Privacy
Blutsgeschwister GmbH Privacy Policy
Thank you for your interest in our company. We take the protection of your data very seriously.
In general, you can use our website without inputting any personal data. If you wish to make use of our company's services via our website, it could be necessary for us to process your personal data. Whenever it is necessary to process personal data, and no legal basis for such processing exists, we always ask for the consent of the person involved (the data subject).
The processing of personal data (e.g. the data subject's name, address, e-mail address or telephone number) always takes place in accordance with the General Data Protection Regulation (GDPR) and in adherence to country-specific data protection regulations that apply to us.
With the following privacy policy, we wish to inform the public of the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of their rights.
As the controller responsible for the data processing, we have implemented numerous technical and organisational measures to ensure the highest level of protection possible for the personal data processed via our website. The transfer of data via the internet is, however, inherently subject to possible security gaps. As a result, it is impossible to guarantee 100% protection. Therefore, any data subject also has the alternative to transfer their personal data to us by other means (for example, by telephone).
1. Definitions
This privacy policy is based on the definitions used in the GDPR as enacted by the European Commission (art. 4 of the GDPR). This privacy policy is intended to be easy for anyone to read and understand. To guarantee this, we would first like to explain to you the terms that are used. The following definitions, among others, are used in this privacy policy:
- 'personal data' : All information referring to an identified or identifiable natural person (referred to as a 'data subject'); a natural person is considered identifiable whenever he or she can directly or indirectly be identified, especially by means of allocating an identifier like a name, identification number, location information, online identifier or other particular traits which express the physical, physiological, genetic, psychological, financial, cultural or social identity of this natural person;
- 'data subject' : Any identified or identifiable natural person whose personal data are processed by the party responsible for the data processing. "Einschränkung der Verarbeitung" die Markierung gespeicherter personenbezogener Daten mit dem Ziel, ihre künftige Verarbeitung einzuschränken;
- 'restriction of processing' : marking of stored personal data with the goal of restricting its processing in the future.
- 'profiling' : any type of automated processing of personal data in which personal data are used to analyse specific personal aspects related to a natural person, particularly to analyse or predict aspects related to this natural person's job performance, financial situation, health, personal preferences, interests, creditworthiness, conduct, place of residence or change of location.
- 'controller' : the natural or legal person, authority, institution or other body that decides itself or in collaboration with others about the purposes and means of processing personal data; if the purposes and means of this processing are regulated by collective labour law or the law of EU member states, then the controller can be subject to the specific criteria of its designation pursuant to collective labour law or the law of EU member states.
- 'Recipient': a natural or legal person, authority, institution or other body to which personal data are disclosed, regardless of whether they are a third party or not
- Authorities which may receive personal data within the scope of an investigative procedure under collective labour law or the law of EU member states are, however, not considered recipients; the processing of these data by the authorities in question takes place in accordance with applicable data protection regulations with respect to the purposes of the processing;
- 'third party' : a natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and the persons authorised under the direct control of the controller or processor to process the personal data;
- 'consent' of the data subject: any voluntary permission granted unequivocally and in an informed manner for the specific instance in the form of a declaration or other clear act of confirmation by which the data subject makes known that he or she agrees with the processing of his or her personal data.
2. Name and contact information of the controller and data protection officer
a) Controller
The controller as defined by the General Data Protection Regulation and other national data protection laws of the EU member states as well as other provisions under data protection law is:
Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965 Berlin
Germany
Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de
Website:
www.blutsgeschwister.de
b) Data protection officer
The data protection officer of the controller is:
Inga Schlemermeyer
Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965
Berlin
Germany
E-Mail: datenschutz@blutsgeschwister.de
Website:
www.blutsgeschwister.de
3. Collection and storage of personal data and the nature and purpose of their use
a) When visiting our website
In general, you can use our website without disclosing your identity. When using our website purely for informational purposes (i.e. when you are not registered or do not provide us with any other information), the browser you are using on your end-device automatically sends information to our website's server. This information is stored temporarily in a so-called 'logfile'.Log files needing to be stored further for the purposes of providing evidence are excluded from deletion until the respective incident has been fully resolved; in specific cases they may be passed on to investigating authorities. The following information is collected in this way without any action on your part and is stored until automatically deleted:
- IP address of the requesting computer,
- Data and time of access,
- Name and URL of the file accessed,
- Website from which the access takes place (referrer URL),
- Browser being used and, in some cases, the operating system on your computer as well as the name of your internet service provider
- Amount of transferred data.
These data are processed by us for the following purposes:
- to ensure comfortable use of the website,
- identifying faults and for security reasons,
- protection and defense of our rights,
- to analyse system security and stability, and
- for other administrative purposes.
The legal basis for this data processing is art. 6.1.1.f of the GDPR. Our legitimate interest is based on the data collection purposes listed above. At no time do we use the collected data for the purpose of tracing your personal identity.
Furthermore, we use cookies and analytics services whenever you visit our website. For more information about these, see sections 5, 8, 9, 11 and 12 of this privacy policy.
In addition to purely informational use of our website, we offer various services which you can use if you are interested. For this, you must, as a rule, provide further personal data which we use to provide the service in question and which are subject to the aforementioned principles of data processing.
We use the services of external parties for certain aspects of processing your data. These parties are carefully selected and contracted by us. They are bound to our instructions are monitored regularly.
Furthermore, we can transfer your personal data to third parties whenever promotional offers, sweepstakes, contracting or other services are provided by us in collaboration with partners. You receive more information about this when inputting your personal data or below in the description of our services.
If our service providers or partners are located in a country outside the European Economic Area (EEA), we inform you of the implications of this fact in the description of the service.
c) Objection or withdrawal of consent to processing your data
Once you have granted consent for your personal data to be processed, you can withdraw this at any time. After you have issued such a withdrawal to us, it influences the permissibility of the processing of your personal data.
If the processing of your personal data is based on a
weighing of interests, you can issue an objection to the processing. This is the
case in particular whenever the processing is not necessary for the fulfilment
of a contract with you, which is made known to you in each of the following
descriptions of functions. When you issue such an objection, we ask that you
explain the reasons why we should not process your personal data. In case you
have a justified objection, we will assess the situation and then either
reconfigure and/or adjust the data processing or show you our mandatory,
protected reasons for continuing the processing.
Of course, you can object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can inform us of your objection to advertising using the following contact information:
1. Via our customer service
Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de
2. Vie our data protection officer
E-Mail: datenschutz@blutsgeschwister.de
d) Getting in
touch
You can get in touch with our
customer service for all questions relating to online orders, invoices or
returns using our website. Personal information - such as
your name, date of birth, email address and telephone number - is collected as
part of getting in touch, insofar as this is needed to process your
inquiry. These data are only stored and
used for the purpose of handling your concerns or for contacting us and the
related, technical administration. The legal
basis for processing the data is, insofar as it concerns a service from which no
contract arises, our legitimate interest in answering your request as well as marketing and
the improvement of our products and services, as long as this is done in accordance
with data protection and competition law requirements,in accordance with
Article 6
para 1 p. 1 lit. f of the GDPR.
If you contact us with
the purpose of concluding a contract, the additional legal basis for the
processing is based on Article 6 para 1 p. 1
lit. of
the GDPR. Your data are deleted after
final processing of your request. This is the case if it can be
inferred from the circumstances that the matter in question has been
conclusively clarified, there are no statutory retention obligations to the
contrary and the data are not still required for fulfilling a contract or
pre-contractual measures.
e) For orders placed via our website - data processing during registration and for contract processing
You can place orders via our website either as a guest (without registering) or by registering in our shop as a customer for future orders. The advantage of registering for you is that you can log in to our shop directly using your e-mail address and password whenever you wish to place an order in the future without having to enter all of your contact details again.
Your personal data are then entered into an input screen and transferred to us and stored. Whenever you place an order via our website, we collect the following data first, whether you are placing the order as a guest or registering in the shop:
- Title, first name, surname,
- a valid e-mail address,
- Address,
- Telephone number (land line and/or mobile number)
These data shall be collected
- to identify you as our customer;
- to process, fulfil and handle your order;
- for correspondence with you;
- for invoicing;
- to settle liability claims if any, as well as the enforcement of claims if any against you; to settle liability claims if any, as well as the enforcement of claims ifany against you;
- to ensure the technical administration of our website;
- for the administration of our customer data.
In connection with the ordering process, we will obtain your consent for the processing of this data.
The data for your order and/or your registration shall
be processed, and as per Section 6 (1)(1)(b) of the GDPR, 6.1.1. is required for
the specified purposes of properly processing your order and for the mutual
fulfilment of obligations arising under the purchase contract. For this, we may
forward your payment data to our payment service provider. The legal basis for
the same is also Section 6.1.1. of the GDPR.
We may also process the
data provided by you in order to inform you about other interesting products
from our portfolio. In addition to our interest in a simple and inexpensive way
of addressing our registered customers, this advertising approach is always
carried out in compliance with the high requirements of Section 7 (3) of the
Unfair Competition Act (UWG), or we may send you emails with technical
information
The
personal data (address, payment and ordering data) collected by us for
processing your order shall be stored until the expiry of the legal retention period (10 years), after which it shall be deleted,
unless we are obliged to store the same for a longer period under
storage and documentation obligations relating to taxation and commercial law (commercial code,
criminal code or tax code) as per Section 6 (1)(1)(c) of the
GDPR, or if you have consented to storage exceeding the above period in accordance
with Section 6 (1)(1)(a) 6.1.1. of the GDPR.
4. Data processing for order processing
Regarding third party disclosure, we shall only disclose
your personal data to the service partners involved in the completion of the
contract, such as for example disclosures to the logistics company commissioned
with the delivery and to the payment service providers responsible for payment
matters. The scope of the data provided during such disclosures shall however be
limited to the minimum that is required. The legal basis for the transfer of
data is in each case Art. 6 (1), clause 1, lit. of the GDPR.
If the delivery of the goods is carried out by a shipping service provider that offers delivery date coordination or delivery notification, we will provide your email address according to Art. 6 (1), clause 1, lit. a of the GDPR prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, provided that you have given your express consent in the ordering process. Otherwise, we shall only provide for the purpose of delivery according to Art. 6 (1), clause 1, lit. b of the GDPR the name of the recipient and the delivery address to the transport service provider. This transfer is only carried out as far as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date or the delivery announcement is not possible.
Consent can be revoked at any time for future effect vis-à-vis the above-named responsible person or vis-à-vis the respective shipping service provider.
Your payment details will be sent to the appropriate payment services provider, depending on the payment method selected by you. The legal basis for payment processing is Article 6 (1) b GDPR. The processing of your personal data is required to fulfil the contract with you and you are free to choose your desired payment method. The payment service provider shall be responsible in respect of your payment data. Information, in particular, concerning the responsible authority within the payment service providers, the contact details of the data protection officers of the payment service providers, and the categories of personal data that are processed by the payment service providers can be obtained from the Internet addresses specified in each case below.
In case of payment via PayPal, credit card or immediate transfer, we shall pass on your payment data to our payment service provider BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, www.bspayone.com (hereinafter referred to as "PAYONE”) for payment processing. The credit card details entered by you under shop.blutsgeschwister.de shall be received by PAYONE directly in encrypted form. PAYONE is PCI DSS certified, and therefore fulfils the strictest requirements for the secure handling and storage of credit card data. No payment information will be present on the servers of Blutsgeschwister GmbH even in case of payment through PayPal and immediate transfer.
If the "Immediate transfer" [Sofortüberweisung] payment method is selected, payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"). We will transmit the information you provided during the ordering process and the information about your order to SOFORT. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
Your data will only be
transmitted for the purpose of payment processing by the payment service
provider SOFORT and only to the extent necessary for this purpose.
You can
find more information about SOFORT's data protection regulations online at the
following website: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_at/privacy. Further data protection
information can be found in the PAYONE privacy policy:
https://www.payone.com/datenschutz/.
If you select the
"Purchase via invoice" payment method, the processing will be handled by the
payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden
(hereinafter "Klarna"). You can access general
information about Klarna here. Your personal data will be
transmitted to Klarna for this purpose. The personal data transmitted
to Klarna usually includes first name, surname, address, date of birth, gender,
email address, IP address, telephone number, mobile phone number and other data
that are necessary to process a purchase via invoice. The processing of the
purchase agreement also requires personal data related to the respective
order. In
particular, a mutual exchange of payment information may take place, including
bank details, card number, expiry date and CVC code, number of items, item
numbers, data on goods and services, prices and tax levies, information about
previous purchase behaviour or other information about your financial
situation. The
specific purpose of the transmission of the data is identity verification,
payment administration and fraud prevention. We will share personal data
with Klarna if there is a legitimate interest in the
transmission. Klarna will disclose the
personal data exchanged between Klarna and us to credit reporting
agencies.
No transfer of your personal data shall be made to third parties for purposes other than those mentioned above.
We will only share your personal information with third parties if:
- You have expressly consented to the same as per Section 6 (1)(1)(a) 6.1.1. of the GDPR, or the forwarding of the data
- as per Section 6 (1)(1)(f) 6.1.1. of the GDPR is required for enforcement, exercise or defence of legal claims and there is no ground to assume that you have an overriding and legitimate interest in not disclosing your data,
- in case there is a legal obligation for the disclosure as per Section 6(1)(1)(c) 6.1.1. of the GDPR, and this is also legally permissible and furthermore,
- is required for the execution of contractual
relationships with you as per Section 6 (1)(1)(b) 6.1.1. of the GDPR.
5. Use of cookies
We use cookies on our
site. These are small files that
your browser automatically creates and that are stored on your terminal device
(laptop, tablet, smartphone, etc.) when you visit our
website. Cookies do not cause any
damage to your device. They do not contain any
executable code and therefore no viruses, trojans or other malware that would
allow you to be exposed.
A cookie contains information
generated in connection with the specific terminal device used in each
case. However, this does not mean
that we will obtain direct knowledge of your identity
thereby.
There are two kinds of
cookies. Temporary (so-called session
cookies) and persistent cookies.
On the one hand, cookies are used to make the experience of using of our range of services more pleasant for you. We use so-called session cookies to discern that you have already visited individual pages on our website by storing the so-called session ID. That way, your computer can recognise if you return to our website. These cookies also improve user friendliness. When you visit our site again to avail of our services, it will be automatically recognised that you have already visited us earlier, together with your inputs and settings, so that you do not to have to enter them all over again. The use of session cookies is necessary to make the website accessible to you. These session cookies are automatically deleted when you close your browser. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.)
b) Persistent
cookies
Additionally, we use cookies
to capture statistical information on the use of our website and to optimise our
product offer for you (see paragraphs 8, 9, 11 and 12). When you visit our site
again, these cookies enable us to automatically recognise that you have already
been here. We also use persistent
cookies for direct marketing online, e.g. to be able to offer you customised
adverts or assess the success of our advertising. The use of persistent cookies
takes place due to our legitimate interest in direct online marketing, web
analysis and improving our online presence. The data collected in this
way are rendered pseudonymous through technical processes. This makes it impossible to
link the data to you personally. This data is not stored
together with other personal data related to you. These cookies are
automatically deleted after a specified time in each case. You can find the duration of
the respective cookie storage in the overview for the cookie settings in your
web browser.
In part, cookies save
settings to simplify the ordering process (e.g. noting the contents of an online
shopping cart for a later visit to the website). Insofar as personal data are
processed by individual cookies used by us, that processing takes place in
accordance with Article 6 (1), clause 1,
lit. b of
the GDPR, either to implement the contract, per Art. 6 para 1 p. 1
lit. a GDPR
in the case of declared consent, or in accordance with Article
6 (1), clause 1,
lit. f of the
GDPR to safeguard our legitimate interests in the best-possible functionality of
the website, as well as a client-friendly and effective configuration of the
website visit.
Most
browsers accept cookies automatically.
However, disabling cookies
completely may mean that you cannot use all the features of our
website. Due to our legitimate
interest, we also incorporate third-party cookies. In this case, the relevant
data packets are stored in your browser by or transferred to third
parties. You can also prohibit the use
of third-party cookies using an corresponding setting in your
browser. Every browser is different in
the way cookie settings are managed. This is described in each
brower's help menu, which includes directions on how to change your cookie
settings. These can be found under the
following links for the respective browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari:
https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera:
https://help.opera.com/en/latest/web-preferences/#cookies
Alternatively, you can
configure the use of cookies under "Manage tracking
settings".
The following third-party
cookies are
used
If you have set your browser accordingly or use plug-ins that block external scripts (this is particularly the case with ad blockers or script blockers) you will not be able to see the "manage tracking settings” button. Due to the fact that the processing of data in this case has already been blocked by you, no processing will be carried out on our part either as per your settings. Therefore, there is no need for you to object to data processing by third-party cookies.
- Google Tag Manager
- Facebook Pixel
- Facebook Connect
- Criteo
- Google Adsense
- Econda
- FitAnalytics
- Trusted Shops
- Usercentrics Consent Management Platform
- JSESSIONID
- Optimizely
- Bing Ads
- Trbo
- DoubleClick Ad Exchange
6. Use of Your Data for Direct Advertising
a) Newsletter
a) With your consent, you can be made a subscriber to our
newsletter, in which we inform you about interesting current offers. The
advertised goods and services are mentioned in the declaration of
consent.
b) To register for our newsletter, we use the Double-opt-in procedure. This means that after you register, we send an email to the specified email address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted by us. In addition, we also store your set IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, wherever necessary, for clarifications relating to possible misuse of your personal data.
c) The only requirement for sending the newsletter is your email address. The provision of additional, specially marked data is voluntary and is used to address you personally. After you confirm, we save your email address for the purpose of sending you our newsletters. The legal basis for this is article 6.1.1.a of the GDPR.
d) At any time, you can withdraw our consent from allowing us to send you the newsletter, and opt out of the newsletter. You can withdraw consent by clicking on the link provided in each newsletter email, via this form on the website, by sending an email to service@blutsgeschwister.de or sending a message to the contact information stated in the imprint/contact section of the website.
e) Please note that we analyse your user behaviour whenever we send the newsletter. For this analysis, the emails we send contain so-called web beacons and/or tracking pixels which are one-pixel image files that are stored on our website. To perform the analyses, we link the files mentioned in section 3 and the web beacons with your email address and an individual ID. The links contained in the newsletter also include this ID. With the data we collect in this way, we create a user profile to customise the newsletter to your individual interests. In this way, we keep track of when you read our newsletter and which links in the newsletter you click on. This enables us to determine what your personal interests are. We link these data to the actions you take on our website.
e) Please note that we analyse
your user behaviour whenever we send the newsletter. For this analysis, the emails
we send contain so-called web beacons and/or tracking pixels which are one-pixel
image files that are stored on our website. To perform the analyses, we
link the files mentioned in section 3 and the web beacons with your email
address and an individual ID. The links contained in the
newsletter also include this ID. With the data we collect in
this way, we create a user profile to customise the newsletter to your
individual interests. In this way, we keep track of
when you read our newsletter and which links in the newsletter you click on.
This enables us to determine what your personal interests are. We link these data to the
actions you take on our website.
You can object to this
tracking at any time by clicking on the special link provided in every email or
informing us via other means of contact. The information is stored for
as long as you are subscribed to the newsletter. After you opt out, we store
the data anonymously and purely for statistical purposes.
We use the US provider "MailChimp" and the German provider "CleverReach"
to send email campaigns, especially newsletters.
- On the one hand, our newsletter is sent via "MailChimp", a newsletter distribution platform by US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to whom we pass along the information you provide when you register for the newsletter. This transfer takes place in accordance with Article 6 (1), clause 1, lit. f of the GDPR and serves our legitimate interest in using a newsletter system that is secure, user-friendly and effective at advertising. The email addresses of our newsletter recipients, along with other data described within this statement, are stored on servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter under our orders. MailChimp can also use this data in accordance with its own information to optimise and improve its own services (e.g. technical optimisation of the sending process and presentation of the newsletter, or for business purposes, to determine which countries the recipients come from). However, MailChimp does not use our newsletter recipients' data to contact the recipients itself or to transfer their information to third parties. EU standard contractual clauses (SCC), which guarantee a high level of data protection at MailChimp, automatically apply to our contractual relationship with MailChimp and any related exporting of data.
- In addition, we use the
German service "CleverReach" to send newsletters. The provider is CleverReach
GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that
organises and analyses newsletter dispatches. The data you enter for the
purpose of receiving our newsletter (e.g. email address) are stored on
CleverReach's servers in Germany or Ireland.
Our newsletters sent via CleverReach also allow us to analyse your user behaviour. You can find more information about data analysis carried out by CleverReach newsletters at: https://www.cleverreach.com/de/funktion/reporting-und-tracking/.
The information you provided for the purpose of receiving our newsletter will also be stored by us until you unsubscribe from the newsletter, at which point it will be deleted from our servers as well as from the CleverReach servers. This does not affect data we have stored for other purposes.
You can find more details regarding CleverReach data protection provisions at: https://www.cleverreach.com/de/datenschutz/.
Concluding an order processing contract:
In order to fully comply with strict legal data protection requirements, we have concluded an order processing contract with CleverReach.
f) Sending the email
newsletter to existing customers: If you have provided us with your email
address when purchasing goods, we reserve the right to send you regular offers
on similar goods from our range of products by email. According to Section 7, para.
3 of the UWG, we do not have to obtain a separate consent from you for
this. In
this respect, data processing is based solely on our legitimate interest in
personalised direct advertising in accordance with Art. 6 (1), clause 1,
lit. f of
the GDPR. If you initially objected to
the use of your email address for this purpose, we will not send you any
emails. You are entitled to object to
the use of your email address for the aforementioned advertising purpose at any
time with future effect by notifying the responsible person named at the
beginning. Y ou are only required to pay
transmission costs based on the relevant base tariffs. After your objection has been received, the use of your
email address for advertising purposes will be stopped
immediately.
Based on our legitimate interest in personalised direct mail, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you within the scope of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business designation in accordance with Article 6 (1), clause 1, lit. f of the GDPR and to use this information for sending interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a message to those responsible.
7. Links to third-party websites
The links published on our website are researched and created by us with the greatest possible care. However, we have no influence over the current or future design and content of the sites we link to. We are not responsible for the linked pages and explicitly assert no claim of ownership to the content of these pages. The provider of the website, to whom we refer you, bears sole liability for illegal, false or incomplete content as well as any damages incurred through the use or non-use of the information. We explicitly exclude any liability as the party who merely refers to the publication by means of a link.We are only responsible for information issued by third parties whenever we have positive knowledge of it (i.e. also in the event of possibly illegal/criminal content) and it is technically possible and reasonable for us to prevent the use of such information.
8. Analysis and tracking tools
With the tracking measures in use, we hope to ensure
proper design and continual optimisation of our website. Furthermore, we use the tracking measures to statistically
record the usage of our website and to analyse it for the purposes of optimising
the services we provide you.
To the extent required by law, we obtain your consent to
the use of these services under "Manage Tracking Settings" via a so-called
opt-in. This means that the cookie,
the tracking pixel or similar processes with which your personal data are
processed via these services will only be activated if you have given your
consent. The legal basis is
Art. 6 (1),
clause 1, lit. a
of the GDPR. If
you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland
the age of 14), you are not yet able to give
valid data protection consent after the assessment of the respective national
legislator. In this case, we will
evaluate your opt-in as your reasonable expectation regarding the use of the
cookies. In this case, we rely on
Art. 6 (1),
clause 1, lit. f of the GDPR. In this case, our legitimate
interests lie in the user-friendly design of our online offering and our
business interest in the collection, storage and evaluation of the data
material.
You can revoke your consent
at any time with future effect. In order
to exercise your right to revoke, you can either object to the use of these
services on our website under "Manage tracking settings" or follow
the options described below for opting out.
The individual data
processing purposes and data categories can be determined from the tracking
tools in
question.
a) Google Analytics & Google Tag Manager
For the purposes of proper design and continual optimisation of our web pages, we use Google Analytics, a web analysis service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: "Google"). In connection with this, pseudonymous user profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website such as:
- browser type/version,
- operating system in use,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address)
- time of the service request,
is generally transferred to a
Google server in the USA and stored there. However, if you activate IP
anonymisation on this website, your IP address will first be abbreviated by
Google within the member states of the European Union or signatory states of the
Treaty on the European Economic Area. Only in exceptional cases will
the full IP address be transferred to a Google server in the USA and abbreviated
there. Under
contract with the operator of this website, Google will use this information to
analyse your use of the website, to compile reports about website activities and
to provide the website operator with other services related to the use of this
website and the internet. These data may in some cases
be transferred to third parties to the extent legally allowed or to the extent
these third parties are contracted to process these data. At no time will your IP
address be merged with other data by Google. The IP addresses are
anonymised so that no identification is possible (IP
masking).
The data that we collect and
transfer in this way will be automatically deleted after 26
months. You
can block the installation of cookies by configuring your browser settings
accordingly; however, please note that in that case, you will be unable to fully
use all the functions of our website. Furthermore, you can block the
collection of data created by the cookie in relation to your use of the website
(including your IP address) and the processing of these data by Google by
downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the
browser add-on (especially for browsers on mobile devices), you can prevent data
collection from Google Analytics by clicking this link: Click here to activate the Opt-Out from Google
Analytics for our shop
An opt-out cookie will be
installed which prevents the further collection of your data when you visit our
website. The
opt-out cookie only applies to the browser you are using and only for our
website. It is also device-specific. If you delete the cookies in
your browser, you must reinstall the opt-out cookie in order for it to work
again.
This website uses
Google Analytics with the "_anonymizeIp()" expansion. This allows IP addresses to be
processed further in abbreviated form so there is no possibility of tracing them
to specific individuals. If the data collected about
you refer to you personally, they will be immediately quarantined and the
personal data will then be immediately deleted.
We use Google Analytics to
enable us to regularly analyse and improve the use of our
website. Using the statistics we
collect, we can improve the services we offer and design them in a way that is
more interesting to you as a user. This website also uses Google
Analytics to analyse traffic flows across multiple device types. These analyses
are executed using a user ID. You can deactivate analysis
of your usage across multiple devices in your customer account under 'My data'
> 'Personal data'.
We also use the Google Tag
Manager. The
service is used to manage website tags. The Google Tag Manager is
strictly devoted to handling tags (codes that are used to measure visitor
traffic and visitor behaviour). The tags come from other
services (Google Analytics, in our case; see above). The Google Tag Manager only
manages these tags. It does not send any cookies or collect any personal
data. If
tracking has been disabled, this applies to all tracking tags that are managed
using the Google Tag Manager.
Third-party service provider
information:
Headquartered within the EU:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4,
Ireland, Fax: +353 (1) 436
1001.
- Terms and conditions of use: http://www.google.com/analytics/terms/de.html
- Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html
- Privacy policy: http://www.google.de/intl/de/policies/privacy
- Use of data by Google when you use our partners' websites or apps: https://www.google.com/intl/de/policies/privacy/partners
- Use of data for advertising purposes: http://www.google.com/policies/technologies/ads
- Personalised advertising by Google: http://www.google.de/settings/ads
b) econda Analytics
We use econda Analytics on
this website. This is a service provided by econda GbmH,
Zimmerstr. 6, 76137 Karlsruhe,
Germany.
For the proper design and
optimisation of this website, anonymised data are collected using the solutions
and technologies of econda GmbH. These data are stored and used to create usage
profiles created under pseudonyms.
For this purpose, cookies can
be used which enable us to recognise a web browser. However, usage profiles are
never merged with data about the pseudonymous individual without the visitor's
explicit consent. In particular, IP addresses
are rendered unidentifiable immediately upon entry which makes it impossible to
trace the usage profile to specific IP addresses.
The use of pseudonymous data
takes place on the basis of the provisions of section 15 (3) of the German
Telemedia Act.
Visitors of this website can
object at any time to the future collection and storage of these
data.
The
objection shall only apply to the device and web browser from which it was
submitted. Please repeat the process for each device and web browser you
use. Whenever you delete the
opt-out cookie, requests will start to be submitted to econda
again.
To object to the processing of
these data by econda, you can click the following link: Click here to activate the Opt-Out for econda
on our shop.
Third-party service provider
information:
* Privacy policy: https://www.econda.de/datenschutzhinweise/
c) Size advice - Fit
analytics
We continually work to improve
the shopping experience on our online shop. For example, with our size
advisor, we want to make it easier for you to find clothes in the right
size. For
this, we use the size advisor from Fit Analytics GmbH, https://www.fitanalytics.com/. You can input your
measurements in the size advisor. Based on the purchases of other customers with
similar measurements, the size advisor suggests to you a size that will most
likely fit you for the product in question.
The size advisor stores the
following data: The measurements you input
(it uses cookies stored locally on your computer for this). If you use the size advisor a
second time within ten days, the measurements you input previously will still be
remembered. You can deactivate cookies
and delete them from the hard drive of your computer at any
time.
Without your consent, Fit
Analytics will never sell or transfer your personal data in any way to third
parties.
Blutsgeschwister does not
store data from the size tool in any way.
Third-party service provider
information:
* You can find details in the
extensive privacy policy of Fit Analytics: https://www.fitanalytics.com/files/Privacy_Policy_DE-EN_FitA.pdf
d) Optimizly
To improve the user's experience on our website we use the software Optimizly. Optimizly enables us to test how changes on our web pages (e.g. images, texts) affect user behaviour. For this purpose, Optimizly places cookies on the users' devices. Optimizly does not store any IP addresses or personal data relating to our users. For more information about data processing by Optimizly, visit https://www.optimizely.com/privacy/.
You can deactivate tracking by Optimizly on your device at any time by following the steps described here: https://www.optimizely.com/legal/opt-out/
f) Bing Ads Conversion-Tracking
Our online offering
also utilises Conversion-Tracking provided by Microsoft (Microsoft Corporation,
One Microsoft Way, Redmond, WA 98052-6399, USA). Hereby, Microsoft Bing Ads
sets a cookie on your computer, provided that you were linked to our website
through a Microsoft-Bing ad. This allows us and Microsoft
Bing to see that someone clicked on an ad and was linked to a predetermined
landing page (conversion page) of our website. The only information we
receive in the process is the total number of users who have clicked on a Bing
ad and were forwarded to the conversion page. No personal details about the
user's identity will be shared. If you decided not to
participate in the tracking procedure, you may also refuse the required setting
of a cookie - one way to do this is by choosing a browser setting that generally
deactivates the automatic setting of cookies.
g) Trbo
9. Social media plugins
a) We use social media plugins
from social media networks (like Facebook, Instagram, etc.) on
our website in accordance with art. 6.1.1.f of the GDPR to
promote our company via these networks and to get in touch with you and
to communicate. The underlying advertising
purpose constitutes a legitimate interest within the scope of the
GDPR. Responsibility for operating
in compliance with data protection regulations must be guaranteed by each
provider. The integration of these
plugins by us takes place by means of the so-called 2click method, which
provides the highest level of protection to visitors of our
website. This means that when you visit
our site, no personal data are transferred at first to the operator of the
plugins. The
plug-in provider can be recognised by the mark on the button showing their
initials or the logo. This button allows you to
communicate directly with the plug-in provider. You need to click and
activate the marked field in order for the plug-in provider to receive the
notification that you've visited the relevant website with our online
offering. Furthermore, the data
mentioned in clause 3a of this statement will also be submitted.
In the case of
Facebook, once the IP address is collected, it will be made anonymous right away
according to the details supplied by the provider. Activating the plug-in also
means that the personal data you submitted are transmitted to the respective
plug-in provider and stored (if in the USA a US-provider) there.
Because
the plug-in provider performs data collection especially via cookies, we
recommend that you open your browser's security settings and delete all cookies
before you click the greyed-out box.
c) The plug-in provider stores the data collected about you as user profiles and uses this data for advertising purposes, market research and/or the needs-based design of their website. This data evaluation (also including users who are not logged in) is done in particular to display needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, and in order to exercise that right, you need to contact the respective plug-in provider. With
d) Your data is disclosed
regardless of whether you have an account with the plug-in provider and are
logged in or not. If you are logged in at the
plug-in provider, the data we have collected about you will be assigned to the
account you have with the plug-in provider. When you press the activated
button and, for example, link to the page, the plug-in
provider stores this information in your user account and it is publicly shared
with your contacts. We recommend that you log out every time you're done using a
social network, but especially before activating the button because then the
plug-in provider can't assign the data to your profile.
e) If you have been
asked for consent to data processing by one of the providers mentioned below,
the legal basis for the processing is Art. 6 (1), clause 1,
lit. a of
the GDPR. You'll find more details
regarding the purpose and extent of data collection and their processing by the
plug-in provider in the privacy policies of these providers
enclosed. There you can also obtain
further information on your rights in this regard, in particular the respective
options for objection (opt-out), and setting options to protect your
privacy. We would like to point out
that your user data can be transferred and processed outside the European
Union. In
this case, there is a risk that the enforcement of your rights may be made more
difficult.
- Facebook: Facebook Inc., 1601 S California Ave, Palo
Alto, California 94304, USA; http://www.facebook.com/policy.php;
More details regarding data collection: http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications
and http://www.facebook.com/about/privacy/your-info#everyoneinfo
.
- Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com< /A>
- Instagram: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; privacy policy available at https://help.instagram.com/155833707900388
- Opt-Out: http://instagram.com/about/legal/privacy
10. Use of social media: Videos
Plug-ins - Embedding
YouTube videos
a) Our website uses
plug-ins from the Google operated website of the provider YouTube, which belongs
to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
("Google"). We have integrated YouTube
videos into our online offering; they are stored on http://www.YouTube.com and can be viewed on
our website. They're all integrated into
the "extended data protection mode", meaning that no data about you as a user
will be passed on to YouTube as long as you don't watch the
videos. The data mentioned in
paragraph 2 will only be transmitted when you play back the
videos. Please note that we have no
influence on the data transmission.
c) Further details regarding the purpose and extent of collecting data and their processing carried out by YouTube can be found in the privacy policies. The policies also contain more details about the rights and configuration options you have when it comes to protecting your privacy: https://policies.google.com/privacy?hl=en&gl=en .
11. Online advertising | Retargeting/Remarketing /Referral advertising
We use the following online advertising or
retargeting/remarketing services. It is an advertising method we would like
to bring to your attention once again. After visiting our website, this
application ensures that advertisements are displayed the next time you browse
the internet. To the extent required by law, we obtain your consent to the
use of these services under "Manage Tracking Settings" via a so-called
opt-in. This means that the cookie, the tracking pixel or similar processes
with which your personal data are processed via these services will only be
activated if you have given your consent. The legal basis is Art. 6
(1), clause 1, lit. a of the GDPR. If you are in Germany and have not
yet reached the age of 16 (in Austria and Switzerland the age of
14), you are not yet able to give valid data protection consent after the
assessment of the respective national legislator. In this case, we will
evaluate your opt-in as your reasonable expectation regarding the use of the
cookies. In this case, we rely on Art. 6 (1), clause 1, lit. f of
the GDPR. In this case, our legitimate interests
lie in the user-friendly design of our online offering and our business interest
in the collection, storage and evaluation of the data material.
You
can revoke your consent at any time with future effect. In order to
exercise your right to revoke, you can either object to the use of these
services on our website under "Manage tracking settings" or follow the options
described below for opting
out.
a) Google
Ads
We use "Google Ads" on our
website. This is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain
View, CA 94043, USA. Google Ads is a service for
displaying online advertising in the form of ads. The ads are displayed as
search results in your search engine results or in the Google advertising
network.
We define specific keywords
using Google Ads. Our ads are then displayed by
Google in your search engine results if you use Google to search for something
related to the keyword. Within the display network,
the ad is shown on sites that are related to the topic. If you click on one of the
ads, you will be redirected to the advertised website. At the same time, Google Ads
sends a cookie (see the heading 'Cookies' above for more information about this
term). This
allows Google and us to identify if you were directed to our website via our
advertisement and whether you carried out additional actions, e.g. if you made a
purchase, submitted a contact form or contacted us by phone. For this purpose, the cookie
that has been placed will collect and transfer the websites you visited as well
as your IP address to Google servers in the USA (Conversion
Tracking). Google analyses the data in
order to be able to create a report with statistical statements regarding the
number of visitors generated through advertising and the success of the
promotional campaign. Among other things, the
reports show the total number of those users who were directed to our website
via our advertisements. In addition, the reports
contain information about the users' devices and browsers, the end user
locations and the times during which users clicked on the
advertisement. However, the reports do not
contain any information that would personally identify you as a user of our
website. Purpose: the aforementioned
interests represent the purpose of utilising Google Ads. Prevention: cookies that were already placed can be deleted
at any time by modifying the settings in your
browser.
Third-party service provider
information:
Headquartered within the EU: Google Dublin, Google
Ireland Ltd
- User conditions for Google Analytics: https://www.google.com/analytics/terms/de.html
- Data protection overview: https://support.google.com/analytics/answer/6004245?hl< /A>
- Privacy statement: https://policies.google.com/privacy?hl=de&gl
- Use of data by Google when you use our partners' websites or apps: https://www.google.com/intl/de/policies/privacy/partners
- Use of data for advertising purposes: https://policies.google.com/technologies/ads?hl
- Here you have the option to determine whether Google shows you personalised advertising: https://adssettings.google.de/authenticated
b) Google
Remarketing
On our website we use "Google
Remarketing", a service provided by Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA. Google Remarketing is a
function offered by Google AdWords. Google Remarketing allows us
to address you in a targeted manner in the Google Display network by showing ad
banners or text advertisements. On the pages of our website,
on which this function has been activated, Google will integrate so-called
tracking pixels. If you visit one of our
websites, the tracking pixel places an individual cookie on the device you are
using. For
more information on the term 'cookies' please see the above-mentioned
explanations under the relevant title.
Information such as which
websites you have visited, the kind of content you are interested in and which
offers you have clicked on will be stored in the cookie. Additionally, data about the
browser and operating system you use, referring websites, the time of your visit
and further information on the use of the online offering will be stored as
well. Your
IP address will also be collected and transferred to external Google servers in
the USA in pseudonymised form unless you have given Google your explicit
permission to process the data without pseudonymisation. Purpose: The use of Google
Remarketing allows us to show you our advertisements in a more targeted
fashion. As
a result, we are able to provide you with ads that match your
interests. Prevention: cookies that were
already placed can be deleted at any time by modifying the settings in your
browser.
Third-party service provider
information:
Headquartered within the EU:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4,
Ireland, Fax: +353 (1) 436 1001.
- Terms and conditions of use: http://www.google.com/analytics/terms/de.html
- Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html
- Privacy policy: http://www.google.de/intl/de/policies/privacy
- Use of data by Google when you use our partners' websites or apps: https://www.google.com/intl/de/policies/privacy/partners
- Use of data for advertising purposes: http://www.google.com/policies/technologies/ads
- Personalised advertising by Google: http://www.google.de/settings/ads
c) DoubleClick
On our website we use "DoubleClick", a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google DoubleClick is an online marketing tool with which advertisements can be displayed in real time on the basis of the users' presumed interests. Google DoubleClick allows us to address you in a targeted manner in the Google Display network by showing ad banners or text advertisements. On the pages of our website, on which this function has been activated, Google will integrate so-called tracking pixels. If you visit one of our websites, the tracking pixel will place an individual cookie on your device. For more information on the term 'cookies' please see the above-mentioned explanations under the relevant title. Information such as which websites you have visited, the kind of content you are interested in and which offers you have clicked on will be stored in the cookie. Additionally, data about the browser and operating system you use, referring websites, the time of your visit and further information on the use of the online offering will be stored as well. Your IP address will also be collected and transferred to external Google servers in the USA in pseudonymised form unless you have given Google your explicit permission to process the data without pseudonymisation. The cookie may contain a campaign identification code that is used to collect campaigns the user is already familiar with. Furthermore, data can be transferred to Google in order to facilitate online advertising and commission settlements. Purpose: the use of DoubleClick by Google makes it possible to optimise and improve the use and display of user-relevant advertisements. Prevention: cookies that were already placed can be deleted at any time by modifying the settings in your browser.
Third-party service provider
information:
Headquartered within the EU:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4,
Ireland, Fax: +353 (1) 436 1001.
- Terms and conditions of use: http://www.google.com/analytics/terms/de.html
- Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html
- Privacy policy: http://www.google.de/intl/de/policies/privacy
- Use of data via Google when you visit/use websites or apps owned by our partners: https://www.google.com/intl/de/policies/privacy/partners
- Use of data for advertising purposes: http://www.google.com/policies/technologies/ads
- Personalised advertising by Google: http://www.google.de/settings/ads
Our website uses cookies for
advertising purposes. For this purpose, we have
integrated into our website technologies from the company Criteo SA (32 Rue
Blanche, 75009 Paris) which enable us to recognise your device and collect
information about your browser activities, so we can display ads about products
and services that are likely to be more interesting for you. This enables us to display
our advertising on partner websites, apps and emails to visitors who are
interested in our products. You can find a current
overview of all Criteo's advertising partners here: https://www.criteo.com/privacy/criteo-works-with-the-following-platforms/
d)
Criteo
http://optout.networkadvertising.org/?c=1
http://www.youronlinechoices.com/
We can
exchange information with our trusts advertising partners, such as technical
identifiers from your registration information on our website or our CRM
system. This enables your devices and/or environments to be linked so you
have a seamless user experience on the devices and environments you
use. Third-party service provider information:
* For more details about these
linking capabilities, please see the data protection policy that you can find on
the aforementioned platforms or in the explanations below. https://www.criteo.com/de/privacy/
e) Facebook
Pixel
On our website we use the
Facebook Pixel, Custom Audiences and Facebook Conversion of Facebook Inc
function. 1
Hacker Way, Menlo Park, CA 94025, USA.
Facebook Pixel is an
analytical tool used by us to assess the effectiveness of the advertisements we
placed on Facebook (the so-called "Facebook
Ads"). It allows
us to address target groups for our advertisements. In doing so, our Facebook ads
will only be displayed to those Facebook users who have visited one of our
websites first. Moreover, Facebook pixels
enable us to see whether you were automatically redirected to our website after
clicking on one of our Facebook ads. This means we can provide
advertisements that are specifically tailored to your interests.
For this purpose, we
have implemented a Facebook tracking pixel on our website. This is a small pixel graphic
that makes it possible to record and analyse log files. When you visit our website,
your browser will establish a direct connection with the Facebook
servers. To our knowledge, Facebook
will then be informed about which page of our website you have visited or which
of our Facebook ads you actually clicked on. Provided that you are logged
into your Facebook account, Facebook is able to allocate your visit to our
website or the click on our Facebook ads to your Facebook account.
Also, it cannot be
ruled out that Facebook will read/retrieve and store your IP address and
additional identifiers, even if you are not logged into
Facebook. More details about how the
Facebook pixel works can be read here: https://www.facebook.com/business/help/651294705016616.
We also apply a
method called "Custom Audiences from File". As you are the newsletter
recipient, your email address will be encrypted and uploaded in the
process. It allows us to determine the
recipient of our Facebook ads and ensure that only interested parties get to see
the advertisements. Please note that we have no
control over the quantity, quality or storage period of the transmitted
data. Facebook may pass your
information on to third parties. Purpose: we use the Facebook
pixel to be able to show you advertisements that match your interests and to
make our website even more attractive. Prevention: You may
deactivate Facebook Custom Audiences by logging into your Facebook account and
modify your settings under the following link: https://www.facebook.com/settings/?tab=ads
Third-party service provider
information:
Headquartered within the European Union: Facebook Ireland
Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
12. Use of rating and test seal graphics
Integrating the Trusted Shops
Trustbadge
In order to display
our Trusted Shops seal of approval and possibly collected reviews as well as for
the offer of Trusted Shops products for shoppers after they made a purchase, we
have integrated the Trusted Shops Trustbadge into this website.
We are using
Trusted Shops on the basis of our legitimate interest in the optimisation and
the efficient operation of our online offers, and also to make the quality of
our services more transparent for you, Article 6 1.1. lit. f DSGVO.
The Trustbadge and the
services being advertised in connection therewith are offered by Trusted Shops
GmbH, Subbelrather Str. 15C, 50823 Köln,
Germany.
The Trustbadge is a clickable
icon that we use to provide various information. We utilise it to display the
seal of approval of the Trusted Shops GmbH, promotions from the Trusted Shops
Products for buyers after placing an order, and collected
reviews. When you call up the
Trustbadge, the web server automatically saves a server logfile that contains
your IP address, date and time of the retrieval, the data volume transferred and
the inquiring provider (access data), for example, and documents the
retrieval. These access data won't be
evaluated and will be automatically overwritten and deleted no later than seven
days after you last visited the website.
Additional personal data will
only be passed on to Trusted Shops with your explicit consent and insofar as you
have decided to use Trusted Shops products after completing your order, or if
you already registered yourself as a user. In this case, the contractual
agreement made between you and Trusted Shops applies.
Third-party
service provider information:
* Privacy statement: https://business.trustedshops.de/impressum#datenschutz
13. Data processing in the context of the VIB Club
a) These are the data we process
We need the following mandatory information from you, which will be used for your VIB Club registration:
- Surname, first name
- Email address
- Billing address
- Delivery address
- Title
- Date of birth
We process your personal data in accordance with the applicable data protection laws for the following purposes:
- Running the VIB Club
- Email advertising, if you have consented
- Compliance with legal requirements
- Contract processing
- Individualising our customer approach
- Personalisation
- Date of birth for personalisation
c) Legal basis
The processing of your data is necessary in order to manage the VIB Club to fulfil the contract ((Article 6 (1)(1)(b) of the GDPR (General Data Protection Regulation)). Provided that you consented to email advertising in the course of registering for the VIB Club, your agreement constitutes the legal basis for the data processing (Article 6 (1)(1)(a) of the GDPR). You can of course withdraw your consent at any time. If the processing is carried out for the purposes of complying with legal provisions, the legal basis of the data processing is Article 6 (1)(1)(c) of the GDPR.
d) Use of Apple Wallet or Android Google Wallet apps:
You also have the option to transfer your VIB customer club card to your Apple Wallet or a Google Wallet app and save it in the form of a QR code. In doing so, your customer number is processed.
You can of course remove your VIB customer club card from your Wallet app at any time and thus deleting it.
14. Applications for job advertisements on our website
We post current vacancies in a separate section on our website, to which interested parties can apply by e-mail to the contact address provided.An inclusion in the application process requires that applicants provide us with all the personal data required for a well-founded and informed assessment and selection. The required information includes general information about the person (name, a telephone and an electronic contact option) as well as performance-specific evidence of the qualifications required for a job. If necessary, health-related information is also required, which in the interest of social protection must be given special consideration by the applicant in terms of labour and social law.
The individual job advertisement shows which components an application must contain in individual cases for its eligibility and in which form these components are to be submitted.
After receipt of the application, the applicant data will be saved by us and evaluated exclusively for the purpose of processing the application. For any queries that arise in the course of processing, we use either the email address provided by the applicant with his application or a specified telephone number.
The legal basis for this processing, including contacting for queries, is in principle Art. 6 (1), clause 1, lit. b of the GDPR in conjunction with Section 26, para. 1 of the Federal Data Protection Act (new), which states that undergoing the application process is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9, para. 1 of the GDPR (e.g., health data such as information on the severely disabled) that are requested from applicants, processing takes place in accordance with Art. Art. 9, para. 2, lit. b of the GDPR, so that we can exercise the rights arising from labour law and the law of social security and social protection and fulfil our obligations in this regard.
If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, their transmitted data and all electronic correspondence will be deleted after a relevant notification after 6 months at the latest. This time limit is based on our legitimate interest in answering any follow-up questions to the application and, if necessary, in being able to meet our obligations to provide evidence from the regulations on equal treatment of applicants.
In the case of a successful application, the data provided will be processed in accordance with Art. 6 (1), clause 1, lit. b of the GDPR in conjunction with § 26 Para. 1 Federal Data Protection Act (new) processed for the purpose of carrying out the employment relationship.
15. Contests
On our website, we offer you the opportunity to enter competitions by providing personal data. The data is entered into an input screen, transmitted to us and saved. The data will only be passed on to third parties if we organise these competitions together with partners.Your email address will be collected when participating in the competition.
The processing of this data takes place within the framework of pre-contractual measures that are necessary for the implementation of the contest. The data will then be deleted unless the data is still required for the performance of a contract or pre-contractual measures.
The legal basis for the processing of your personal data is Art. 6 para 1 p. 1 lit. of the GDPR.
16. Rights of the persons affected
Your rights:
- pursuant to Art. 15 DSGVO, you may obtain information about your stored personal data. In particular, you can obtain information regarding the purposes of the processing, the category of the personal data, the categories of recipients to whom your data was or will be disclosed, the planned retention period, the existence of the right to have data corrected or deleted, limited processing or the right to object, the right to appeal, to trace your data back to its source as long as it wasn't collected by us, automated decision making including profiling and, possibly, to request meaningful information relevant to the particulars;
- pursuant to Art. 16 DSGVO, in regards to your personal data stored with us, you may request that incorrect data is corrected immediately or completed if necessary;
- pursuant to Art. 17 DSGVO, you may request deletion of your personal data stored with us as long as the data processing is not required to exercise the right of free expression and the right to information, to fulfil a legal obligation for reasons of public interest or assertion, exertion or defence of legal claims;
- pursuant to Art. 18 DSGVO, you may request limited processing of your personal data in so far as you contest the accuracy of said data, the data has been processed unlawfully, but you reject deletion and we don't need the data any longer, but you need them in order to assert, exercise or defend legal rights or, pursuant to Art. 21 DSGVO, you have filed an objection against data processing;
- pursuant to Art. 20 DSGVO, you may obtain the personal data you provided to us in a structured, conventional and machine-readable format, or request that the data be transferred to another person in charge; 7 par. 3 DSGVO, you may revoke the consent you gave previously at any time. As a consequence, we're no longer allowed to process data that is based on this consent and
- pursuant to Art. 77 DSGVO, you can raise this issue with the supervisory authority in the town where you usually live or work, or contact our headquarters.
17. Right of objection
Provided that your
personal data is processed on the basis of legitimate interests pursuant to
Art. 6
para 1 p. 1 lit. f DSGVO, you have the right,
in accordance with Art. 21 DSGVO, to object to the
processing of your personal data, so far as there are reasons that arise from
your specific situation or if your opposition is directed against direct
advertising. In the latter case, you have
a general right to object without giving a specific reason and we will implement
it.
Should you wish to exercise
your right to revoke or object, it is sufficient to send an email to: service@blutsgeschwister.de
18. Data security
Each time you visit
our website, we use the so-called SSL procedure (Secure Socket Layer) in
conjunction with the highest level of encryption that is supported by your
browser. This is usually a 256-bit
encryption. If your browser doesn't
support a 256-bit encryption, we will use the 128-bit v3 technology
instead. Whether a single page of our
website is transmitted in encrypted form can be recognised by the closed
exposition of the key or lock symbol in the bottom status bar of your
browser.
Apart from that, we employ
appropriate technical and organisational security measures in order to protect
your data against accidental or intentional manipulations, partial or complete
loss, destruction or against unauthorised access by third parties.
We continuously improve
our security measures in line with technological
developments.
20. Currentness of and changes to the privacy policy
This privacy statement is
currently valid and dated July 2021.
The further development of
our website and offers thereof or changes to legal or official requirements
might make it necessary to modify the privacy policy. You may, at any time, access
and print out the current privacy policy on our website under the following
link: https://www.blutsgeschwister.de/de/info/privacy
****************************