sweet yellow

Privacy

YOU`RE SAFE HERE!

Blutsgeschwister GmbH Privacy Policy

Thank you for your interest in our company. We take the protection of your data very seriously.

In general, you can use our website without inputting any personal data.  If you wish to make use of our company's services via our website, it could be necessary for us to process your personal data.  Whenever it is necessary to process personal data, and no legal basis for such processing exists, we always ask for the consent of the person involved (the data subject).

The processing of personal data (e.g. the data subject's name, address, e-mail address or telephone number) always takes place in accordance with the General Data Protection Regulation (GDPR) and in adherence to country-specific data protection regulations that apply to us.

With the following privacy policy, we wish to inform the public of the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of their rights.

As the controller responsible for the data processing, we have implemented numerous technical and organisational measures to ensure the highest level of protection possible for the personal data processed via our website. The transfer of data via the internet is, however, inherently subject to possible security gaps. As a result, it is impossible to guarantee 100% protection. Therefore, any data subject also has the alternative to transfer their personal data to us by other means (for example, by telephone).

1. Definitions

This privacy policy is based on the definitions used in the GDPR as enacted by the European Commission (art. 4 of the GDPR). This privacy policy is intended to be easy for anyone to read and understand. To guarantee this, we would first like to explain to you the terms that are used. The following definitions, among others, are used in this privacy policy:

  • 'personal data' : All information referring to an identified or identifiable natural person (referred to as a 'data subject'); a natural person is considered identifiable whenever he or she can directly or indirectly be identified, especially by means of allocating an identifier like a name, identification number, location information, online identifier or other particular traits which express the physical, physiological, genetic, psychological, financial, cultural or social identity of this natural person;
  • 'data subject' : Any identified or identifiable natural person whose personal data are processed by the party responsible for the data processing. "Einschränkung der Verarbeitung" die Markierung gespeicherter personenbezogener Daten mit dem Ziel, ihre künftige Verarbeitung einzuschränken;
  • 'restriction of processing' : marking of stored personal data with the goal of restricting its processing in the future.
  • 'profiling' : any type of automated processing of personal data in which personal data are used to analyse specific personal aspects related to a natural person, particularly to analyse or predict aspects related to this natural person's job performance, financial situation, health, personal preferences, interests, creditworthiness, conduct, place of residence or change of location.
  • 'controller' : the natural or legal person, authority, institution or other body that decides itself or in collaboration with others about the purposes and means of processing personal data; if the purposes and means of this processing are regulated by collective labour law or the law of EU member states, then the controller can be subject to the specific criteria of its designation pursuant to collective labour law or the law of EU member states.
  • 'Recipient': a natural or legal person, authority, institution or other body to which personal data are disclosed, regardless of whether they are a third party or not
  • Authorities which may receive personal data within the scope of an investigative procedure under collective labour law or the law of EU member states are, however, not considered recipients; the processing of these data by the authorities in question takes place in accordance with applicable data protection regulations with respect to the purposes of the processing;
  • 'third party' : a natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and the persons authorised under the direct control of the controller or processor to process the personal data;
  • 'consent' of the data subject: any voluntary permission granted unequivocally and in an informed manner for the specific instance in the form of a declaration or other clear act of confirmation by which the data subject makes known that he or she agrees with the processing of his or her personal data.

2. Name and contact information of the controller and data protection officer


a) Controller

The controller as defined by the General Data Protection Regulation and other national data protection laws of the EU member states as well as other provisions under data protection law is:

Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965 Berlin
Germany

Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de
Website: www.blutsgeschwister.de



b) Data protection officer

The data protection officer of the controller is:

Inga Schlemermeyer
Blutsgeschwister GmbH
Kreuzbergstrasse 28
10965 Berlin
Germany

E-Mail: datenschutz@blutsgeschwister.de
Website: www.blutsgeschwister.de

3. Collection and storage of personal data and the nature and purpose of their use

a) When visiting our website

In general, you can use our website without disclosing your identity. When using our website purely for informational purposes (i.e. when you are not registered or do not provide us with any other information), the browser you are using on your end-device automatically sends information to our website's server. This information is stored temporarily in a so-called 'logfile'.Log files needing to be stored further for the purposes of providing evidence are excluded from deletion until the respective incident has been fully resolved; in specific cases they may be passed on to investigating authorities. The following information is collected in this way without any action on your part and is stored until automatically deleted:

  • IP address of the requesting computer,
  • Data and time of access,
  • Name and URL of the file accessed,
  • Website from which the access takes place (referrer URL),
  • Browser being used and, in some cases, the operating system on your computer as well as the name of your internet service provider
  • Amount of transferred data.



    These data are processed by us for the following purposes:


  • to ensure comfortable use of the website,
  • identifying faults and for security reasons,
  • protection and defense of our rights,
  • to analyse system security and stability, and
  • for other administrative purposes.


The legal basis for this data processing is art. 6.1.1.f of the GDPR. Our legitimate interest is based on the data collection purposes listed above. At no time do we use the collected data for the purpose of tracing your personal identity.

Furthermore, we use cookies and analytics services whenever you visit our website. For more information about these, see sections 5, 8, 9, 11 and 12 of this privacy policy.



 

b) Additional functions and services of our website

In addition to purely informational use of our website, we offer various services which you can use if you are interested. For this, you must, as a rule, provide further personal data which we use to provide the service in question and which are subject to the aforementioned principles of data processing.

We use the services of external parties for certain aspects of processing your data. These parties are carefully selected and contracted by us. They are bound to our instructions are monitored regularly.

Furthermore, we can transfer your personal data to third parties whenever promotional offers, sweepstakes, contracting or other services are provided by us in collaboration with partners. You receive more information about this when inputting your personal data or below in the description of our services.

If our service providers or partners are located in a country outside the European Economic Area (EEA), we inform you of the implications of this fact in the description of the service.



c) Objection or withdrawal of consent to processing your data

Once you have granted consent for your personal data to be processed, you can withdraw this at any time. After you have issued such a withdrawal to us, it influences the permissibility of the processing of your personal data.

If the processing of your personal data is based on a weighing of interests, you can issue an objection to the processing. This is the case in particular whenever the processing is not necessary for the fulfilment of a contract with you, which is made known to you in each of the following descriptions of functions. When you issue such an objection, we ask that you explain the reasons why we should not process your personal data. In case you have a justified objection, we will assess the situation and then either reconfigure and/or adjust the data processing or show you our mandatory, protected reasons for continuing the processing.

Of course, you can object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can inform us of your objection to advertising using the following contact information:

 

1. Via our customer service

Tel.: +49 (0)30 - 5557181-91
E-Mail: service@blutsgeschwister.de

 

2. Vie our data protection officer

E-Mail: datenschutz@blutsgeschwister.de



d) Getting in touch
 

You can get in touch with our customer service for all questions relating to online orders, invoices or returns using our website.  Personal information - such as your name, date of birth, email address and telephone number - is collected as part of getting in touch, insofar as this is needed to process your inquiry.  These data are only stored and used for the purpose of handling your concerns or for contacting us and the related, technical administration.  The legal basis for processing the data is, insofar as it concerns a service from which no contract arises, our legitimate interest in answering your request as well as marketing and the improvement of our products and services, as long as this is done in accordance with data protection and competition law requirements,in accordance with Article  6 para 1 p. 1 lit.  f of the GDPR.  If you contact us with the purpose of concluding a contract, the additional legal basis for the processing is based on Article  6 para 1 p. 1 lit.  of the GDPR.  Your data are deleted after final processing of your request.  This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified, there are no statutory retention obligations to the contrary and the data are not still required for fulfilling a contract or pre-contractual measures. 



e) 
For orders placed via our website - data processing during registration and for contract processing 

You can place orders via our website either as a guest (without registering) or by registering in our shop as a customer for future orders. The advantage of registering for you is that you can log in to our shop directly using your e-mail address and password whenever you wish to place an order in the future without having to enter all of your contact details again.

Your personal data are then entered into an input screen and transferred to us and stored. Whenever you place an order via our website, we collect the following data first, whether you are placing the order as a guest or registering in the shop:

  • Title, first name, surname,
  • a valid e-mail address,
  • Address,
  • Telephone number (land line and/or mobile number)


    These data shall be collected

  • to identify you as our customer;
  • to process, fulfil and handle your order;
  • for correspondence with you;
  • for invoicing;
  • to settle liability claims if any, as well as the enforcement of claims if any against you; to settle liability claims if any, as well as the enforcement of claims ifany against you;
  • to ensure the technical administration of our website;
  • for the administration of our customer data.


In connection with the ordering process, we will obtain your consent for the processing of this data.

The data for your order and/or your registration shall be processed, and as per Section 6 (1)(1)(b) of the GDPR, 6.1.1. is required for the specified purposes of properly processing your order and for the mutual fulfilment of obligations arising under the purchase contract. For this, we may forward your payment data to our payment service provider. The legal basis for the same is also Section 6.1.1. of the GDPR.

We may also process the data provided by you in order to inform you about other interesting products from our portfolio. In addition to our interest in a simple and inexpensive way of addressing our registered customers, this advertising approach is always carried out in compliance with the high requirements of Section 7 (3) of the Unfair Competition Act (UWG), or we may send you emails with technical information 


The personal data (address, payment and ordering data) collected by us for processing your order shall be stored until the expiry of the legal retention period (10 years), after which it shall be deleted, unless we are obliged to store the same for a longer period under storage and documentation obligations relating to taxation and commercial law (commercial code, criminal code or tax code) as per Section 6 (1)(1)(c) of the GDPR, or if you have consented to storage exceeding the above period in accordance with Section 6 (1)(1)(a) 6.1.1. of the GDPR.

4. Data processing for order processing

Regarding third party disclosure, we shall only disclose your personal data to the service partners involved in the completion of the contract, such as for example disclosures to the logistics company commissioned with the delivery and to the payment service providers responsible for payment matters. The scope of the data provided during such disclosures shall however be limited to the minimum that is required. The legal basis for the transfer of data is in each case Art. 6 (1), clause 1, lit. of the GDPR.



a) Transfer of personal data to shipping service providers
 If the delivery of the goods is carried out by a shipping service provider that offers delivery date coordination or delivery notification, we will provide your email address according to Art.  6 (1), clause 1, lit.  a of the GDPR prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery, provided that you have given your express consent in the ordering process.  Otherwise, we shall only provide for the purpose of delivery according to Art.  6 (1), clause 1, lit.  b of the GDPR the name of the recipient and the delivery address to the transport service provider.  This transfer is only carried out as far as it is necessary for the delivery of goods.  In this case, prior coordination of the delivery date or the delivery announcement is not possible. 

Consent can be revoked at any time for future effect vis-à-vis the above-named responsible person or vis-à-vis the respective shipping service provider. 

b) Use of payment providers 

Your payment details will be sent to the appropriate payment services provider, depending on the payment method selected by you. The legal basis for payment processing is Article 6 (1) b GDPR. The processing of your personal data is required to fulfil the contract with you and you are free to choose your desired payment method.  The payment service provider shall be responsible in respect of your payment data.  Information, in particular, concerning the responsible authority within the payment service providers, the contact details of the data protection officers of the payment service providers, and the categories of personal data that are processed by the payment service providers can be obtained from the Internet addresses specified in each case below. 

In case of payment via PayPal, credit card or immediate transfer, we shall pass on your payment data to our payment service provider BS PAYONE GmbH, 
Lyoner Straße 9, D-60528 Frankfurt/Main, www.bspayone.com (hereinafter referred to as "PAYONE”) for payment processing.  The credit card details entered by you under shop.blutsgeschwister.de shall be received by PAYONE directly in encrypted form.  PAYONE is PCI DSS certified, and therefore fulfils the strictest requirements for the secure handling and storage of credit card data.  No payment information will be present on the servers of Blutsgeschwister GmbH even in case of payment through PayPal and immediate transfer. 

If the "Immediate transfer" [Sofortüberweisung] payment method is selected, payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"). We will transmit the information you provided during the ordering process and the information about your order to SOFORT.  Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).

Your data will only be transmitted for the purpose of payment processing by the payment service provider SOFORT and only to the extent necessary for this purpose.  You can find more information about SOFORT's data protection regulations online at the following website: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_at/privacyFurther data protection information can be found in the PAYONE privacy policy: https://www.payone.com/datenschutz/. 

If you select the "Purchase via invoice" payment method, the processing will be handled by the payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). 
You can access general information about Klarna hereYour personal data will be transmitted to Klarna for this purpose. The personal data transmitted to Klarna usually includes first name, surname, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data that are necessary to process a purchase via invoice. The processing of the purchase agreement also requires personal data related to the respective order. In particular, a mutual exchange of payment information may take place, including bank details, card number, expiry date and CVC code, number of items, item numbers, data on goods and services, prices and tax levies, information about previous purchase behaviour or other information about your financial situation. The specific purpose of the transmission of the data is identity verification, payment administration and fraud prevention. We will share personal data with Klarna if there is a legitimate interest in the transmission. Klarna will disclose the personal data exchanged between Klarna and us to credit reporting agencies. 

The purpose of this transmission is identity verification and a credit check.  Klarna also transmits the personal data to affiliated companies (Klarna Group) and providers or subcontractors, to the extent that this is required to fulfil the contractual obligations or if the data needs to be processed in the order.  For the purposes of deciding on the establishment, execution or termination of a contractual relationship, Klarna collects and uses data and information about your previous payment behaviour as well as probability values for your future behaviour (so-called scoring).  Scoring is calculated on the basis of scientifically recognised mathematical and statistical methods.  You have the option to revoke your consent to the processing of your personal data by Klarana at any time.  A revocation has no effect on personal data that is required to be processed, used or transmitted for (contractual) payment processing.  You can access Klarna's current data protection regulations at http://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_de/privacy .

No transfer of your personal data shall be made to third parties for purposes other than those mentioned above.

We will only share your personal information with third parties if:

 

  • You have expressly consented to the same as per Section 6 (1)(1)(a) 6.1.1. of the GDPR, or the forwarding of the data
  • as per Section 6 (1)(1)(f) 6.1.1. of the GDPR is required for enforcement, exercise or defence of legal claims and there is no ground to assume that you have an overriding and legitimate interest in not disclosing your data,
  • in case there is a legal obligation for the disclosure as per Section 6(1)(1)(c) 6.1.1. of the GDPR, and this is also legally permissible and furthermore,
  • is required for the execution of contractual relationships with you as per Section 6 (1)(1)(b) 6.1.1. of the GDPR.


5. Use of cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.)  when you visit our website.  Cookies do not cause any damage to your device.  They do not contain any executable code and therefore no viruses, trojans or other malware that would allow you to be exposed. 

A cookie contains information generated in connection with the specific terminal device used in each case. However, this does not mean that we will obtain direct knowledge of your identity thereby. 

There are two kinds of cookies.  Temporary (so-called session cookies) and persistent cookies. 



a) Session cookies 

On the one hand, cookies are used to make the experience of using of our range of services more pleasant for you.  We use so-called session cookies to discern that you have already visited individual pages on our website by storing the so-called session ID.  That way, your computer can recognise if you return to our website.  These cookies also improve user friendliness.  When you visit our site again to avail of our services, it will be automatically recognised that you have already visited us earlier, together with your inputs and settings, so that you do not to have to enter them all over again.  The use of session cookies is necessary to make the website accessible to you.  These session cookies are automatically deleted when you close your browser. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.) 



b) Persistent cookies 

Additionally, we use cookies to capture statistical information on the use of our website and to optimise our product offer for you (see paragraphs 8, 9, 11 and 12). When you visit our site again, these cookies enable us to automatically recognise that you have already been here. We also use persistent cookies for direct marketing online, e.g. to be able to offer you customised adverts or assess the success of our advertising. The use of persistent cookies takes place due to our legitimate interest in direct online marketing, web analysis and improving our online presence. The data collected in this way are rendered pseudonymous through technical processes. This makes it impossible to link the data to you personally. This data is not stored together with other personal data related to you. These cookies are automatically deleted after a specified time in each case. You can find the duration of the respective cookie storage in the overview for the cookie settings in your web browser. 


In part, cookies save settings to simplify the ordering process (e.g. noting the contents of an online shopping cart for a later visit to the website). 
Insofar as personal data are processed by individual cookies used by us, that processing takes place in accordance with Article  6 (1), clause 1, lit. b of the GDPR, either to implement the contract, per Art. 6 para 1 p. 1 lit. a GDPR in the case of declared consent, or in accordance with Article  6 (1), clause 1, lit. f of the GDPR to safeguard our legitimate interests in the best-possible functionality of the website, as well as a client-friendly and effective configuration of the website visit. 

Most browsers accept cookies automatically. 

However, disabling cookies completely may mean that you cannot use all the features of our website.  Due to our legitimate interest, we also incorporate third-party cookies.  In this case, the relevant data packets are stored in your browser by or transferred to third parties.  You can also prohibit the use of third-party cookies using an corresponding setting in your browser.  Every browser is different in the way cookie settings are managed.  This is described in each brower's help menu, which includes directions on how to change your cookie settings.  These can be found under the following links for the respective browsers: 

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Alternatively, you can configure the use of cookies under "Manage tracking settings".

The following third-party cookies are used 

If you have set your browser accordingly or use plug-ins that block external scripts (this is particularly the case with ad blockers or script blockers) you will not be able to see the "manage tracking settings” button. Due to the fact that the processing of data in this case has already been blocked by you, no processing will be carried out on our part either as per your settings. Therefore, there is no need for you to object to data processing by third-party cookies.

 

  • Google Tag Manager
  • Facebook Pixel
  • Facebook Connect
  • Criteo
  • Google Adsense
  • Econda
  • FitAnalytics
  • Trusted Shops
  • Usercentrics Consent Management Platform
  • JSESSIONID
  • Optimizely
  • Bing Ads
  • Trbo
  • DoubleClick Ad Exchange

6. Use of Your Data for Direct Advertising

a) Newsletter

a) With your consent, you can be made a subscriber to our newsletter, in which we inform you about interesting current offers. The advertised goods and services are mentioned in the declaration of consent.



b) To register for our newsletter, we use the Double-opt-in procedure. This means that after you register, we send an email to the specified email address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted by us. In addition, we also store your set IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, wherever necessary, for clarifications relating to possible misuse of your personal data.


c) The only requirement for sending the newsletter is your email address. The provision of additional, specially marked data is voluntary and is used to address you personally. After you confirm, we save your email address for the purpose of sending you our newsletters.  The legal basis for this is article 6.1.1.a of the GDPR. 


d) At any time, you can withdraw our consent from allowing us to send you the newsletter, and opt out of the newsletter. You can withdraw consent by clicking on the link provided in each newsletter email, via this form on the website, by sending an email to service@blutsgeschwister.de or sending a message to the contact information stated in the imprint/contact section of the website. 


e) Please note that we analyse your user behaviour whenever we send the newsletter. For this analysis, the emails we send contain so-called web beacons and/or tracking pixels which are one-pixel image files that are stored on our website. To perform the analyses, we link the files mentioned in section 3 and the web beacons with your email address and an individual ID. The links contained in the newsletter also include this ID. With the data we collect in this way, we create a user profile to customise the newsletter to your individual interests.  In this way, we keep track of when you read our newsletter and which links in the newsletter you click on. This enables us to determine what your personal interests are. We link these data to the actions you take on our website. 

e) Please note that we analyse your user behaviour whenever we send the newsletter. For this analysis, the emails we send contain so-called web beacons and/or tracking pixels which are one-pixel image files that are stored on our website. To perform the analyses, we link the files mentioned in section 3 and the web beacons with your email address and an individual ID. The links contained in the newsletter also include this ID. With the data we collect in this way, we create a user profile to customise the newsletter to your individual interests.  In this way, we keep track of when you read our newsletter and which links in the newsletter you click on. This enables us to determine what your personal interests are. We link these data to the actions you take on our website. 

You can object to this tracking at any time by clicking on the special link provided in every email or informing us via other means of contact.
The information is stored for as long as you are subscribed to the newsletter. After you opt out, we store the data anonymously and purely for statistical purposes.

We use the US provider "MailChimp" and the German provider "CleverReach" to send email campaigns, especially newsletters.

  • On the one hand, our newsletter is sent via "MailChimp", a newsletter distribution platform by US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to whom we pass along the information you provide when you register for the newsletter.  This transfer takes place in accordance with Article  6 (1), clause 1, lit.  f of the GDPR and serves our legitimate interest in using a newsletter system that is secure, user-friendly and effective at advertising.  The email addresses of our newsletter recipients, along with other data described within this statement, are stored on servers of MailChimp in the USA.  MailChimp uses this information to send and evaluate the newsletter under our orders.  MailChimp can also use this data in accordance with its own information to optimise and improve its own services (e.g. technical optimisation of the sending process and presentation of the newsletter, or for business purposes, to determine which countries the recipients come from).  However, MailChimp does not use our newsletter recipients' data to contact the recipients itself or to transfer their information to third parties. EU standard contractual clauses (SCC), which guarantee a high level of data protection at MailChimp, automatically apply to our contractual relationship with MailChimp and any related exporting of data.
 
  • In addition, we use the German service "CleverReach" to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that organises and analyses newsletter dispatches. The data you enter for the purpose of receiving our newsletter (e.g. email address) are stored on CleverReach's servers in Germany or Ireland.
    Our newsletters sent via CleverReach also allow us to analyse your user behaviour. You can find more information about data analysis carried out by CleverReach newsletters at: https://www.cleverreach.com/de/funktion/reporting-und-tracking/.
    The information you provided for the purpose of receiving our newsletter will also be stored by us until you unsubscribe from the newsletter, at which point it will be deleted from our servers as well as from the CleverReach servers. This does not affect data we have stored for other purposes.
    You can find more details regarding CleverReach data protection provisions at: https://www.cleverreach.com/de/datenschutz/.
    Concluding an order processing contract:
    In order to fully comply with strict legal data protection requirements, we have concluded an order processing contract with CleverReach.



f) Sending the email newsletter to existing customers: If you have provided us with your email address when purchasing goods, we reserve the right to send you regular offers on similar goods from our range of products by email. According to Section 7, para. 3 of the UWG, we do not have to obtain a separate consent from you for this.  In this respect, data processing is based solely on our legitimate interest in personalised direct advertising in accordance with Art.  6 (1), clause 1, lit. f of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.  You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the responsible person named at the beginning. Y ou are only required to pay transmission costs based on the relevant base tariffs.  After your objection has been received, the use of your email address for advertising purposes will be stopped immediately. 




b) Advertising by post 

Based on our legitimate interest in personalised direct mail, we reserve the right to store your first and last name, your postal address and - insofar as we have received this additional information from you within the scope of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business designation in accordance with Article 
6 (1), clause 1, lit. f of the GDPR and to use this information for sending interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to those responsible. 

7. Links to third-party websites

The links published on our website are researched and created by us with the greatest possible care.  However, we have no influence over the current or future design and content of the sites we link to.  We are not responsible for the linked pages and explicitly assert no claim of ownership to the content of these pages.  The provider of the website, to whom we refer you, bears sole liability for illegal, false or incomplete content as well as any damages incurred through the use or non-use of the information.  We explicitly exclude any liability as the party who merely refers to the publication by means of a link. 

We are only responsible for information issued by third parties whenever we have positive knowledge of it (i.e. also in the event of possibly illegal/criminal content) and it is technically possible and reasonable for us to prevent the use of such information. 

8. Analysis and tracking tools

With the tracking measures in use, we hope to ensure proper design and continual optimisation of our website. Furthermore, we use the tracking measures to statistically record the usage of our website and to analyse it for the purposes of optimising the services we provide you. 

To the extent required by law, we obtain your consent to the use of these services under "Manage Tracking Settings" via a so-called opt-in. 
This means that the cookie, the tracking pixel or similar processes with which your personal data are processed via these services will only be activated if you have given your consent. The legal basis is Art. 6 (1), clause 1, lit. a of the GDPR. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14),  you are not yet able to give valid data protection consent after the assessment of the respective national legislator. In this case, we will evaluate your opt-in as your reasonable expectation regarding the use of the cookies.  In this case, we rely on Art. 6 (1), clause 1, lit. f of the GDPR. In this case, our legitimate interests lie in the user-friendly design of our online offering and our business interest in the collection, storage and evaluation of the data material. 

You can revoke your consent at any time with future effect. In order to exercise your right to revoke, you can either object to the use of these services on our website under "Manage tracking settings" or follow the options described below for opting out. 


The individual data processing purposes and data categories can be determined from the tracking tools in question. 

a) Google Analytics & Google Tag Manager

For the purposes of proper design and continual optimisation of our web pages, we use Google Analytics, a web analysis service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: "Google"). In connection with this, pseudonymous user profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website such as: 

  • browser type/version,
  • operating system in use,
  • referrer URL (the previously visited page),
  • host name of the accessing computer (IP address)
  • time of the service request,

is generally transferred to a Google server in the USA and stored there. However, if you activate IP anonymisation on this website, your IP address will first be abbreviated by Google within the member states of the European Union or signatory states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Under contract with the operator of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide the website operator with other services related to the use of this website and the internet. These data may in some cases be transferred to third parties to the extent legally allowed or to the extent these third parties are contracted to process these data.  At no time will your IP address be merged with other data by Google. The IP addresses are anonymised so that no identification is possible (IP masking). 

The data that we collect and transfer in this way will be automatically deleted after 26 months. You can block the installation of cookies by configuring your browser settings accordingly; however, please note that in that case, you will be unable to fully use all the functions of our website. Furthermore, you can block the collection of data created by the cookie in relation to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). 

As an alternative to the browser add-on (especially for browsers on mobile devices), you can prevent data collection from Google Analytics by clicking this link: Click here to activate the Opt-Out from Google Analytics for our shop

An opt-out cookie will be installed which prevents the further collection of your data when you visit our website. The opt-out cookie only applies to the browser you are using and only for our website. It is also device-specific. If you delete the cookies in your browser, you must reinstall the opt-out cookie in order for it to work again. 

This website uses Google Analytics with the "_anonymizeIp()" expansion. This allows IP addresses to be processed further in abbreviated form so there is no possibility of tracing them to specific individuals.  If the data collected about you refer to you personally, they will be immediately quarantined and the personal data will then be immediately deleted. 

We use Google Analytics to enable us to regularly analyse and improve the use of our website. Using the statistics we collect, we can improve the services we offer and design them in a way that is more interesting to you as a user. This website also uses Google Analytics to analyse traffic flows across multiple device types. These analyses are executed using a user ID. You can deactivate analysis of your usage across multiple devices in your customer account under 'My data' > 'Personal data'. 

We also use the Google Tag Manager. The service is used to manage website tags. The Google Tag Manager is strictly devoted to handling tags (codes that are used to measure visitor traffic and visitor behaviour).  The tags come from other services (Google Analytics, in our case; see above).  The Google Tag Manager only manages these tags. It does not send any cookies or collect any personal data.  If tracking has been disabled, this applies to all tracking tags that are managed using the Google Tag Manager. 

Third-party service provider information: 
Headquartered within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. 



b) econda Analytics

We use econda Analytics on this website. This is a service provided by econda GbmH, Zimmerstr. 6, 76137 Karlsruhe, Germany.

For the proper design and optimisation of this website, anonymised data are collected using the solutions and technologies of econda GmbH. These data are stored and used to create usage profiles created under pseudonyms. 

For this purpose, cookies can be used which enable us to recognise a web browser. However, usage profiles are never merged with data about the pseudonymous individual without the visitor's explicit consent. In particular, IP addresses are rendered unidentifiable immediately upon entry which makes it impossible to trace the usage profile to specific IP addresses. 

The use of pseudonymous data takes place on the basis of the provisions of section 15 (3) of the German Telemedia Act. 

Visitors of this website can object at any time to the future collection and storage of these data.

The objection shall only apply to the device and web browser from which it was submitted. Please repeat the process for each device and web browser you use. Whenever you delete the opt-out cookie, requests will start to be submitted to econda again. 

To object to the processing of these data by econda, you can click the following link: Click here to activate the Opt-Out for econda on our shop.

Third-party service provider information: 
*
Privacy policy: https://www.econda.de/datenschutzhinweise/ 



c)
Size advice - Fit analytics 

We continually work to improve the shopping experience on our online shop. For example, with our size advisor, we want to make it easier for you to find clothes in the right size. For this, we use the size advisor from Fit Analytics GmbH, https://www.fitanalytics.com/You can input your measurements in the size advisor. Based on the purchases of other customers with similar measurements, the size advisor suggests to you a size that will most likely fit you for the product in question.

The size advisor stores the following data: The measurements you input (it uses cookies stored locally on your computer for this).  If you use the size advisor a second time within ten days, the measurements you input previously will still be remembered. You can deactivate cookies and delete them from the hard drive of your computer at any time. 

Without your consent, Fit Analytics will never sell or transfer your personal data in any way to third parties. 

Blutsgeschwister does not store data from the size tool in any way. 

Third-party service provider information: 
*
You can find details in the extensive privacy policy of Fit Analytics: https://www.fitanalytics.com/files/Privacy_Policy_DE-EN_FitA.pdf 



d) Optimizly
 


To improve the user's experience on our website we use the software Optimizly. Optimizly enables us to test how changes on our web pages (e.g. images, texts) affect user behaviour. For this purpose, Optimizly places cookies on the users' devices. Optimizly does not store any IP addresses or personal data relating to our users. For more information about data processing by Optimizly, visit https://www.optimizely.com/privacy/

You can deactivate tracking by Optimizly on your device at any time by following the steps described here: https://www.optimizely.com/legal/opt-out/ 




f) Bing Ads Conversion-Tracking
 


Our online offering also utilises Conversion-Tracking provided by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).  Hereby, Microsoft Bing Ads sets a cookie on your computer, provided that you were linked to our website through a Microsoft-Bing ad.  This allows us and Microsoft Bing to see that someone clicked on an ad and was linked to a predetermined landing page (conversion page) of our website.  The only information we receive in the process is the total number of users who have clicked on a Bing ad and were forwarded to the conversion page.  No personal details about the user's identity will be shared.  If you decided not to participate in the tracking procedure, you may also refuse the required setting of a cookie - one way to do this is by choosing a browser setting that generally deactivates the automatic setting of cookies. 

Alternatively, you may prevent any data generated when you used our website from being collected by Microsoft by clicking on the following link: http://choice.microsoft.com/de-DE/opt-out Further information on data protection and the cookies used by Microsoft Bing can be found on the Microsoft website: https://privacy.microsoft.com/de-de/privacystatement.

g) Trbo

We continue to utilize the analysis tool "trbo" from the company trbo GmbH, Leopoldstr. 41, 80802 Munich, https://www.trbo.com/en/, in order to optimally organize our websites and adapt them to our users' expectations. The purpose of trbo is to monitor and improve our online offerings, especially by measuring the use of our online offerings and the efficacy of our online advertising. This helps us understand which pages are especially appealing to you as a user of our services, which products you are most interested in and which specific offers we should suggest to you. In addition, user profiles are created using pseudonyms in order to provide you with customized customer benefits.

As for technology, trbo, and the services purchased through trbo, make use of the tracking tools deployed, especially so-called "cookies" and "web beacons", in order to gather the following information: which pages you have visited, when, how often, and in what sequence. What products are you looking for, which links or offers do you click on and what orders do you place with us. The cookies deployed enable us to recognize your browser for this purpose.

The data collected and utilized in this context are only stored under a pseudonym and are not amalgamated with additional personal data about you (e.g. name, address etc.). Additional outside service providers are granted access to the data only as commissioned by us and subject to our control.
The legal basis is the consent that you granted us when starting to use the websites, Art. 6 para 1 p. 1 lit. a of the GDPR.
If you do not want trbo to collect and utilize information on your use of the website in this manner, then you can object to this on a site-wide basis by using the following link:  https://www.trbo.com/en/opt-out/. A corresponding opt-out cookie is installed in your device for this purpose,, which does not include any data suitable for tracking, but only makes it possible to detect your objection to data collection so that no more data is collected.
You can find more detailed information in the Data Privacy Policy of trbo, available at: https://www.trbo.com/en/privacy-policy/.

9. Social media plugins


a) We use social media plugins from social media networks (like Facebook, Instagram, etc.) on our website in accordance with art. 6.1.1.f of the GDPR to promote our company via these networks and to get in touch with you and to communicate. 
The underlying advertising purpose constitutes a legitimate interest within the scope of the GDPR.  Responsibility for operating in compliance with data protection regulations must be guaranteed by each provider. The integration of these plugins by us takes place by means of the so-called 2click method, which provides the highest level of protection to visitors of our website. This means that when you visit our site, no personal data are transferred at first to the operator of the plugins. The plug-in provider can be recognised by the mark on the button showing their initials or the logo.  This button allows you to communicate directly with the plug-in provider. You need to click and activate the marked field in order for the plug-in provider to receive the notification that you've visited the relevant website with our online offering.  Furthermore, the data mentioned in clause 3a of this statement will also be submitted.  In the case of Facebook, once the IP address is collected, it will be made anonymous right away according to the details supplied by the provider.  Activating the plug-in also means that the personal data you submitted are transmitted to the respective plug-in provider and stored (if in the USA a US-provider) there.  Because the plug-in provider performs data collection especially via cookies, we recommend that you open your browser's security settings and delete all cookies before you click the greyed-out box. 



b) We have no control over the collected data and data-processing operations, nor do we know the full extent of the data collection, the purposes of the processing or the data storage periods.  We also have no information on the deletion of the collected data by the plug-in provider. 




c) The plug-in provider stores the data collected about you as user profiles and uses this data for advertising purposes, market research and/or the needs-based design of their website.  This data evaluation (also including users who are not logged in) is done in particular to display needs-based advertising and to inform other social network users about your activities on our website.  You have the right to object to the creation of these user profiles, and in order to exercise that right, you need to contact the respective plug-in provider.  With



d) Your data is disclosed regardless of whether you have an account with the plug-in provider and are logged in or not.  If you are logged in at the plug-in provider, the data we have collected about you will be assigned to the account you have with the plug-in provider.  When you press the activated button and, for example,  link to the page, the plug-in provider stores this information in your user account and it is publicly shared with your contacts.  We recommend that you log out every time you're done using a social network, but especially before activating the button because then the plug-in provider can't assign the data to your profile. 



 

e) If you have been asked for consent to data processing by one of the providers mentioned below, the legal basis for the processing is Art. 6 (1), clause 1, lit.  a of the GDPR.  You'll find more details regarding the purpose and extent of data collection and their processing by the plug-in provider in the privacy policies of these providers enclosed.  There you can also obtain further information on your rights in this regard, in particular the respective options for objection (opt-out), and setting options to protect your privacy.  We would like to point out that your user data can be transferred and processed outside the European Union.  In this case, there is a risk that the enforcement of your rights may be made more difficult. 



f) Addresses of the respective plug-in providers and the URL of their privacy policies:

10. Use of social media: Videos

Plug-ins - Embedding YouTube videos 

a) Our website uses plug-ins from the Google operated website of the provider YouTube, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). 
We have integrated YouTube videos into our online offering; they are stored on http://www.YouTube.com and can be viewed on our website. They're all integrated into the "extended data protection mode", meaning that no data about you as a user will be passed on to YouTube as long as you don't watch the videos. The data mentioned in paragraph 2 will only be transmitted when you play back the videos. Please note that we have no influence on the data transmission. 


b) When you visit the website, YouTube is informed that you called up the relevant subpage of our website. Furthermore, the data mentioned in clause 3a of this statement will also be submitted. This happens irrespective of whether you have and are logged into a YouTube user account, or whether you don't have a user account. If you're logged into your Google account, your data will be directly assigned to your account. In case you don't want the data assignment via your YouTube profile, you need to log out before you activate the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or the needs-based design of their website. Such an evaluation is carried out in particular (even for users who are not logged in) in accordance with Art. 6, para. 1, point 1, lit. f of the GDPR on the basis of Google's legitimate interests to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and in order to exercise that right, you need to contact YouTube. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA. Regardless of whether the embedded videos are played back, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence. 



c) Further details regarding the purpose and extent of collecting data and their processing carried out by YouTube can be found in the privacy policies. The policies also contain more details about the rights and configuration options you have when it comes to protecting your privacy: https://policies.google.com/privacy?hl=en&gl=en

11. Online advertising | Retargeting/Remarketing /Referral advertising


We use the following online advertising or retargeting/remarketing services. It is an advertising method we would like to bring to your attention once again. After visiting our website, this application ensures that advertisements are displayed the next time you browse the internet. To the extent required by law, we obtain your consent to the use of these services under "Manage Tracking Settings" via a so-called opt-in. This means that the cookie, the tracking pixel or similar processes with which your personal data are processed via these services will only be activated if you have given your consent. The legal basis is Art. 6 (1), clause 1, lit. a of the GDPR. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet able to give valid data protection consent after the assessment of the respective national legislator. In this case, we will evaluate your opt-in as your reasonable expectation regarding the use of the cookies. In this case, we rely on Art. 6 (1), clause 1, lit. f of the GDPR. In this case, our legitimate interests lie in the user-friendly design of our online offering and our business interest in the collection, storage and evaluation of the data material. 

You can revoke your consent at any time with future effect. In order to exercise your right to revoke, you can either object to the use of these services on our website under "Manage tracking settings" or follow the options described below for opting out. 

a) Google Ads 

We use "Google Ads" on our website. This is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  Google Ads is a service for displaying online advertising in the form of ads.  The ads are displayed as search results in your search engine results or in the Google advertising network. 


We define specific keywords using Google Ads. Our ads are then displayed by Google in your search engine results if you use Google to search for something related to the keyword. Within the display network, the ad is shown on sites that are related to the topic. If you click on one of the ads, you will be redirected to the advertised website. At the same time, Google Ads sends a cookie (see the heading 'Cookies' above for more information about this term). This allows Google and us to identify if you were directed to our website via our advertisement and whether you carried out additional actions, e.g. if you made a purchase, submitted a contact form or contacted us by phone. For this purpose, the cookie that has been placed will collect and transfer the websites you visited as well as your IP address to Google servers in the USA (Conversion Tracking). Google analyses the data in order to be able to create a report with statistical statements regarding the number of visitors generated through advertising and the success of the promotional campaign. Among other things, the reports show the total number of those users who were directed to our website via our advertisements.  In addition, the reports contain information about the users' devices and browsers, the end user locations and the times during which users clicked on the advertisement.  However, the reports do not contain any information that would personally identify you as a user of our website. Purpose: the aforementioned interests represent the purpose of utilising Google Ads. Prevention: cookies that were already placed can be deleted at any time by modifying the settings in your browser. 


Third-party service provider information: 
Headquartered within the EU: Google Dublin, Google Ireland Ltd



b) Google Remarketing
 

On our website we use "Google Remarketing", a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  Google Remarketing is a function offered by Google AdWords.  Google Remarketing allows us to address you in a targeted manner in the Google Display network by showing ad banners or text advertisements.  On the pages of our website, on which this function has been activated, Google will integrate so-called tracking pixels. If you visit one of our websites, the tracking pixel places an individual cookie on the device you are using.  For more information on the term 'cookies' please see the above-mentioned explanations under the relevant title. 


Information such as which websites you have visited, the kind of content you are interested in and which offers you have clicked on will be stored in the cookie. Additionally, data about the browser and operating system you use, referring websites, the time of your visit and further information on the use of the online offering will be stored as well.  Your IP address will also be collected and transferred to external Google servers in the USA in pseudonymised form unless you have given Google your explicit permission to process the data without pseudonymisation.  Purpose: The use of Google Remarketing allows us to show you our advertisements in a more targeted fashion.  As a result, we are able to provide you with ads that match your interests.  Prevention: cookies that were already placed can be deleted at any time by modifying the settings in your browser. 


Third-party service provider information: 
Headquartered within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. 

 

c) DoubleClick 

On our website we use "DoubleClick", a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 


Google DoubleClick is an online marketing tool with which advertisements can be displayed in real time on the basis of the users' presumed interests.  Google DoubleClick allows us to address you in a targeted manner in the Google Display network by showing ad banners or text advertisements.  On the pages of our website, on which this function has been activated, Google will integrate so-called tracking pixels.  If you visit one of our websites, the tracking pixel will place an individual cookie on your device.  For more information on the term 'cookies' please see the above-mentioned explanations under the relevant title.  Information such as which websites you have visited, the kind of content you are interested in and which offers you have clicked on will be stored in the cookie.  Additionally, data about the browser and operating system you use, referring websites, the time of your visit and further information on the use of the online offering will be stored as well.  Your IP address will also be collected and transferred to external Google servers in the USA in pseudonymised form unless you have given Google your explicit permission to process the data without pseudonymisation.  The cookie may contain a campaign identification code that is used to collect campaigns the user is already familiar with. Furthermore, data can be transferred to Google in order to facilitate online advertising and commission settlements.  Purpose: the use of DoubleClick by Google makes it possible to optimise and improve the use and display of user-relevant advertisements.  Prevention: cookies that were already placed can be deleted at any time by modifying the settings in your browser. 


Third-party service provider information: 
Headquartered within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. 



d) Criteo
 

Our website uses cookies for advertising purposes. For this purpose, we have integrated into our website technologies from the company Criteo SA (32 Rue Blanche, 75009 Paris) which enable us to recognise your device and collect information about your browser activities, so we can display ads about products and services that are likely to be more interesting for you.  This enables us to display our advertising on partner websites, apps and emails to visitors who are interested in our products. You can find a current overview of all Criteo's advertising partners here: https://www.criteo.com/privacy/criteo-works-with-the-following-platforms/ 

Re-targeting technologies use cookies and show advertising based on your previous browsing behaviour. To decline interest-based advertising, please visit the following websites: 


http://optout.networkadvertising.org/?c=1

http://www.youronlinechoices.com/

We can exchange information with our trusts advertising partners, such as technical identifiers from your registration information on our website or our CRM system. This enables your devices and/or environments to be linked so you have a seamless user experience on the devices and environments you use. Third-party service provider information: 

* For more details about these linking capabilities, please see the data protection policy that you can find on the aforementioned platforms or in the explanations below.  https://www.criteo.com/de/privacy/



e) Facebook Pixel
 

On our website we use the Facebook Pixel, Custom Audiences and Facebook Conversion of Facebook Inc function. 1 Hacker Way, Menlo Park, CA 94025, USA. 


Facebook Pixel is an analytical tool used by us to assess the effectiveness of the advertisements we placed on Facebook  (the so-called "Facebook Ads"). It allows us to address target groups for our advertisements.  In doing so, our Facebook ads will only be displayed to those Facebook users who have visited one of our websites first.  Moreover, Facebook pixels enable us to see whether you were automatically redirected to our website after clicking on one of our Facebook ads.  This means we can provide advertisements that are specifically tailored to your interests.  For this purpose, we have implemented a Facebook tracking pixel on our website.  This is a small pixel graphic that makes it possible to record and analyse log files. When you visit our website, your browser will establish a direct connection with the Facebook servers.  To our knowledge, Facebook will then be informed about which page of our website you have visited or which of our Facebook ads you actually clicked on. Provided that you are logged into your Facebook account, Facebook is able to allocate your visit to our website or the click on our Facebook ads to your Facebook account.  Also, it cannot be ruled out that Facebook will read/retrieve and store your IP address and additional identifiers, even if you are not logged into Facebook. More details about how the Facebook pixel works can be read here: https://www.facebook.com/business/help/651294705016616.

We also apply a method called "Custom Audiences from File". As you are the newsletter recipient, your email address will be encrypted and uploaded in the process.  It allows us to determine the recipient of our Facebook ads and ensure that only interested parties get to see the advertisements. Please note that we have no control over the quantity, quality or storage period of the transmitted data. Facebook may pass your information on to third parties.   Purpose: we use the Facebook pixel to be able to show you advertisements that match your interests and to make our website even more attractive.  Prevention: You may deactivate Facebook Custom Audiences by logging into your Facebook account and modify your settings under the following link: https://www.facebook.com/settings/?tab=ads


Third-party service provider information: 
Headquartered within the European Union: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. 


  • Privacy policy: https://www.facebook.com/policy.php 
  • Facebook Pixel: https://www.facebook.com/business/help/651294705016616
  • 12. Use of rating and test seal graphics

    Integrating the Trusted Shops Trustbadge 

    In order to display our Trusted Shops seal of approval and possibly collected reviews as well as for the offer of Trusted Shops products for shoppers after they made a purchase, we have integrated the Trusted Shops Trustbadge into this website. 



    We are using Trusted Shops on the basis of our legitimate interest in the optimisation and the efficient operation of our online offers, and also to make the quality of our services more transparent for you, Article 6 1.1. lit. f DSGVO.  The Trustbadge and the services being advertised in connection therewith are offered by Trusted Shops GmbH, Subbelrather Str.  15C, 50823 Köln, Germany. 


    The Trustbadge is a clickable icon that we use to provide various information. We utilise it to display the seal of approval of the Trusted Shops GmbH, promotions from the Trusted Shops Products for buyers after placing an order, and collected reviews. When you call up the Trustbadge, the web server automatically saves a server logfile that contains your IP address, date and time of the retrieval, the data volume transferred and the inquiring provider (access data), for example, and documents the retrieval. These access data won't be evaluated and will be automatically overwritten and deleted no later than seven days after you last visited the website. 


    Additional personal data will only be passed on to Trusted Shops with your explicit consent and insofar as you have decided to use Trusted Shops products after completing your order, or if you already registered yourself as a user.  In this case, the contractual agreement made between you and Trusted Shops applies. 


    Third-party service provider information: 

    * Privacy statement: https://business.trustedshops.de/impressum#datenschutz 

    13. Data processing in the context of the VIB Club

    The VIB Club is our customer loyalty programme. We offer it to customers in all the countries to which our online shop delivers as well as at the Swiss online shop and in our stores. By registering as a club member, you'll receive attractive benefits such as VIB offers, exclusive gifts (e.g. a yearly birthday present), free shipping and exclusive participation in pre-sales and pre-shopping promotions. You can find further details about it in the terms of use .
    Registration for the VIB Club includes creating a personal customer account. You can register for the VIB Club when you place an order, or at any time/independently of making a purchase.


    a) These are the data we process
     
    We need the following mandatory information from you, which will be used for your VIB Club registration:

    • Surname, first name
    • Email address
    • Billing address
    • Delivery address
     
    You can provide the following optional information:

    • Title
    • Date of birth

    b) Purposes of the data processing

    We process your personal data in accordance with the applicable data protection laws for the following purposes:

    • Running the VIB Club
    • Email advertising, if you have consented
    • Compliance with legal requirements
    • Contract processing
    • Individualising our customer approach
    • Personalisation
    • Date of birth for personalisation



    c) Legal basis

    The processing of your data is necessary in order to manage the VIB Club to fulfil the contract ((Article 6 (1)(1)(b) of the GDPR (General Data Protection Regulation)). Provided that you consented to email advertising in the course of registering for the VIB Club, your agreement constitutes the legal basis for the data processing (Article 6 (1)(1)(a) of the GDPR). You can of course withdraw your consent at any time. If the processing is carried out for the purposes of complying with legal provisions, the legal basis of the data processing is Article 6 (1)(1)(c) of the GDPR.

     


    d) Use of Apple Wallet or Android Google Wallet apps:

    You also have the option to transfer your VIB customer club card to your Apple Wallet or a Google Wallet app and save it in the form of a QR code. In doing so, your customer number is processed.

    You can of course remove your VIB customer club card from your Wallet app at any time and thus deleting it.

    14. Applications for job advertisements on our website

    We post current vacancies in a separate section on our website, to which interested parties can apply by e-mail to the contact address provided. 

    An inclusion in the application process requires that applicants provide us with all the personal data required for a well-founded and informed assessment and selection. The required information includes general information about the person (name, a telephone and an electronic contact option) as well as performance-specific evidence of the qualifications required for a job. If necessary, health-related information is also required, which in the interest of social protection must be given special consideration by the applicant in terms of labour and social law. 

    The individual job advertisement shows which components an application must contain in individual cases for its eligibility and in which form these components are to be submitted. 

    After receipt of the application, the applicant data will be saved by us and evaluated exclusively for the purpose of processing the application. For any queries that arise in the course of processing, we use either the email address provided by the applicant with his application or a specified telephone number. 


    The legal basis for this processing, including contacting for queries, is in principle Art. 6 (1), clause 1, lit. b of the GDPR in conjunction with Section 26, para. 1 of the Federal Data Protection Act (new), which states that undergoing the application process is considered to be the initiation of an employment contract. Insofar as special categories of personal data within the meaning of Art. 9, para. 1 of the GDPR (e.g., health data such as information on the severely disabled) that are requested from applicants, processing takes place in accordance with Art. Art. 9, para. 2, lit. b of the GDPR, so that we can exercise the rights arising from labour law and the law of social security and social protection and fulfil our obligations in this regard. 
    Cumulatively or alternatively, the processing of the special data categories can also be based on Art. 9 Para. 1 lit. h GDPR if they are used for the purposes of preventive health care or occupational medicine, for assessing the applicant's ability to work, for medical diagnostics, care or treatment in the health or social field or for the administration of systems and services in the applicable health or social field. 

    If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, their transmitted data and all electronic correspondence will be deleted after a relevant notification after 6 months at the latest. This time limit is based on our legitimate interest in answering any follow-up questions to the application and, if necessary, in being able to meet our obligations to provide evidence from the regulations on equal treatment of applicants. 

    In the case of a successful application, the data provided will be processed in accordance with Art. 6 (1), clause 1, lit. b of the GDPR in conjunction with § 26 Para. 1 Federal Data Protection Act (new) processed for the purpose of carrying out the employment relationship. 

    15. Contests

    On our website, we offer you the opportunity to enter competitions by providing personal data. The data is entered into an input screen, transmitted to us and saved. The data will only be passed on to third parties if we organise these competitions together with partners. 

    Your email address will be collected when participating in the competition.

    The processing of this data takes place within the framework of pre-contractual measures that are necessary for the implementation of the contest. The data will then be deleted unless the data is still required for the performance of a contract or pre-contractual measures. 

    The legal basis for the processing of your personal data is Art. 6 para 1 p. 1 lit. of the GDPR. 

    16. Rights of the persons affected

    Your rights:

    • pursuant to Art. 15 DSGVO, you may obtain information about your stored personal data. In particular, you can obtain information regarding the purposes of the processing, the category of the personal data, the categories of recipients to whom your data was or will be disclosed, the planned retention period, the existence of the right to have data corrected or deleted, limited processing or the right to object, the right to appeal, to trace your data back to its source as long as it wasn't collected by us, automated decision making including profiling and, possibly,  to request meaningful information relevant to the particulars; 
    • pursuant to Art. 16 DSGVO, in regards to your personal data stored with us, you may request that incorrect data is corrected immediately or completed if necessary;  
    • pursuant to Art. 17 DSGVO, you may request deletion of your personal data stored with us as long as the data processing is not required to exercise the right of free expression and the right to information, to fulfil a legal obligation for reasons of public interest or assertion, exertion or defence of legal claims; 
    • pursuant to Art. 18 DSGVO, you may request limited processing of your personal data in so far as you contest the accuracy of said data, the data has been processed unlawfully, but you reject deletion and we don't need the data any longer, but you need them in order to assert, exercise or defend legal rights or, pursuant to Art. 21 DSGVO, you have filed an objection against data processing;  
    • pursuant to Art. 20 DSGVO, you may obtain the personal data you provided to us in a structured, conventional and machine-readable format, or request that the data be transferred to another person in charge; 7 par. 3 DSGVO, you may revoke the consent you gave previously at any time.  As a consequence, we're no longer allowed to process data that is based on this consent and 
    • pursuant to Art. 77 DSGVO,  you can raise this issue with the supervisory authority in the town where you usually live or work, or contact our headquarters. 

    17. Right of objection

    Provided that your personal data is processed on the basis of legitimate interests pursuant to Art.  6 para 1 p. 1 lit.  f DSGVO, you have the right, in accordance with Art.  21 DSGVO, to object to the processing of your personal data, so far as there are reasons that arise from your specific situation or if your opposition is directed against direct advertising.  In the latter case, you have a general right to object without giving a specific reason and we will implement it. 


    Should you wish to exercise your right to revoke or object, it is sufficient to send an email to: service@blutsgeschwister.de 

    18. Data security

    Each time you visit our website, we use the so-called SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption that is supported by your browser.  This is usually a 256-bit encryption.  If your browser doesn't support a 256-bit encryption, we will use the 128-bit v3 technology instead.  Whether a single page of our website is transmitted in encrypted form can be recognised by the closed exposition of the key or lock symbol in the bottom status bar of your browser. 


    Apart from that, we employ appropriate technical and organisational security measures in order to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or against unauthorised access by third parties.  We continuously improve our security measures in line with technological developments. 

    20. Currentness of and changes to the privacy policy

    This privacy statement is currently valid and dated July 2021.


    The further development of our website and offers thereof or changes to legal or official requirements might make it necessary to modify the privacy policy. You may, at any time, access and print out the current privacy policy on our website under the following link: https://www.blutsgeschwister.de/de/info/privacy


    ****************************