New favourite basics: discover our autumn / winter 2018 must-haves! Close

You're safe here!

Privacy

Blutsgeschwister GmbH Privacy Policy

Thank you for your interest in our company. We take the protection of your data very seriously.

In general, you can use our website without inputting any personal data.  If you wish to make use of our company's services via our website, it could be necessary for us to process your personal data.  Whenever it is necessary to process personal data, and no legal basis for such processing exists, we always ask for the consent of the person involved (the data subject).

The processing of personal data (e.g. the data subject's name, address, e-mail address or telephone number) always takes place in accordance with the General Data Protection Regulation (GDPR) and in adherence to country-specific data protection regulations that apply to us.

With the following privacy policy, we wish to inform the public of the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of their rights.

As the controller responsible for the data processing, we have implemented numerous technical and organisational measures to ensure the highest level of protection possible for the personal data processed via our website. The transfer of data via the internet is, however, inherently subject to possible security gaps. As a result, it is impossible to guarantee 100% protection. Therefore, any data subject also has the alternative to transfer their personal data to us by other means (for example, by telephone).

  1. Definitions

This privacy policy is based on the definitions used in the GDPR as enacted by the European Commission (art. 4 of the GDPR). This privacy policy is intended to be easy for anyone to read and understand. To guarantee this, we would first like to explain to you the terms that are used. The following definitions, among others, are used in this privacy policy:

 

  • 'personal data': All information referring to an identified or identifiable natural person (referred to as a 'data subject'); a natural person is considered identifiable whenever he or she can directly or indirectly be identified, especially by means of allocating an identifier like a name, identification number, location information, online identifier or other particular traits which express the physical, physiological, genetic, psychological, financial, cultural or social identity of this natural person;
  • 'data subject': Any identified or identifiable natural person whose personal data are processed by the party responsible for the data processing. "Einschränkung der Verarbeitung" die Markierung gespeicherter personenbezogener Daten mit dem Ziel, ihre künftige Verarbeitung einzuschränken;
  • 'restriction of processing': marking of stored personal data with the goal of restricting its processing in the future.
  • 'profiling': any type of automated processing of personal data in which personal data are used to analyse specific personal aspects related to a natural person, particularly to analyse or predict aspects related to this natural person's job performance, financial situation, health, personal preferences, interests, creditworthiness, conduct, place of residence or change of location.
  • 'controller': the natural or legal person, authority, institution or other body that decides itself or in collaboration with others about the purposes and means of processing personal data; if the purposes and means of this processing are regulated by collective labour law or the law of EU member states, then the controller can be subject to the specific criteria of its designation pursuant to collective labour law or the law of EU member states.
  • 'Recipient': a natural or legal person, authority, institution or other body to which personal data are disclosed, regardless of whether they are a third party or not.

Authorities which may receive personal data within the scope of an investigative procedure under collective labour law or the law of EU member states are, however, not considered recipients; the processing of these data by the authorities in question takes place in accordance with applicable data protection regulations with respect to the purposes of the processing;

  • 'third party': a natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and the persons authorised under the direct control of the controller or processor to process the personal data;
  • 'consent' of the data subject: any voluntary permission granted unequivocally and in an informed manner for the specific instance in the form of a declaration or other clear act of confirmation by which the data subject makes known that he or she agrees with the processing of his or her personal data.

 

  1. Name and contact information of the controller and data protection officer

a) Controller

The controller as defined by the General Data Protection Regulation and other national data protection laws of the EU member states as well as other provisions under data protection law is:

Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965 Berlin
Deutschland

Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de
Website: www.blutsgeschwister.de

b) Data protection officer

The data protection officer of the controller is:

Inga Schlemermeyer
Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965 Berlin
Deutschland

E-Mail: datenschutz@blutsgeschwister.de
Website: www.blutsgeschwister.de

 

  1. Collection and storage of personal data and the nature and purpose of their use

a) When visiting our website

In general, you can use our website without disclosing your identity. When using our website purely for informational purposes (i.e. when you are not registered or do not provide us with any other information), the browser you are using on your end-device automatically sends information to our website's server. This information is stored temporarily in a so-called 'logfile'. The following information is collected in this way without any action on your part and is stored until automatically deleted:

  • IP address of the requesting computer,
  • Data and time of access,
  • Name and URL of the file accessed,
  • Website from which the access takes place (referrer URL),
  • Browser being used and, in some cases, the operating system on your computer as well as the name of your internet service provider.

These data are processed by us for the following purposes:

to ensure smooth establishment of a connection with the website,

  • to ensure comfortable use of the website,
  • to analyse system security and stability, and
  • for other administrative purposes.

The legal basis for this data processing is art. 6.1.1.f of the GDPR. Our legitimate interest is based on the data collection purposes listed above. At no time do we use the collected data for the purpose of tracing your personal identity.

Furthermore, we use cookies and analytics services whenever you visit our website. For more information about these, see sections 5 and 7 of this privacy policy.

b) Additional functions and services of our website

In addition to purely informational use of our website, we offer various services which you can use if you are interested. For this, you must, as a rule, provide further personal data which we use to provide the service in question and which are subject to the aforementioned principles of data processing.

We use the services of external parties for certain aspects of processing your data. These parties are carefully selected and contracted by us. They are bound to our instructions are monitored regularly.

Furthermore, we can transfer your personal data to third parties whenever promotional offers, sweepstakes, contracting or other services are provided by us in collaboration with partners. You receive more information about this when inputting your personal data or below in the description of our services.

If our service providers or partners are located in a country outside the European Economic Area (EEA), we inform you of the implications of this fact in the description of the service.

c) Objection or withdrawal of consent to processing your data

Once you have granted consent for your personal data to be processed, you can withdraw this at any time. After you have issued such a withdrawal to us, it influences the permissibility of the processing of your personal data.

If the processing of your personal data is based on a weighing of interests, you can issue an objection to the processing. This is the case in particular whenever the processing is not necessary for the fulfilment of a contract with you, which is made known to you in each of the following descriptions of functions. When you issue such an objection, we ask that you explain the reasons why we should not process your personal data. In case you have a justified objection, we will assess the situation and then either reconfigure and/or adjust the data processing or show you our mandatory, protected reasons for continuing the processing.

Of course, you can object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can inform us of your objection to advertising using the following contact information:

 

Via our customer service

Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de

 

Vie our data protection officer

E-Mail: datenschutz@blutsgeschwister.de

 

e) When placing orders on our website

You can place orders via our website either as a guest (without registering) or by registering in our shop as a customer for future orders. The advantage of registering for you is that you can log in to our shop directly using your e-mail address and password whenever you wish to place an order in the future without having to enter all of your contact details again.

Your personal data are then entered into an input screen and transferred to us and stored. Whenever you place an order via our website, we collect the following data first, whether you are placing the order as a guest or registering in the shop:

  • Title, first name, surname,
  • a valid e-mail address,
  • Address,
  • Telephone number (land line and/or mobile number)

These data shall be collected

Die Erhebung dieser Daten erfolgt,

  • to identify you as our customer;
  • to process, fulfil and handle your order;
  • for correspondence with you;
  • for invoicing;
  • to settle liability claims if any, as well as the enforcement of claims if any against you; to settle liability claims if any, as well as the enforcement of claims ifany against you;
  • to ensure the technical administration of our website;
  • for the administration of our customer data.

In connection with the ordering process, we will obtain your consent for the processing of this data.

The data for your order and/or your registration shall be processed, and as per Section 6 (1)(1)(b) of the GDPR, 6.1.1. is required for the specified purposes of properly processing your order and for the mutual fulfilment of obligations arising under the purchase contract. For this, we may forward your payment data to our payment service provider. The legal basis for the same is also Section 6 (1)(1)(b) 6.1.1. of the GDPR.

We may also process the data provided by you in order to inform you about further interesting products from our portfolio, or to send you e-mails containing technical information

The personal data (address, payment and ordering data) collected by us for processing your order shall be stored until the expiry of the legal retention period (10 years), after which it shall be deleted, unless we are obliged to store the same for a longer period under storage and documentation obligations relating to taxation and commercial law (commercial code, criminal code or tax code) as per Section 6 (1)(1)(c) of the GDPR, or if you have consented to storage exceeding the above period in accordance with Section 6 (1)(1)(a) 6.1.1. of the GDPR.

 

  1. Disclosure of data

As regards third party disclosure, we shall only disclose your personal data to the service partners involved in the completion of the contract, such as for example disclosures to the logistics company commissioned to make the delivery and to the payment service providers responsible for payment matters. The scope of the data provided during such disclosures shall however be limited to the minimum that is required.

Your payment details will be sent to the appropriate payment services provider, depending on the payment method selected by you. The payment service provider shall be responsible in respect of your payment data. Information, in particular, concerning the responsible authority within the payment service providers, the contact details of the data protection officers of the payment service providers, and the categories of personal data that are processed by the payment service providers can be obtained from the Internet addresses specified in each case below.

In case of payment via PayPal, credit card or immediate transfer, we shall pass on your payment data to BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, www.bspayone.com (hereinafter referred to as "PAYONE”) for payment processing. The credit card details entered by you under shop.blutsgeschwister.de shall be received by PAYONE directly in encrypted form. PAYONE is PCI DSS certified, and therefore fulfils the strictest requirements for the secure handling and storage of credit card data. No payment information will be present on the servers of Blutsgeschwister GmbH even in case of payment through PayPal and immediate transfer. Further data protection information can be found in the PAYONE privacy policy: https://www.payone.com/datenschutz/.

When selecting the payment method Purchase on account via Klarna and instalment purchase via Klarna, we will pass on your payment details for the purposes of payment processing to Klarna GmbH

Theresienhöhe 12, D-80339 Munich, https://www.klarna.com/de/ (hereinafter referred to as "Klarna”).

When you opt for Klarna Purchase on account and Klarna instalment purchase as a payment option under Klarna's payment services, you automatically consent to our collection and forwarding of the following personal data to Klarna, that are required to conduct identity and creditworthiness checks, such as for example your first name and surname, address, date of birth, sex, e-mail address, telephone number, as well as the data required for processing the purchase on account, such as the number of articles, article number, invoice amount and taxes in percentage. Such data shall be forwarded in accordance with Section 6 (1)(1)(b) 6.1.1. of the GDPR and Section 6 (1)(1)(f) 6.1.1. of the GDPR, so that Klarna can raise an invoice for processing your purchase in accordance with the invoice processing selected by you, and can also conduct an identity and creditworthiness check. In this connection, Klarna has a legitimate interest in the transmission of the personal data of the purchaser and requires the same in order to obtain information from credit reference agencies for the purpose of identity and creditworthiness checks. In Germany this may refer to the following credit reference agencies: * Schufa Holding AG, Kormoranweg 5, 65203 Wiesbaden * Bürgel Wirtschaftsinformationen GmbH & Co. KG, Post box 5001 66, 22701 Hamburg * Creditreform Bremen Seddig KG, Contrescarpe17, 28203 Bremen * infoscore Consumer Data GmbH, Rheinstraße 99, 76532Baden-Baden. In connection with the decision about the establishment,fulfilment or termination of the contractual relationship, Klarna shall also collect and use information concerning the previous payment history of the purchaser, and the probability values concerning this behaviour in the future,in addition to address verification. Klarna shall calculate these score values based on a scientifically recognised mathematical-statistical procedure. For this, Klarna will also use your address data, among other things. If after this calculation, it appears that your creditworthiness requirements are not met, Klarna will notify you concerning the same immediately.

Your rights as against Klarna:

  1. You may withdraw your consent to the use of your personal data to Klarna at any time. However, Klarna shall remain entitled to process, use and to transmit the personal data insofar as this is required for the contractual payment processing by Klarnas Dienste, or where mandated by law, or required by a court of law or a public authority.
  2. Of course, you can always obtain information about the personal data stored by Klarna, rectify incorrect or incomplete data stored with Klarna, or request the deletion of the same, insofar as the same are no longer required for the purpose for which such data were collected. If you as a purchaser so wish, or wish to notify Klarna concerning changes to the stored data, you may contact Datenschutz@klarna.de.

No transfer of your personal data shall be made to third parties for purposes other than those mentioned above.

We will only share your personal information with third parties if:

You have expressly consented to the same as per Section 6 (1)(1)(a) 6.1.1.  of the GDPR, or the forwarding of the data

  • as per Section 6 (1)(1)(f) 6.1.1.  of the GDPR is required for enforcement, exercise or defence of legal claims and there is no ground to assume that you have an overriding and legitimate interest in not disclosing your data,
  • in case there is a legal obligation for the disclosure as per Section 6(1)(1)(c) 6.1.1.  of the GDPR, and this is also legally permissible and furthermore,
  • is required for the execution of contractual relationships with you as per Section 6 (1)(1)(b) 6.1.1.  of the GDPR.

In connection with the ordering process, your consent shall be obtained for forwarding your data to third parties.

  1. Use of cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your terminal device in any way, do not contain viruses, Trojans or other malicious software.

A cookie contains information generated in connection with the specific terminal device used in each case. However, this does not mean that we will obtain direct knowledge of your identity thereby.

On the one hand, cookies are used to make the experience of using of our range of offerings more pleasant for you. Thus we use session cookies in order to detect repeat visits to individual pages of our website. Session cookies will be automatically deleted on leaving our page.

In addition, we also save temporary cookies in order to optimise user-friendliness, and such cookies are stored on your terminal device for a specified period of time. When you visit our site again to avail of our services, it will be automatically recognised that you have already visited us earlier, together with your inputs and settings, so that you do not to have to enter them all over again.

On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it in order to optimise our range of offerings (see Section 7). When you visit our site again, these cookies enable us to automatically recognise that you have already been here. These cookies are automatically deleted after a specified time in each case.

The data processed through cookies are required for the specified purposes,in order to safeguard our legitimate interests and those of third parties as per Section 6 (1)(1)(f) 6.1.1. of the GDPR.

Most browsers accept cookies automatically. You can however configure your browser not to accept cookies, or to warn you before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website.

 

  1. Newsletter

a) With your consent, you can be made a subscriber to our newsletter, in which we inform you about interesting current offers. The advertised goods and services are mentioned in the declaration of consent.

b) To register for our newsletter, we use the Double-opt-in procedure. This means that after you register, we send an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, we will automatically delete your information.

c) The only requirement for sending the newsletter is your e-mail address. The provision of additional, specially marked data is voluntary and is used to address you personally. After you confirm, we save your e-mail address for the purpose of sending you our newsletters. The legal basis for this is article 6.1.1.a of the GDPR.

d) At any time, you can withdraw our consent from allowing us to send you the newsletter, and opt out of the newsletter. You can withdraw consent by clicking on the link provided in each newsletter e-mail, via this form on the website, by sending an e-mail to service@blutsgeschwister.de or sending a message to the contact information stated in the imprint/contact section of the website.

e) Please note that we analyse your user behaviour whenever we send the newsletter. For this analysis, the e-mails we send contain so-called web beacons and/or tracking pixels which are one-pixel image files that are stored on our website. To perform the analyses, we link the files mentioned in section 3 and the web beacons with your e-mail address and an individual ID. The links contained in the newsletter also include this ID. With the data we collect in this way, we create a user profile to customise the newsletter to your individual interests. In this way, we keep track of when you read our newsletter and which links in the newsletter you click on. This enables us to determine what your personal interests are. We link these data to the actions you take on our website.

You can object to this tracking at any time by clicking on the special link provided in every e-mail or informing us via other means of contact. The information is stored for as long as you are subscribed to the newsletter. After you opt out, we store the data anonymously and purely for statistical purposes.

  1. Links to third-party websites

The links published on our website are researched and created by us with the greatest possible care. However, we have no influence over the current or future design and content of the sites we link to. We are not responsible for the linked pages and explicitly assert no claim of ownership to the content of these pages. The provider of the website, to whom we refer you, bears sole liability for illegal, false or incomplete content as well as any damages incurred through the use or non-use of the information. We explicitly exclude any liability as the party who merely refers to the publication by means of a link. We are only responsible for information issued by third parties whenever we have positive knowledge of it (i.e. also in the event of possibly illegal/criminal content) and it is technically possible and reasonable for us to prevent the use of such information.

  1. Analysis and tracking tools

The tracking measures listed below and implemented by us are executed on the basis of art. 6.1.1.f of the GDPR. With the tracking measures in use, we hope to ensure proper design and continual optimisation of our website. Furthermore, we use the tracking measures to statistically record the usage of our website and to analyse it for the purposes of optimising the services we provide you. These interests are considered legitimate within the scope of the aforementioned regulation.

The individual data processing purposes and data categories can be determined from the tracking tools in question.

 

a) Google Analytics

For the purposes of proper design and continual optimisation of our web pages, we use Google Analytics, a web analysis service from Google Inc.  (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: 'Google').  In connection with this, pseudonymous user profiles are created and cookies (see section 5) are used.  The information generated by the cookie about your usage of this site such as

  • browser type/version,
  • operating system in use,
  • referrer URL (the previously visited page),
  • host name of the accessing computer (IP address)
  • time of the service request,

is generally transferred to a Google server in the USA and stored there. However, if you activate IP anonymisation on this website, your IP address will first be abbreviated by Google within the member states of the European Union or signatory states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Under contract with the operator of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide the website operator with other services related to the use of this website and the internet. These data may in some cases be transferred to third parties to the extent legally allowed or to the extent these third parties are contracted to process these data. At no time will your IP address be merged with other data by Google. The IP addresses are anonymised so that no identification is possible (IP masking).

You can block the installation of cookies by configuring your browser settings accordingly; however, please note that in that case, you will be unable to fully use all the functions of our website.

Furthermore, you can block the collection of data created by the cookie in relation to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, particularly for browsers on mobile devices, you can block the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will be installed which prevents the further collection of your data when you visit our website. The opt-out cookie only applies to the browser you are using and only for our website. It is also device-specific. If you delete the cookies in your browser, you must reinstall the opt-out cookie in order for it to work again.
Click here to activate the Opt-Out from Google Analytics for our shop

This website uses Google Analytics with the extension '_anonymizelp()'. This allows IP addresses to be processed further in abbreviated form so there is no possibility of tracing them to specific individuals. If the data collected about you refer to you personally, they will be immediately quarantined and the personal data will then be immediately deleted.

We use Google Analytics to enable us to regularly analyse and improve the use of our website. Using the statistics we collect, we can improve the services we offer and design them in a way that is more interesting to you as a user. In exceptional cases in which personal data are transferred to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

You can find further information on data protection in connection with Google Analytics by clicking on the following link to the Google Analytics 'Help' section: https://support.google.com/analytics/answer/6004245?hl=de und der Datenschutzerklärung: https://policies.google.com/privacy?hl=de&gl=de.

This website also uses Google Analytics to analyse traffic flows across multiple device types. These analyses are executed using a user ID. You can deactivate analysis of your usage across multiple devices in your customer account under 'My data' > 'Personal data'.

 

b) econda Analytics

For the proper design and optimisation of this website, anonymised data are collected using the solutions and technologies of econda GmbH. These data are stored and used to create usage profiles created under pseudonyms.

For this purpose, cookies can be used which enable us to recognise a web browser. However, usage profiles are never merged with data about the pseudonymous individual without the visitor's explicit consent. In particular, IP addresses are rendered unidentifiable immediately upon entry which makes it impossible to trace the usage profile to specific IP addresses.

The analysis of user behaviour is based on article 6 (1) lit. F DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behaviour in order to optimize both his web offer and his advertising.

Visitors of this website can object at any time to the future collection and storage of these data.

The objection shall only apply to the device and web browser from which it was submitted. Please repeat the process for each device and web browser you use. Whenever you delete the opt-out cookie, requests will start to be submitted to econda again.

To object to the processing of these data by econda, you can click the following link: Click here to activate the Opt-Out for econda on our shop.


c) Size advice - Fit analytics

We continually work to improve the shopping experience on our online shop. For example, with our size advisor, we want to make it easier for you to find clothes in the right size. For this, we use the size advisor from Fit Analytics GmbH, https://www.fitanalytics.com/. You can input your measurements in the size advisor. Based on the purchases of other customers with similar measurements, the size advisor suggests to you a size that will most likely fit you for the product in question. The size advisor stores the following data: The measurements you input (it uses cookies stored locally on your computer for this). If you use the size advisor a second time within ten days, the measurements you input previously will still be remembered. You can deactivate cookies and delete them from the hard drive of your computer at any time.

Without your consent, Fit Analytics will never sell or transfer your personal data in any way to third parties.

Blutsgeschwister does not store data from the size tool in any way.

You can find details in the extensive privacy policy of Fit Analytics: https://www.fitanalytics.com/files/Privacy_Policy_DE-EN_FitA.pdf

 

  1. Social media plugins

a) We use social media plugins from social media networks (like Facebook, Instagram, etc.) on our website in accordance with art. 6.1.1.f of the GDPR to promote our company via these networks. The underlying advertising purpose constitutes a legitimate interest within the scope of the GDPR. Responsibility for operating in compliance with data protection regulations must be guaranteed by each provider. The integration of these plugins by us takes place by means of the so-called 2click method, which provides the highest level of protection to visitors of our website. This means that when you visit our site, no personal data are transferred at first to the operator of the plugins. The plug-in provider can be recognised by the mark on the button showing their initials or the logo. This button allows you to communicate directly with the plug-in provider. You need to click and activate the marked field in order for the plug-in provider to receive the notification that you've visited the relevant website with our online offering. Furthermore, the data mentioned in clause 3 of this statement will also be submitted. In case of Facebook, once the IP address is collected, it will be made anonymous right away according to the details supplied by the provider.

Activating the plug-in also means that the personal data you submitted are transmitted to the respective plug-in provider and stored (in the USA if it is a US-provider) there. Because the plug-in provider performs data collection especially via cookies, we recommend that you open your browser's security settings and delete all cookies before you click the greyed-out box.

b) We have no control over the collected data and data-processing operations, nor do we know the full extent of the data collection, the purposes of the processing and the data storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

c) The plug-in provider stores the data collected about you as user profiles and uses said data for advertising purposes, market research and/or the needs-based design of their website. This data evaluation is done in particular (it also includes users who are not logged in) to display needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, and in order to exercise that right, you need to contact the respective plug-in provider. With the plug-ins, we give you the option to interact with social networks and other users, so that we can improve our offer and make it more attractive for you as a user. The legal basis for using the plug-ins is found in Art. 6.1.1. f of the GDPR.

d) Your data is disclosed regardless of whether you have an account with the plug-in provider and are logged in or not. If you are logged in at the plug-in provider, the data we collected about you will be assigned to the account you have with the plug-in provider. When you press the activated button and ?link the page, for example, the plug-in provider stores this information in your user account and it is publicly shared with your contacts. We recommend that you log out every time you're done using a social network, but especially before activating the button, because then the plug-in provider can't assign the data to your profile.

e) You'll find more details regarding the purpose and extent of collecting data and their processing by the plug-in provider in the enclosed privacy policies of these providers. The policies also contain more details about the relevant rights and configuration options you have when it comes to protecting your privacy.

f) Addresses of the respective plug-in providers and the URL of their privacy policies:

  • Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; More details regarding data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework
  • Instagram: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; https
  1. Plug-ins - integration of YouTube videos

a) Our website uses plug-ins from the YouTube website, one of Google's subsidiaries. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. We have integrated YouTube videos into our online offering; they are stored on http://www.YouTube.com and can be viewed on our website. They're all integrated in the "extended data protection mode", meaning that no data about you as a user will be passed on to YouTube as long as you don't watch the videos. The data mentioned in paragraph 2 will only be transmitted when you play back the videos.

Please note that we have no influence on the data transmission.

b) When you visit the website, YouTube is informed that you called up the relevant subpage of our website. Furthermore, the data mentioned in clause 3 of this statement will also be submitted. This happens irrespective of whether you have and are logged into a YouTube user account, or whether you don't have a user account. If you're logged into your Google account, your data will be directly assigned to your account. In case you don't want the data assignment via your YouTube profile, you need to log out before you activate the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or the needs-based design of their website. This data evaluation is done in particular (it also includes users who are not logged in) to provide needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, and in order to exercise that right, you need to contact YouTube.

c) Further details regarding the purpose and extent of collecting data and their processing carried out by YouTube can be found in the privacy policies. The policies also contain more details about the rights and configuration options you have when it comes to protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

11. Online advertising - remarketing

We use Google Remarketing. It is an advertising method we would like to bring to your attention once again. After visiting our website, this implementation ensures that advertisements are displayed the next time you browse the internet. This is done by means of the cookies stored in your browser, as they are used to capture and analyse your usage pattern when you visit different websites via Google. That way, Google can detect your previous visit to our website. The data collected within the scope of the remarketing will not be aggregated with your personal data that might be stored by Google, according to Google's own statement. Above all, Google also claims to use pseudonymisation during remarketing campaigns. 12. Integrating the Trusted Shops Trustbadge

 

  1. Integrating the Trusted Shops Trustbadge

In order to display our Trusted Shops seal of approval and potentially collected reviews as well as for the offer of Trusted Shops products for shoppers after they made a purchase, we have integrated the Trusted Shops Trustbadge into this website.

In the course of weighing interests against each other, this serves to safeguard our largely legitimate interests in optimised marketing of our offer in accordance with Art. 6.1.1. f of the GDPR. The Trustbadge and the services being advertised in connection therewith are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln.

When you call up the Trustbadge, the web server automatically saves a so-called server logfile that contains your IP address, date and time of the retrieval, the data volume transferred and the inquiring provider (access data), for example, and documents the retrieval. The access data won't be analysed and is automatically overwritten no later than seven days after you last visited the website.

Additional personal data will only be passed on to Trusted Shops with your explicit consent, if you decided to use Trusted Shops products after completing an order, or if you already registered yourself as a user.

In this case, the contractual agreement made between you and Trusted Shops applies.

 

  1. Rights of the persons affected

Your rights:

  • pursuant to Art. 15 DSGVO, you may obtain information about your stored personal data.  In particular, you can obtain information regarding the purposes of the processing, the category of the personal data, the categories of recipients your data was or will be disclosed to, the planned storage period, the existence of the right to have data corrected or deleted, limited processing or the right to object, the right to appeal, to trace your data back to its source as long as it wasn't collected by us, automated decision making including profiling and, potentially,  to request meaningful information relevant to the particulars;
  • pursuant to Art. 16 DSGVO, in regards to your personal data stored with us, you may request that false data is corrected immediately or completed if necessary;
  • pursuant to Art. 17 DSGVO, you may request deletion of your personal data stored with us as long as the data processing is not required to exercise the right of free expression and the right to information, to fulfil a legal obligation for reasons of public interest or assertion, exertion or defence of legal claims;
  • pursuant to Art. 18 DSGVO, you may request limited processing of your personal data in so far as you contest the accuracy of said data, the data has been processed unlawfully, but you reject deletion and we don't need the data any longer, but you need them in order to assert, exercise or defend legal rights or, pursuant to Art.  21 DSGVO, you have filed an objection against data processing;
  • pursuant to Art. 20 DSGVO, you may obtain the personal data you provided to us in a structured, conventional and machine-readable format, or request that the data is transferred to another person in charge;
  • pursuant to Art. 7 par. 3 DSGVO, you may revoke the permission you gave previously at any time.  As a consequence, we're no longer allowed to process data that is based on this permission and
  • pursuant to Art. 77 DSGVO,  you can raise this issue with the supervisory authority in the town where you usually live or work, or contact our headquarters.

 

  1. Right of objection

Provided that your personal data is processed on the basis of legitimate interests pursuant to Art. 6.1.1. f DSGVO, you have the right, in accordance with Art. 21 DSGVO, to object against the processing of your personal data, so far as there are reasons that arise from your specific situation or if your opposition is directed against direct advertising. In the latter case, you have a general right to object without giving a specific reason and we will implement it.

Should you wish to exercise your right to revoke or object, it is sufficient to send an email to: service@blutsgeschwister.de

 

  1. Data security

Each time you visit our website, we use the so-called SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption that is supported by your browser. This is usually a 256 bit encryption. If your browser doesn't support a 256 bit encryption, we will use the 128 bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form can be recognised by the closed exposition of the key or lock symbol in the bottom status bar of your browser.

Apart from that we employ appropriate technical and organisational security measures in order to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or against unauthorised access by third parties. We continuously improve our security measures in line with technological developments.

 

  1. Currentness of and changes to the privacy policy

This privacy policy is currently valid and came into effect in May 2018.

The further development of our website and offers thereof or changes to legal or official requirements might make it necessary to modify the privacy policy. You may, at any time, access and print out the current privacy policy on our website under the following link: https://www.blutsgeschwister.de/de/info/privacy