you interesting and relevant services via all communication channels you use. On the basis of the stored data, we attempt to identify which offers are relevant to you.
We contact you within the scope of the business relationship via the contact details you have provided when you use individual services. For example, you automatically receive order notifications or delivery status updates; we inform you in accordance with your chosen preferences. Contact may be made by email, smartphone messages or other digital communication channels. In addition, you can select optional communication channels and reasons for contact; these include, in particular, special newsletters and app messages.
Storage period and deletion
Data collected when using the customer account is generally stored for the duration of the customer account’s existence but can also be deleted earlier at your request. A large part of the data can be viewed and – with the exception of the email address – changed or deleted directly online. You can delete your customer account at any time by informing us that you wish it to be deleted, for example via the general contact form. If your account is deleted immediately, the data may not be able to be restored later in the event of re-registration.
Contacting us
You can contact us in various ways, including via the chat function in our online offering or via WhatsApp. We are also happy to keep you updated with our newsletter by email. If you would like to take part in competitions or review our products, you will find more detailed information below.
Chat function
If you use the chat function in our online offering, we record the information you enter there. You do not need to identify yourself to use the chat function. However, we store the IP address as well as the date and time of the content transmitted. We process the data transmitted via the chat function solely for the purpose of responding to your enquiry.
You can decide for yourself what information you provide to us via the chat function. The legal basis for processing your data is your consent under Art. 6 (1) (a) GDPR.
Once we have dealt with your enquiry, the data is initially stored in case of follow-up questions. You can request deletion of the data at any time; otherwise, we delete the data after the enquiry has been fully resolved. Statutory retention periods remain unaffected.
If you contact us via WhatsApp, we record the phone number you use and the information you send via WhatsApp; to process your enquiry, we may also access your customer data stored with us. We use the data you provide solely to respond to your enquiry or handle your request. Please note that we have no influence on the extent to which WhatsApp or Facebook (as the owner of WhatsApp) accesses and evaluates your personal data. We are not responsible for data processing by WhatsApp. The legal basis for processing your personal data by us is your consent under Art. 6 (1) (a) GDPR. Once we have dealt with your enquiry, the data is initially stored in case of follow-up questions. You can request deletion of the data at any time; otherwise, the data is deleted after the enquiry has been fully resolved. Statutory retention periods remain unaffected.
Newsletter
The Tamaris newsletter is sent jointly under data protection law by Wortmann Fashion Retail GmbH & Co. KG, Klingenbergstraße 1–3, D-32758 Detmold, and Wortmann KG Internationale Schuhproduktionen, Klingenbergstraße 1–3, D-32758 Detmold. The two companies mentioned can therefore send you the Tamaris newsletter requested on the basis of your consent jointly or independently of each other. In accordance with data protection regulations, the two companies have concluded an agreement to define their respective responsibilities. You can exercise your data subject rights, in particular withdrawal of consent given for the newsletter, vis-à-vis either company and, in particular, use the contact details provided in this Privacy Policy.
When you subscribe to our newsletter, your email address is used for our own advertising purposes until you unsubscribe. You receive regular information by email on current topics and emails for special occasions, such as special promotions. Depending on the information we have about you, the emails may be personalised and tailored to you.
To subscribe to our newsletter, we use the so-called double opt-in procedure unless you have given us your consent in writing. This means that we will only send you a newsletter by email if you have expressly confirmed beforehand that we should activate newsletter sending. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link in that email.
The legal basis for processing your data is your consent under Art. 6 (1) (a) GDPR if you have expressly subscribed to the newsletter. In line with statutory provisions, it may also be possible for you to receive our newsletter without express consent if you have ordered goods or services from us, we have obtained your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in sending direct advertising under Art. 6 (1) (f) GDPR.
If you no longer wish to receive newsletters from us, you can withdraw your consent with effect for the future or object to further receipt of the newsletter at any time, without incurring any costs other than transmission costs according to basic tariffs. Simply use the unsubscribe link contained in each newsletter or send a message to us or our Data Protection Officer.
Use of eesii
We use the eesii service provided by direct services Gütersloh GmbH, Business Unit eesii, Reinhard-Mohn-Str. 300, 33333 Gütersloh (hereinafter “eesii”) to send our advertising by post. In this context, we transmit your address data to eesii, provided you entered this data when subscribing to our newsletter, registering an account or purchasing a product in the online shop, unless you have objected to receiving advertising by post or all advertising measures in general. You can object to this use of your data at any time by notifying us, without incurring any costs other than transmission costs according to basic tariffs. eesii uses the data we provide to automatically create, print and send personalised print mailings (such as advertising campaigns, product and service information) by post. eesii’s service also includes address validation, address formatting and assignment of personalisation data. Use of your data is based on our legitimate interests in direct advertising by post in accordance with Art. 6 (1) (f) GDPR, provided you have not objected to this use. Further information on data protection at eesii can be found at https://www.eesii.com/de/privacy.
Competitions
From time to time, we hold competitions via our online offering or other channels. You can register voluntarily to take part in a competition; participation may require solving tasks or submitting entries. To take part, you must provide contact details, which we use only to process the competition. Data from the competition is not merged with other data unless otherwise specified for the specific case; participation in the competition and chances of winning are independent of other factors such as purchase of goods or giving optional consent to receive advertising.
After the competition has ended, your data is stored for a further six months unless you request deletion earlier. Temporary storage is used to handle any queries or complaints. After that, all participant data is deleted. Data that is expressly agreed with the relevant participant to be retained for longer is not affected by deletion. This may relate, for example, to information about the winner. You are not obliged to make such agreements with us. Irrespective of such agreements, it is permissible to publish participant data in anonymised form (e.g. “Max M. from M.”).
The legal bases for data processing are Art. 6 (1) (a) GDPR (consent given in the course of competition participation) and Art. 6 (1) (b) GDPR (competition execution).
Review platforms
If you are satisfied with our services, you are welcome to review us on the relevant platforms. Of course, you can also submit justified criticism via the review platforms, although direct contact and clarification with us is usually more effective. In our online offering, we provide links to the eKomi platform operated by eKomi Holding GmbH, Zimmerstraße 11, D-10969 Berlin, which lead directly to the relevant page and show our current rating. For technical reasons, the current rating can only be displayed if the content is loaded directly from the platform. The platform’s own content and external websites are subject to its privacy policy, which can be accessed at https://www.ekomi.de/de/datenschutz/.
We believe that displaying current ratings serves transparency and is in our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If you submit a review or read existing reviews on the review platform pages, accessing the linked websites is the legal basis for the associated data processing by the relevant provider.
Social media
In addition to our online offering, we use various social media channels for information and communication, which are linked from our online offering. Specifically, we use the social networks Facebook, Pinterest, Instagram, YouTube and TikTok. The links are identifiable by the respective provider’s logo.
By clicking on the links, the relevant social media channels are opened, for which the privacy notices of the respective platform providers primarily apply. These can be found at:
Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://policy.pinterest.com/de/privacy-policy
YouTube: https://policies.google.com/privacy?hl=en
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Before you click on the relevant links, no personal information is transmitted to the respective providers. Accessing the linked page is the basis for data processing by the respective providers.
The following information also applies to our use of the Facebook, Instagram and Pinterest social media channels and the related processing of your personal data. If you have questions about our use of personal data in connection with the social media channels, you can contact us and our Data Protection Officer at any time. If you have general questions about data protection relating to the social media channels, please contact the respective providers directly; their contact details are provided below. The German Federal Office for Information Security (BSI) also provides general information on safe use of social networks on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.
Facebook fanpage
In addition to our own online offering, we operate a fanpage on the social network Facebook. We use the fanpage to share information about our activities and provide a communication channel. The social network Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Facebook”).
Responsibility
Within the scope of the options available at Facebook, we endeavour to protect your privacy and personal data. Where your personal data is processed by us in connection with visiting the fanpage, the information in this Privacy Policy applies without restriction. Due to the integration of the fanpage into Facebook’s offering, it should also be noted that Facebook processes personal data at the same time. We have no influence on data processing by Facebook; in particular, Facebook does not act as a processor on our behalf under our responsibility. For data processing by Facebook, the Facebook policies apply – according to Facebook itself – which can be accessed at https://www.facebook.com/privacy/policy/.
From a data protection perspective, Facebook and we are jointly responsible for operating the fanpage and evaluating usage data when visiting the fanpage. In accordance with data protection regulations, we have concluded an internal agreement with Facebook defining our respective responsibilities.
Facebook Insights
Facebook offers fanpage operators the “Page Insights” function to obtain an overview of use of the fanpage and its users. Page Insights primarily provides statistical data that can be accessed and evaluated. We use Page Insights data to make the fanpage as attractive and efficient as possible. For this purpose, Facebook provides us with data that it generates itself. Further information about how Page Insights works and responsibility for the function is provided by Facebook at https://www.tiktok.com/legal/page/eea/privacy-policy/.
Messenger
Facebook offers users registered with Facebook the option of direct communication via Facebook Messenger. If you contact us via Messenger, we store and use the data transmitted solely to respond to your enquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and handling customer enquiries, evaluating such enquiries and preventing misuse.
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the relevant conversation has ended. We consider the conversation to be ended when the circumstances indicate that the matter in question has been fully clarified. You can withdraw your consent to the processing of personal data at any time; in this case, we delete the data immediately, provided there is no basis for further storage.
Instagram account
We also operate an account on the social network Instagram. We use the Instagram account to share information about our activities and provide a communication channel. The social network Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter “Facebook”).
Data protection responsibility
Within the scope of the options available at Instagram, we endeavour to protect your privacy and personal data. Where your personal data is processed by us in connection with visiting our Instagram account, the information in this Privacy Policy applies without restriction. Due to the integration of the account into Facebook’s offering, it should also be noted that Facebook processes personal data at the same time. We have no influence on data processing by Facebook; in particular, Facebook does not act as a processor on our behalf under our responsibility. For data processing by Facebook, the Facebook policies apply – according to Facebook itself – which can be accessed at https://privacycenter.instagram.com/policy.
From a data protection perspective, Facebook and we have separate responsibilities for operating the Instagram account and the associated communication and evaluation options. Where your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this processing. This is usually the case when you communicate directly with us via the “Instagram Direct Messaging” function and transmit data to us. Where your personal data is processed by Facebook and Facebook alone decides on the purposes and means of this processing, Facebook is solely responsible. This applies in particular to Facebook’s evaluation of user behaviour for its own purposes.
Instagram Insights
Facebook offers operators of Instagram accounts the “Instagram Insights” function to obtain an overview of use of the account and its users. Instagram Insights primarily provides statistical data that can be accessed and evaluated. We use Instagram Insights data to make our Instagram account as attractive and efficient as possible. For this purpose, Facebook provides us with data that it generates itself under its own responsibility. The data we receive from Facebook is mostly anonymised data and statistics. Where we receive personal data in this context, we are responsible for further processing this data to evaluate use of our Instagram account.
Further information on Instagram Insights is provided by Facebook at https://privacycenter.instagram.com/policy.
Instagram Direct Messaging
On Instagram, you can communicate directly with us via the “Instagram Direct Messaging” function. If you contact us via Instagram Direct Messaging, we store and use the data transmitted solely to respond to your enquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and handling customer enquiries, evaluating such enquiries and preventing misuse.
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the relevant conversation has ended. We consider the conversation to be ended when the circumstances indicate that the matter in question has been fully clarified. You can withdraw your consent to the processing of personal data at any time; in this case, we delete the data immediately, provided there is no basis for further storage.
Pinterest profile
We also have an account on the social network Pinterest. We use this account to share information about our activities and provide another communication channel. The social network Pinterest is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter “Pinterest”). Please note that you use the social network and its functions on your own responsibility. This applies in particular to use of interactive functions.
Processing of personal data
The data collected about you when you use the service is processed by Pinterest and may be transferred to countries outside the European Union. The data processed includes, among other things, data you voluntarily provide such as your name, username, email address and phone number, content you create, upload or receive such as photos and videos, your IP address, information about the device you use, information about pages and content accessed and your location. We have no influence on the type and scope of data processed by Pinterest, how it is processed and used, or its transfer to third parties. Details of which data is processed by Pinterest and for which purposes are provided in Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.
We process the data you enter on Pinterest, in particular your username and content published under your account, to the extent that we incorporate your posts into our offering by saving or linking them or by posting content that refers to your account. The data you publish and share freely on Pinterest is incorporated into our offering in this way and made accessible to our followers.
You can restrict data processing in the general settings of your Pinterest account. Additionally, on mobile devices you can restrict Pinterest’s access to your data in the device settings. This depends on the operating system you use.
Pinterest Analytics
Pinterest offers operators of Pinterest accounts the option to obtain an overview of use of the account and its users. Analytics functions primarily provide statistical data that can be accessed and evaluated. We use these data to make our Pinterest account as attractive and efficient as possible. For this purpose, Pinterest provides us with data that it generates itself under its own responsibility. The data we receive from Pinterest is mostly anonymised data and statistics. Where we receive personal data in this context, we are responsible for further processing this data to evaluate use of our Pinterest account. Further information is provided by Pinterest at https://business.pinterest.com/de/analytics-and-measurement.
Messenger
On Pinterest, you can communicate directly with us via Messenger. If you contact us via this function, we store and use the data transmitted solely to respond to your enquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (b) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and handling customer enquiries, evaluating such enquiries and preventing misuse.
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the relevant conversation has ended. We consider the conversation to be ended when the circumstances indicate that the matter in question has been fully clarified. You can withdraw your consent to the processing of personal data at any time; in this case, we delete the data immediately, provided there is no basis for further storage.
Further information on Pinterest
If you have questions about our use of personal data in connection with the Pinterest account, you can contact us and our Data Protection Officer at any time. Our contact details and communication channels are described in this Privacy Policy. If you have questions about data protection at Pinterest, please contact Pinterest directly.
TikTok
In addition to our own online offering, we operate a channel on the social network TikTok. We use the TikTok channel to share information about our activities and provide a communication channel. The social network TikTok is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom (hereinafter “TikTok”).
Please note that you use the social network TikTok and its functions on your own responsibility. This applies in particular to use of interactive functions (such as likes, sharing and comments).
Processing of personal data
The data collected about you when you use the service is processed by TikTok and may be transferred to countries outside the European Union. The data processed includes, among other things, the data you voluntarily provide such as your name, username, date of birth, email address and phone number, content you create, upload or receive, contact information, purchase information and other information you provide, your IP address, the application you use, information about the device and operating system you use (including device ID and application ID), information about pages accessed, your location and your mobile provider, as well as information about how you use the service. This data is linked to the data in your TikTok account. We have no influence on the type and scope of data processed by TikTok, how it is processed and used, or its transfer to third parties. Details of which data is processed by TikTok and for which purposes are provided in TikTok’s privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/en.
We process the data you enter on TikTok, in particular your username and content published under your account, to the extent that we share or link your posts, reply to them or publish our own posts referring to your account. The data you publish and share freely on TikTok is incorporated into our offering in this way and made accessible to our followers.
You can restrict data processing in the general settings of your TikTok account as well as under “Account and Privacy Settings” and “Safety”. Additionally, on mobile devices you can restrict TikTok’s access to contact data, photos and videos, location data, etc. in the device settings. This depends on the operating system you use. Further information on these points can also be found at https://support.tiktok.com/de/account-and-privacy and https://support.tiktok.com/de/safety-hc.
TikTok Analytics
TikTok offers operators of TikTok accounts the “Analytics” function to obtain an overview of use of the account and its users. TikTok Analytics primarily provides statistical data that can be accessed and evaluated. We use TikTok Analytics data to make our TikTok account as attractive and efficient as possible. For this purpose, TikTok provides us with data that it generates itself under its own responsibility. The data we receive from TikTok is mostly anonymised data and statistics. Where we receive personal data in this context, we are responsible for further processing this data to evaluate use of our TikTok account. Further information on Analytics is provided by TikTok at https://www.tiktok.com/analytics and https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/.
Direct messages
On TikTok, you can communicate directly with us via the “Direct Messages” function. If you contact us via direct messages, we store and use the data transmitted solely to respond to your enquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and handling customer enquiries, evaluating such enquiries and preventing misuse.
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the relevant conversation has ended. We consider the conversation to be ended when the circumstances indicate that the matter in question has been fully clarified. You can withdraw your consent to the processing of personal data at any time; in this case, we delete the data immediately, provided there is no basis for further storage.
Further information on TikTok
If you have questions about our use of personal data in connection with our TikTok account, you can contact us and our Data Protection Officer at any time. Our contact details and communication channels are described in this Privacy Policy. If you have questions about data protection at TikTok, please contact TikTok directly.
Your rights and contact
We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you about your rights. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can deal with your request.
Rights of data subjects
You have extensive rights with regard to the processing of your personal data. First, you have a right of access and can request rectification and/or deletion or blocking of your personal data, where appropriate. You can also request restriction of processing and you have the right to object. In relation to the personal data you have provided to us, you also have the right to data portability.
If you wish to exercise any of your rights and/or obtain more information, please contact our customer service. Alternatively, you can contact our Data Protection Officer.
Withdrawal of consent and objection
You can withdraw any consent you have given at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The contact persons for this are also our customer service and our Data Protection Officer.
If processing of your personal data is not based on consent but is carried out on another legal basis, you can object to this processing. Your objection will lead to a review and, where appropriate, termination of the data processing. You will be informed of the outcome of the review and, if data processing is to continue, you will receive further information from us explaining why processing is permissible.
Data Protection Officer and contact
We have appointed an external Data Protection Officer who supports us in data protection matters and who you can also contact directly. For questions about how we handle personal data or for more information on data protection topics, our Data Protection Officer and his team are happy to help:
RA Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Phone: 0521 / 96535-812
Email: dataprotection@wortmann-retail.com
If you would like to contact our Data Protection Officer personally by email, you can reach him at sebastian.meyer@brandi.net.
Complaints
If you believe that processing of your personal data by us is not in line with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint with the supervisory authority. You can also lodge a complaint with our Data Protection Officer. The Data Protection Officer will then review the matter and inform you of the outcome.
Further information and changes
Links to other websites
Our online offering may contain links to other websites. These links are generally marked as such. We have no influence over whether the data protection provisions applicable on the linked websites are complied with. We therefore recommend that you also read the privacy policies of other websites.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time with effect for the future. Changes will be made in particular in the event of technical adjustments to the online offering or changes in data protection regulations. The current version of the Privacy Policy can always be accessed directly via the online offering.
Status of this Privacy Policy: October 2023