Privacy

Data Protection Declaration

 

§ 1        Name and Address of the Responsible Party

§ 2       Name and Address of the Data Protection Officer

§ 3       General Information regarding Data Processing

§ 4       Supplying of the Website and Generation of Log Files („Informational Usage“)

§ 5       Usage of Cookies

§ 6       Data Processing in ETERNA’s Online Shop

§ 7       Data Processing in Conjunction with a Customer Account („My ETERNA“)

§ 8       Provision of Data in Order to Implement the Agreement

§ 9       Provision of Data for the Validation and the Verification of Addresses as well as the Credit Check

§ 10     Initiating Contact

§ 11      Newsletter; Product Recommendations for Similar Goods; Direct Advertising by Letter

§ 12     Participation in Sweepstakes, Prize Competitions or Other Campaigns

§ 13     Usage of Web Analytical Tools; Web Tracking

§ 14     Online Advertising (Remarketing; Retargeting)

§ 15     Customer Evaluation Request by eKomi

§ 16     Voucher Offers from Sovendus GmbH

§ 17     Usage of Facebook, Google+ and Instagram

§ 18     Data Security

§ 19     Your Affected Party Rights

§ 20    Currentness of and Changes to This Data Protection Declaration

 

 

§ 1       Name and Address of the Responsible Party

The Responsible Party in accordance with the General Data Protection Regulation and other national data protection laws of the member countries as well as any other provisions under data protection law is:

 

ETERNA Mode GmbH

Medienstraße 12

94036 Passau (Germany)

Telefon: (+49) 08 51 / 98 16-0

Fax: (+49) 08 51 98 16-465

E-Mail: contact@eterna.de,

 

hereafter also referred to as „ETERNA“.

 

If you have any questions regarding the collection, processing or usage of your personal data, the disclosure, correction, blocking or deletion of data as well as the revocation of any consents that have been issued, please contact contact@eterna.de.

 

§ 2       Name and Address of the Data Protection Officer

The Responsible Party’s Data Protection Officer is Mr. Ulrich Wiegmann and he can be contacted via e-mail at datenschutz@eterna.de as well as by using the contact data specified in § 1 with the addition „Data Protection Officer“.

 

§ 3       General Information regarding Data Processing

(3.1)    Scope of the Processing of Personal Data

We process our users’ personal data in principle only insofar as this is required for the supplying of a functional website as well as of our contents and services. The processing of our users’ personal data is done upon a regular basis only after having received the user’s consent to do so. An exception shall be valid in such cases in which it is not possible to obtain prior consent owing to the respective actual reasons and the processing of the data is permitted by the statutory directives.

(3.2)    Legal Basis for the Processing of Personal Data

Insofar as we obtain a consent for the affected party for the processing procedures for the personal data, Art. 6 Para. 1 Clause 1 lit. a) EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

With regards to the processing of personal data which is required for the fulfilment of an agreement whose contractual party is the affected party, Art. 6 Para. 1 Clause 1 lit. b) GDPR shall serve as the legal basis. This shall also be valid for processing procedures which are required for the implementation of the pre-contractual measures.

Insofar as a processing of personal data is required for the fulfilment of a legal obligation which our company must fulfil, Art. 6 Para. 1 Clause 1 lit. c) GDPR shall serve as the legal basis.

In the case that vital interests of the affected party or another natural person makes a processing of personal data necessary, Art. 6 Para. 1 Clause 1 lit. d) GDPR shall serve as the legal basis.

If the processing is required in order to safeguard an entitled interest of our company or of a third party and the interests in safeguarding the fundamental rights and the fundamental freedoms of the affected party do not outweigh the initially-mentioned interest, then Art. 6 Para. 1 Clause 1 lit. f) GDPR shall serve as the legal basis for the processing.

(3.3)    Data Deletion and Storage Duration

The personal data of the affected party shall be deleted or blocked as soon as the purpose of the storage is no longer valid. Moreover, storage may be done if this has been prescribed by the European or national lawmakers in regulations, laws or other directives issued by the European Union to which the Responsible Party is subject. A blocking or a deletion of the data shall also then be done if a storage timeframe prescribed by the aforementioned norms lapses unless a necessity exists for the continued storage of the data for a conclusion or a fulfilment of a contractual agreement.

 

§ 4     Supplying of the Website and Creation of Log Files („Informational Usage“)

(4.1)    Description and Scope of the Data Processing

During each visit to our Internet site (i.e. even in the case of a merely informational usage of our website), our system automatically collects data and information from the computer system of the accessing computer. Consequently, your Internet browser transmits usage data which are stored in log files (so-called server log files). The data sets stored in this manner contain the following data:

-     User’s browser type/browser version,

-     User’s operating system,

-     User’s IP address/Internet service provider,

-     Date/time of day of the access,

-     Websites from which the user’s system accessed our Internet site,

-     Websites which have been visited by the user’s system via our website.

The data are stored in our system’s log files. A storage of these data together with other personal data of the user is not made.

(4.2)    Legal Basis for the Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(4.3)    Purpose of the Data Processing

The temporary storage of the IP address by the system is required in order to enable a delivery of the website to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session. The storage in log files is done in order to ensure the website’s functionality. In addition, the data serve us for the purposes of the optimisation of the website and for the guaranteeing of the security of our information technology systems. However, an evaluation of the data for marketing purposes is not done in this context.

These purposes also form the basis for our entitled interest in the data processing in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(4.4)    Duration of the Storage

The data are deleted as soon as they are no longer required for the attainment of the purpose of their collection. If the data are collected in order to provide the website, this shall be the case if the respective session has ended. In the case that the data are stored in log files, this shall be the case after by no later than seven days. A more extensive storage shall be possible. In this case, the users’ IP addresses shall be deleted or distorted so that a categorisation to the accessing client is no longer possible.

(4.5)    Possibility of Lodging an Objection and Deletion

The collection of the data in order to provide the website and the storage of the data in log files is mandatorily required for the operation of the Internet site. Consequently, the user has no right of objection in this regard.

 

§ 5       Usage of Cookies

(5.1)    Description, Scope and Purpose of the Data Processing

(5.1.1) Our website uses cookies. Cookies are text files which are stored in the Internet browser and/or by the Internet browser on the user’s computer system. If a user visits a website, then a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters which enables a clear identification of the browser when visiting the website again. Cookies help to optimise the offerings of the website or also of the online shop in that, for example, your personal preferences are stored or the storage of your virtual shopping basket is enabled. The collected information permits no inferences to be drawn regarding a specific person and contain no data like your name.

This website uses

-     Mandatorily-required cookies,

-     Functionality cookies,

-     Performance cookies,

-     Retargeting cookies,

-     Transient cookies (temporary usage) as well as

-     Persistent cookies (time-restricted usage).

(5.1.2) Mandatorily-required cookies are of essential importance and enable you to navigate ETERNA’s website and use fundamental functions. Without the mandatorily-required cookies, for example, the shopping basket cannot be made available to you.

(5.1.3) Functionality cookies enable information regarding your settings to be stored (e.g. your language or your region) whereby the personal functionality of the website is improved for you. These cookies also help during the updating or storing of your shopping basket.

(5.1.4) Performance cookies collect information regarding how you use the website, which pages you visit or whether, for example, errors have occurred. Such cookies help ETERNA to optimise its website for you and to make your shopping experience more enjoyable and easier.

(5.1.5) In addition, ETERNA also uses the retargeting technology on its website. This enables that, on the websites of ETERNA’s (advertising) partners, such Internet users are appealed to with advertising in a targeted manner who have already expressed an interest in ETERNA’s products and its online shop. This personalised and interest-based advertising is more interesting for the Internet user than advertising without a personal correlation. The presentation of advertising on the websites of ETERNA’s (advertising) partners is done during the retargeting upon the basis of a cookie-based analysis of the prior user behaviour. No personal data are stored and the advertising is done in pseudonymised fashion.

(5.1.6) Transient cookies are automatically deleted whenever you close the browser. This includes particularly the session cookies. They store a so-called session ID by means of which various queries from your browser can be categorised to the joint session. Thus, your computer can recognise when you return to the website. The session cookies are deleted whenever you log out or close the browser.

(5.1.7) Persistent cookies are deleted automatically after a prescribed duration which may vary according to the respective cookie. The maximum storage duration of the cookies placed by ETERNA is 60 days. You can at any time delete the cookies via your browser’s security settings.

(5.2)    Legal Basis for the Data Processing

The legal basis for the processing of personal data while using cookies is Art. 6 Para. 1 Clause 1 lit. f) GDPR. The aforementioned purposes also form the basis for our entitled interest in the processing of your personal data.

(5.3)    Possibility of Lodging an Objection and Deletion

Cookies are stored on the user’s computer and are transmitted by this computer to our website. Thus, as the user, you also have full control over the usage of cookies. By making changes to the settings in your Internet browser, you can deactivate or restrict the transfer of cookies. Any cookies that have already been stored can be deleted at any time. This can also be done in automated fashion. However, if cookies are deactivated for our website, all functions of the website may possibly no longer be able to be used comprehensively.

The following links will help you to adjust your settings in order to reject or accept cookies in the browsers that are most-commonly used:

-     Internet Explorer / Windows Edge: http://windows.microsoft.com/de-de/windows-vista/block-or-allow-cookies

-     Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

-     Google Chrome: https://support.google.com/chrome/answer/95647?hl=de

-     Safari: https://support.apple.com/kb/ph21411?locale=de_DE

-     Opera: http://help.opera.com/Windows/10.20/de/cookies.html.

 

§ 6       Data Processing in ETERNA’s Online Shop

(6.1) If you would like to order something in ETERNA’s online shop, you have the choice of whether you would like to enter your data that are required for your order only upon a one-time basis for this order (guest order) or whether you would like to create a password-protected customer account whereby your data will be stored for subsequent additional purchases.

(6.2)    Guest Order

(6.2.1) Description and Scope of the Data Processing

Your personal data shall be entered into an input mask and transmitted to us and then stored. For your order as a guest, we require the following personal data as „mandatory data“:

-       Form of address,

-       Forename,

-       Surname,

-       Street, building number, postal code, city, country (invoicing and/or deviating delivery address),

-       Birthdate,

-       E-mail address.

Without filling in the fields that have been marked as being obligatory fields, it is not possible to make an order. Moreover, we shall store the user’s IP address as well as the date and time of day that access is made.

(6.2.2) Legal Basis for the Data Processing

The data processing shall be done for your order and shall be required in accordance with Art. 6 Para. 1 Clause 1 lit. b) GDPR for the processing of your order and/or for the fulfilment of the obligations resulting from the purchasing agreement that has been concluded.

(6.2.3) Purpose of the Data Processing

These data are collected

-       In order to be able to identify you as our customer;

-       In order to be able to process, fulfil and complete your order;

-       In order to be able to conduct correspondence with you;

-       For invoicing purposes;

-       In order to handle any liability claims as well as in order to assert any claims against you.

We require your birthdate in order to guarantee a transparent identification of the customer and/or the customer’s data. In addition, you must be at least 18 years old in order to be able to make an order in ETERNA’s online shop.

If you should have selected purchase on account as the payment method, for the purpose of the credit check, your birthdate shall also be passed on to our service provider.

Because ETERNA will send you a confirmation of receipt and/or an order confirmation via e-mail, the disclosure of your e-mail address is also required.

(6.2.4) Duration of the Storage

The data shall be deleted as soon as they are no longer required for the attainment of the purpose of their collection. This shall then be the case for the data that have been stored for the fulfilment of the purchasing agreement if the data are no longer required for the implementation of the agreement. Even after the conclusion of the agreement, a necessity may exist to store the contractual partner’s personal data in order to fulfil contractual or statutory obligations. Thus, the personal data which we collect for the implementation of your order are stored until the statutorily-prescribed retention timeframe lapses and then deleted unless we are obliged to implement a longer storage timeframe in accordance with Art. 6 Para. 1 Clause 1 lit. c) GDPR owing to retention and documentation obligations under tax and commercial law (from the German Commercial Code, German Tax Code or German Fiscal Code), you have approved a more extensive storage timeframe in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR or an entitled interest exists in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(6.3) Orders from a Customer

The option exists that you can register in order to set up a password-protected customer account („My ETERNA“) whereby the data which you have provided there are stored revocably. After you have logged in with your access data, the information which you are required to enter on the order form shall automatically be filled out with the information which you have on file.

You can find the details regarding the data processing of your personal data for such a customer account („My ETERNA“) in § 7 of these Data Protection Guidelines.

 

§ 7       Data Processing in Conjunction with a Customer Account („My ETERNA“)

(7.1) Description and Scope of the Data Processing

(7.1.1) Registration

On our Internet site, we offer users the option of creating a password-protected customer account („My ETERNA“) subject to the disclosure of personal data. In so doing, the data are entered, transferred and stored in an input mask.

The following basic data are collected as mandatory data during the registration process:

-       Form of address,

-       Forename,

-       Surname,

-       Street, building number, postal code, city, country,

-       Birthdate,

-       E-mail address,

-       Password.

Without providing these basic data, an online registration is not possible. Moreover, we store the user’s IP address as well as the date and time of day that access is made. Insofar as you have opted to voluntarily disclose a professional title or a telephone number, these data shall also be stored.

By sending the digital registration form, you are triggering the creation of a personalised password-protected customer account. Thereupon, a confirmation e-mail will initially be sent to the e-mail address which you have provided in which you will be requested to make confirmation that the creation of a customer account is actually wanted. If you then expressly confirm the registration, the password-protected customer account will be activated.

(7.1.2) Data Collection after Registration

After registration has been made, your personal customer number shall be awarded. In addition, your purchases (date, article, article number, quantity, price, currency and type of transaction) shall be registered.

(7.2) Legal Basis for the Data Processing

By having created a password-protected customer account, you are considered to have granted your consent for the processing of your data which is why the legal basis for this data processing is Art. 6 Para. 1 Clause 1 lit. a) GDPR.

(7.3) Purpose of the Data Processing

The collected data are required for the implementation and the administration of your customer account. Thus, your name and your birthdate serve the purpose of verifying that you are of adult age as well as also for identification purposes. The e-mail address and/or address provided by you shall be used for the implementation of orders.

Via your customer account, you can review the data from your completed, open or also recently-sent orders as well as correct/manage the data that you provided during the registration.

(7.4) Duration of the Data Processing

The data shall be deleted as soon as they are no longer required for the attainment of the purpose of their collection. This shall be the case for the data collected during the registration process if the registration has been deleted or changed.

(7.5) Right of Objection; Right of Deletion

In order to delete the registration or to change the data stored about you, you can send an e-mail to service@eterna.de or a message (e.g. fax or letter) to ETERNA’s contact data which are stated in § 1.

(7.6) CRM System from Salesforce; Salesforce Marketing Cloud

(7.6.1) The personal data collected from you in conjunction with the „My ETERNA“ customer account shall be transferred to the CRM system („Customer Relationship Management“) of the Salesforce cloud provider (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany; „Salesforce“) and managed there. Salesforce’s Data Protection Guidelines can be reviewed here: https://www.salesforce.com/de/company/privacy/. You can find additional information regarding the GDPR at https://www.salesforce.com/de/campaign/gdpr/. Naturally, a contracted data processing agreement has been concluded between ETERNA and Salesforce.

(7.6.2) Salesforce indeed has a branch in Germany, but it has its Headquarters in the USA. Thus, it cannot be ruled out that the aforementioned data will be transmitted to the USA. However, Salesforce is certified in accordance with the EU-US Privacy Shield and guarantees that your data will also be subjected to an appropriate data protection level in the USA. You can find additional information regarding the certification by clicking on the following link: https://www.privacyshield.gov.

(7.6.3) The processing of your data by Salesforce is done upon the basis of Art. 6 Para. 1 Clause 1 lit. a) GDPR (because you have created a customer account and thus granted your consent in this regard).

(7.6.4) You have the option at any time of revoking your consent for the data processing and/or objecting to the data processing. As already stated in (7.5), you have the option at any time of deleting your registration and thus objecting to the continued usage of your data.

 

§ 8       Provision of Data in Order to implement the Agreement

In order to process your order, we cooperate with the following service provider(s) who support us, in whole or in part, during the implementation of the agreements that have been concluded. Specific personal data are transmitted to these service providers based upon the following information. We shall pass on your payment data during the payment processing to the commissioned credit institute insofar as this is required for the processing of the payment. Insofar as payment processing service providers are commissioned, we shall explicitly notify you of this in the following. The personal data which we collect shall be passed on during the implementation of the agreement to the transport company which has been commissioned with the delivery insofar as this is required for the delivery of the goods. The legal basis for the dissemination of the data in this regard is Art. 6 Para. 1 Clause 1 lit. b) GDPR.

(8.1) Payment Transaction; Payment Processing Service Providers

The payment transaction via the popular payment methods is done exclusively via an encrypted SSL connection. ETERNA wishes to point out that the payment methods may possibly be contingent on the country where your order is made. You can find detailed information in this regard during the concrete ordering process.

(8.1.1) Credit Card

If you make payment via credit card, we will pass on your payment data during the processing of the payment to SIX Payment Services AG, Hardturmstrasse 201, CH-8021 Zurich, tel.: +41 58 399 9111, e-mail: info.ch@six-payment-services.com (hereafter, „SIX”).

The transmission of your data to SIX is done upon the basis of Art. 6 Para. 1 Clause 1 lit. a) GDPR (Consent) and Art. 6 Para. 1 Clause 1 lit. b) GDPR (Processing for the Fulfilment of an Agreement).

SIX reserves the right to conduct a credit check for the credit card payment methods. For this, your payment data may possibly be passed on as required to credit agencies in accordance with Art. 6 Para. 1 lit. f) GDPR upon the basis of SIX’s entitled interest in the determination of your ability to pay. SIX uses the result of the credit check with regards to the statistical payment default probability for the purpose of the decision-making regarding the offering of the respective payment method or not. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result from the credit check, they have their basis in a scientifically-recognised mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

Additional data protection information – among others, regarding the credit agencies used –can be found in SIX’s Data Protection Declaration: www.six-payment-services.com/privacy-statement. Moreover, you can find more extensive information regarding SIX by clicking on the following link www.six-payment-services.com/gdpr.

You have the option at any time of revoking your consent for the data processing and/or objecting to the data processing. However, a revocation shall not affect the validity of the data processing procedures that have been done in the past.

(8.1.2) Paypal

On our website, we offer, among other options, the option of payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter, „PayPal”).

If you select the option of making payment via PayPal, the payment data which you have entered shall be transmitted to PayPal.

The transmission of your data to PayPal shall be made upon the basis of Art. 6 Para. 1 Clause 1 lit. a) GDPR (Consent) and Art. 6 Para. 1 Clause 1 lit. b) GDPR (Processing for the Fulfilment of an Agreement).

Please review the more extensive data protection information in PayPal’s Data Protection Declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You have the option at any time of revoking your consent for the data processing and/or objecting to the data processing. However, a revocation shall not affect the validity of the data processing procedures that have been done in the past.

(8.1.3) Amazon Payments

If you select the „Amazon Payments“ payment method, the processing of the payment shall be done via the payment processing service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereafter: „Amazon Payments“), to whom we will pass on your information that was disclosed during the ordering process in addition to the information regarding your order.

The transmission of your data shall be done upon the basis of Art. 6 Para. 1 Clause 1 lit. a) GDPR (Consent) and Art. 6 Para. 1 Clause 1 lit. b) GDPR (Processing for the Fulfilment of an Agreement).

By visiting the following Internet address, you can receive additional information regarding Amazon Payments’ Data Protection Guidelines: https://pay.amazon.com/de/help/201751600.

You have the option at any time of revoking your consent for the data processing and/or objecting to the data processing. However, a revocation shall not affect the validity of the data processing procedures that have been done in the past.

(8.1.4) Ticket Plus Classic and/or Ticket Plus Shopping

On our website, we offer, among other options, the option of payment via Ticket Plus Classic or Ticket Plus Shopping. The provider of this payment service is Edenred Deutschland GmbH, Claudius-Keller-Str. 3C, 81669 Munich (Germany), e-mail: info-de@edenred.com, Web: www.edenred.de.

In order to pay via Ticket Plus in our online shop, simply select „Ticket Plus“ as the payment method during the ordering process. Please enter the 19-digit card number (on the card’s front side), the cardholder’s name, the expiration date and the three-digit security code (on the card’s back side). After entering the data, please click on „Continue“ and complete the purchase.

The transmission of your data shall be made upon the basis of Art. 6 Para. 1 Clause 1 lit. a) GDPR (Consent) and Art. 6 Para. 1 Clause 1 lit. b) GDPR (Processing for the Fulfilment of an Agreement).

You can find additional information regarding this payment method at https://www.meinticketplus.de as well as https://www.meinticketshopping.de.

You have the option at any time of revoking your consent for the data processing and/or objecting to the data processing. However, a revocation shall not affect the validity of the data processing procedures that have been done in the past.

(8.1.5) Validation and Verification of Addresses; Credit Check

Please keep in mind that, for the purposes of address validation and address verification as well as the credit check, personal data shall be transmitted to GFKL PayProtect GmbH, Am Europa-Center 1b, 45145 Essen. You can find detailed information in this regard in § 9 of these Data Protection Guidelines.

(8.2) Shipping Service Provider

The delivery of our goods to you shall be made by the shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn).

Before sending the goods, we shall pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR for the purpose of coordinating a delivery timeframe and/or announcing the delivery insofar as you have granted your express consent for this during the ordering process. Otherwise, we shall pass on only the name of the recipient and the delivery address to DHL for the purpose of rendering the delivery in accordance with Art. 6 Para. 1 Clause 1 lit. b) GDPR. The dissemination shall be made only insofar as this is required for the delivery of the goods. In this case, it is not possible to coordinate the delivery timeframe with DHL and/or the announcement of the delivery in advance.

The consent may be revoked at any time with effectiveness for the future. However, a revocation shall not affect the validity of the data processing procedures that have been done in the past.

(8.3) Ready-to-wear-Service

Insofar as you use our ready-to-wear service, this service and the subsequent delivery of the goods shall be implemented by the Persil Online Service (Persil Service GmbH, Färberstraße 10, 30453 Hanover). We shall pass on the recipient’s name as well as your delivery address to Persil Service GmbH for the purpose of making delivery in accordance with Art. 6 Para. 1 Clause 1 lit. b) GDPR. The dissemination of such data shall be made only insofar as this is required for the delivery of the goods. We have no control over any possible additional data processing by Persil Service GmbH. Please review the Data Protection Guidelines in this regard at https://www.geschickt-gereinigt.de/datenschutz/.

 

§ 9     Provision of Data for the Validation and Verification of Addresses as well as the Credit Check

For the purpose of the address validation and the address verification, personal data are transmitted to GFKL PayProtect GmbH, Am Europa-Center 1b, 45145 Essen.

For the purpose of the credit check, personal data are transmitted to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden.

(9.1) Validation and Verification of Addresses

(9.1.1) Description and Scope of the Data Processing

For the purposes of the validation and verification of addresses, during the ordering process, the following data that are provided in ETERNA’s online shop:

-       Street,

-       Building number,

-       Postal code,

-       City as well as the

-       Country

are transferred to GFKL PayProtect GmbH, Am Europa-Center 1b, 45145 Essen.

For this purpose, GFKL PayProtect GmbH procures information from the following service providers:

Address Validation:

-      Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss

-      ACS Informatik GmbH, Offenbachstraße 47, 81245 München

-      AddressDoctor GmbH, Röntgenstraße 9, 67133 Maxdorf

Address Verification:

-      Creditreform Boniversum GmbH, Hellersergstraße 11, 41460 Neuss

-      arvato infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden

-      Deutsche Post Direkt GmbH, Junkersring 57, 53844 Troisdorf.

(9.1.2) Legal Basis for the Processing

The address validation and the address verification serves the purpose of fulfilling the purchasing agreement concluded with us because, by using these methods, it can be checked whether the ordered goods can be sent at all to the address provided during the ordering process. In this regard, Art. 6 Para. 1 Clause 1 lit. b) GDPR constitutes a legal basis. An additional legal basis for this form of data processing is Art. 6 Para. 1 Clause 1. lit. f) GDPR.

(9.1.3) Purpose of the Data Processing

This address validation and address verification serve the purpose of checking whether the goods that you have ordered can be sent at all to the designated address. Therein also lies our entitled interest. Moreover, this also lies in your interest because such a reconciliation of the address will detect any inputting errors made in the address that you provided during the ordering process and you can thus correct this.

(9.1.4) Right of Objection

You can object at any time to the transmission of these data to GFKL PayProtect GmbH.

(9.2) Credit Check for a „Purchase on Account“

(9.2.1) Description and Scope of the Data Processing

ETERNA also offers the „on account“ payment option. Insofar as you choose this payment method during the ordering process, ETERNA shall transmit the required personal data to a service provider who has been carefully selected in order to conduct the credit check. The transmission of the personal data shall only then be made in a downstreamed fashion for the purposes of the aforementioned address validation as well as address verification and shall also be done only if the „on account“ payment method has been selected. ETERNA thus intends to prevent a potential loss of a payment claim as well as any fraud which is associated with a „purchase on account“.

If the „on account“ payment method is selected, in order to safeguard its entitled interests, ETERNA shall obtain credit information upon the basis of mathematical-statistical procedures while using the address data. ETERNA shall procure the required information from infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden.

In this regard, ETERNA shall transmit the following personal data that are required for a credit check, i.e.

-       Name,

-       Birthdate,

-       Address

to infoscore Consumer Data GmbH. Upon the basis of this information, a statistical probability of a credit default shall be calculated and, based upon this, the decision shall be made regarding the detailed implementation of the contractual relationship. Your concerns that are worthy of protection shall be taken into consideration in accordance with the statutory directives.

If the credit check has a positive result, an order on account is possible. However, if the credit check has a negative result, our shop system will offer you no payment on account option.

(9.2.2) Legal Basis for the Processing

Consequently, the collection, storage and dissemination of the personal data shall be done for the purpose of conducting the credit check in order to avoid a payment default and upon the basis of Art. 6 Para. 1 Clause 1 lit. b) GDPR and of Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(9.2.3) Purpose of the Data Processing

The credit check shall serve exclusively for the avoidance of a payment default because, in the case of a „purchase on account“, you shall first receive the goods and you must only then thereafter make the payment. In this regard, we shall render „advance performance“. Thus, we also have an entitled interest in this regard.

(9.2.4) Right of Objection

You can at any time object to a transmission of your data to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden. However, at this juncture, ETERNA wishes to point out that, if you lodge such an objection against the transfer of the data for the purpose of your credit check, the „on account“ payment method shall not be offered.

(9.3) Information regarding infoscore Consumer Data GmbH
You can detailed information regarding infoscore Consumer Data GmbH in accordance with Art. 14 European Union’s General Data Protection Regulation („EU GDPR“), i.e. information regarding the business purpose, the purposes of the data storage, the data recipients, the right of selfdisclosure, the right of deletion or correction, etc. at https://finance.arvato.com/icdinfoblatt

(9.4) Note regarding the Free Self-Disclosure from infoscore Consumer Data GmbH
If you have any questions regarding the aforementioned automated credit check, we ourselves can issue no information owing to data protection reasons. In this case, please contact the following party in writing:
infoscore Consumer Data GmbH
Rheinstraße 99
76527 Baden-Baden or online:

https://finance.arvato.com/de/verbraucher/selbstauskunft/selbstauskunft-anfordern.html

Exclusively for the purpose of payment claim collection, we shall transmit your personal data to infoscore Forderungsmanagement GmbH, Gütersloher Str. 123, 33415 Verl.

 

§ 10     Initiating Contact

(10.1) Description and Scope of the Data Processing

Upon your contacting ETERNA via e-mail, your e-mail address and, if you disclose this, the personal data (e.g. your name and your telephone number) also disclosed with the e-mail shall be stored by ETERNA in order to answer your questions. In this context, no dissemination of the data shall be made to third parties. The data shall be used exclusively for the processing of the conversation.

(10.2) Legal Basis for the Processing

By having sent us an inquiry via e-mail, you are considered to have granted your consent for the processing of your data that have thus been transmitted which is why the legal basis of this data processing is Art. 6 Para. 1 Clause 1 lit. a) GDPR. Moreover, the processing of the data provided by you shall be required for the processing of your inquiry so that Art. 6 Para. 1 Clause 1 lit. f) GDPR shall constitute an additional legal basis for the processing of the data.

(10.3) Purpose of the Data Processing

The processing of the personal data shall serve us solely for the processing of your contact inquiry.

(10.4) Duration of the Storage

The data shall be deleted as soon as they are no longer required for the attainment of the purpose of their collection. Any mandatory statutory directives – particularly retention timeframes – shall remain unaffected.

(10.5) Rights of Objection and Deletion

You shall have at all times the right to revoke your consent for the processing of your personal data or to object to the storage of your personal data. Please keep in mind that, in such a case, the conversation cannot be continued.

 

§ 11     Newsletter; Product Recommendations for Similar Goods; Direct Advertising by Letter

(11.1) ETERNA Newsletter

(11.1.1) Description and Scope of the Data Processing

You have the option of subscribing to the free-of-charge ETERNA newsletter by means of which we inform you of our current interesting offers. The promoted goods are named in the Declaration of Consent. For the registration for the newsletter, ETERNA uses the so-called double opt-in procedure. That means that ETERNA, upon your registration, will use the e-mail address that you have provided in order to send a confirmation e-mail to the designated e-mail address whereby ETERNA will ask you to confirm that you wish to receive the newsletter. Thus, it is ensured that no third party has used your data. You must confirm your registration within 24 hours in order to activate your registration.

The mandatory information for the sending of the newsletter is solely your e-mail address. The disclosure of additional, specially-marked data is voluntary and shall be used solely for a personalisation of the newsletter.

Moreover, ETERNA shall respectively store your IP addresses in addition to the date and time of day during the registration and the confirmation. The purpose of the procedure is to document your registration and, where applicable, to be able to identify any potential misuse of your personal data.

(11.1.2) Legal Basis for the Processing

The processing of the data entered in the newsletter registration form shall be done exclusively upon the basis of your consent in accordance with Art. 6 Para. 1 Clause 1 lit. a) GDPR.

(11.1.3) Purpose of the Data Processing

The collection of the user’s e-mail address shall serve the purpose of sending the newsletter.

(11.1.4) Duration of the Storage

The data shall be deleted as soon as they are no longer required for the attainment of the purpose of their collection.

(11.1.5) Right of Objection; Right of Deletion

You may at any time cancel the subscription to the newsletter (i.e. revoke at any time the consent that has been issued). The revocation may be declared by clicking on the link that is provided in each newsletter e-mail, via e-mail to service@eterna.de or via a message (e.g. fax or letter) to ETERNA’s contact data that are stated in § 1. However, the legality of the data processing procedures that have already been done shall remain unaffected by the revocation.

(11.2) Product Recommendations for Similar Goods from ETERNA

In addition to the purpose of implementing the contractual agreement, ETERNA shall use the e-mail which you provide in conjunction with the purchase of an item to notify you of its own similar products via direct advertising upon a regular basis by e-mail. This shall be done regardless of whether you have registered for the newsletter or not.

You may at any time object to the usage of your e-mail address for the sending of product information by ETERNA without any costs being incurred by you than the communication costs incurred at the basic rates. You may declare your objection by clicking on the link that is provided in each product recommendation e-mail, via e-mail to service@eterna.de or via a message (e.g. fax or letter) to ETERNA’s contact data that are stated in § 1.

(11.3) Salesforce Marketing Cloud; Newsletter Tracking

(11.3.1) The sending of the newsletter and the product information e-mail are made via „eMail Studio“, a newsletter-mailing platform from the Salesforce cloud provider (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany; „Salesforce“). You can review the Data Protection Guidelines of the mailing service provider here: https://www.salesforce.com/de/company/privacy. You can find additional information regarding the GDPR at https://www.salesforce.com/de/campaign/gdpr/.

(11.3.2.) The e-mail addresses of the recipients are stored on Salesforce’s servers. Salesforce uses this information in order to send and evaluate the newsletter as well as the product information e-mails by our mandate. Moreover, Salesforce uses these data in order to optimise or improve its own services, e.g. in order to technically optimising the mailing process and the presentation of the newsletter/the product information e-mails or for statistical purposes in order to determine which countries the recipients are from. The usage of these data shall be done in pseudonymised form, i.e. without any categorisation to a user.

(11.3.3) The newsletter and the product information e-mails contain a so-called „web beacon“, i.e. a pixel-sized file which is retrieved upon opening the e-mail from Salesforce’s server. During this retrieval, initially technical information, e.g. information regarding the browser and your system as well as your IP address and the time of the retrieval, is collected. This information is used in order to technically improve the services based upon the technical data or the target groups and their reading behaviour based upon their retrieval locations (which are determinable via the IP address) or the access times. The statistical data collections also likewise include the determination of whether the newsletter and/or the product information e-mail are being opened, when they are opened and which links are clicked. This information can be categorised for technical reasons to the individual recipients whereby the evaluations serve merely to identify the reading habits of our users and to adapt our contents to them, to improve them or send different contents based upon our users’ interests.

(11.3.4) Salesforce indeed has a branch in Germany, but has its Headquarters in the USA. Thus, it cannot be ruled out that the aforementioned data will be transmitted to the USA. Salesforce is certified in accordance with the EU-US Privacy Shield and guarantees that your data will also be subjected to an appropriate data protection level in the USA. You can find additional information regarding the certification by clicking on the following link: https://www.privacyshield.gov.

(11.3.5) The legal basis for the data processing is, owing to your registration for the newsletter, Art. 6 Para. 1 Clause 1 lit. a) GDPR and/or, owing to the product recommendation e-mail, Art. 6 Para. 1 Clause 1 lit. f) GDPR. You can at any time cancel the newsletter as well as object to the usage of your e-mail address in order to send product information. In this case, Salesforce shall no longer process your data for the aforementioned purposes. In this context, we make reference to the statements in (11.1.5) as well as (11.2) of these Data Protection Guidelines.

(11.4) Direct Advertising by Letter

(11.4.1) Description and Scope of the Data Processing

ETERNA shall use the postal address (in addition to your name) which you have provided in conjunction with the purchase of an item to notify you via direct advertising (e.g. in order to send interesting offers and information about our products) upon a regular basis by letter.

(11.4.2) Legal Basis for the Processing

The legal basis for the direct advertising by letter is Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(11.4.3) Purpose of the Data Processing

The data collection of your name as well as your address also serves the purpose of sending you direct advertising by letter. In accordance with Recital 47 to the GDPR, the processing of personal data for the purpose of direct advertising may be regarded as being a type of processing which serves an entitled interest. In this context, it must be taken into consideration particularly that a customer relationship already exists between you and ETERNA as the result of your purchase and we thus have an entitled interest in notifying you henceforth of current offers.

(11.4.4) Duration of the Storage

The data shall be deleted as soon as they are no longer required for the attainment of the purpose of their collection.

(11.4.5) Right of Objection

You may at any time object to this form of direct advertising by letter by ETERNA. You may declare your objection via e-mail to service@eterna.de or via a message (e.g. fax or letter) to ETERNA’s contact data that are stated in § 1.

 

§ 12     Participation in Sweepstakes, Prize Competitions or Other Campaigns

ETERNA conducts sweepstakes, prize competitions or other campaigns in irregular intervals. Insofar as the disclosure of personal data (e.g. your name, your address or your e-mail address) is required in order to participate, ETERNA shall use them exclusively for the implementation of the sweepstakes, the prize competition or any other campaign. You can review the details in this regard in the respectively-separate Participation Terms and Conditions as well as separate Data Protection Guidelines.

 

§ 13     Usage of Web Analysis Tools; Web Tracking

The web analysis tools/tracking measures which are listed in the following and which we use are implemented upon the basis of Art. 6 Para. 1 Clause 1 lit. f) GDPR. Via the web analysis tools/tracking measures which are used, we would like to secure the needs-based design and the continuous optimisation of our website. In addition, we use the web analysis tools/tracking measures in order to collect statistical data regarding the usage of our website and in order to evaluate them for the purpose of the optimisation of our website for you. These interests must be regarded as being entitled interests in accordance with the aforementioned provision.

You can object to this analysis or prevent it through the non-usage of specific tools. Detailed information in this regard for the corresponding web analysis tools/tracking measures is available for your review.

(13.1) Google Analytics

(13.1.1) This website uses Google Analytics, a Web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Analytics uses so-called „cookies“ – text files which are stored on your computer and which enable an analysis of your usage of the website. As a rule, the information about your usage of this website that is generated by the cookie to transmitted to a Google server in the USA and stored there. In the case that IP anonymisation is activated on this website, your IP address shall nonetheless be shortened beforehand by Google within the member countries of the European Union or in other contracting states to the European Economic Area Convention. Only in exceptional cases shall the full IP address be transmitted to a Google server in the USA and stored there. By mandate of this website’s operator, Google shall use this information in order to evaluate your usage of the website, in order to compile reports regarding the website activities and in order to render additional services associated with the usage of the website and the Internet to the website’s operator.

(13.1.2) The IP address provided by your browser via Google Analytics shall not be commingled with other data by Google.

(13.1.3) You can prevent the storage of cookies by correspondingly adjusting the settings on your browser software; however, we wish to point out that, in this case, you may not be able to comprehensively use all functions of this website. Moreover, you can prevent the collection of the data (including your IP address) that have been generated by the cookie and which make reference to your usage of the website from being sent to Google as well as the processing of these data by Google by downloading and installing the browser plug-in that is available by clicking on the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(13.1.4) As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link in order to place an opt-out cookie which will prevent the data collection by Google Analytics within this website in the future (this opt-out cookie functions only in this browser and only for this domain; thus, in order to delete your cookies in this browser, you must click on this link again): Deactivate Google Analytics

(13.1.5) This website uses Google Analytics with the add-on „_anonymizeIp()“. By so doing, IP addresses are subjected to continued processing in shortened form whereby any personal inferences can thus be excluded. Insofar as a personal reference is nonetheless created via the data collected about you, this shall thus be immediately excluded and the personal data shall thus be promptly deleted.

(13.1.6) We use Google Analytics in order to be able to analyse and improve the usage of our website upon a regular basis. Via the statistics obtained, we can improve our website and design it to be more interesting to you as the user. For the exceptional cases in which personal data are transmitted to the USA, Google has obligated itself to fulfil the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the usage of Google Analytics is Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(13.1.7) The data shall be deleted as soon as they are no longer required for our record-keeping purposes. In the case of Google Analytics, this shall be done after 14 months.

(13.1.8) Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms and Conditions: http://www.google.com/analytics/terms/de.html, Data Protection Overview: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the Data Protection Declaration: http://www.google.de/intl/de/policies/privacy.

(13.1.9) ) Our user analysis also uses Universal Analytics. This allows us to obtain information about the use of our offers on different devices ("Cross Device"). We use a pseudonymised user ID using the cookie technology, which does not contain personal data and does not transmit such data to Google. Data collection and storage can be objected to at any time with a view to the future through a Google browser plugin (https://tools.google.com/dlpage/gaoptout?hl=de). This opt-out must be performed on all systems that you use, for example, in another browser or on your mobile device. Further notes too Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

(13.2) Akanoo

(13.2.1) This website uses a Web analysis service from Akanoo GmbH, Mittelweg 121, 20148 Hamburg („Akanoo“). You can find detailed information on this third-party provider at https://www.akanoo.com.

(13.2.2) Akanoo uses so-called „cookies“. Cookies are text files which are stored on your computer and which enable an analysis of the usage of the website. The information generated by the cookie is transmitted to a server of Akanoo GmbH in Germany and stored there. No data processing is done outside of Germany. By mandate of ETERNA Mode GmbH, Akanoo GmbH shall use the information in order to collect data about your visitor behaviour, evaluate them and render additional services associated with the usage of the website and the Internet to ETERNA Mode GmbH. The IP address transmitted by your browser is shortened by Akanoo before its storage so that a direct identification of a concrete person is not possible. Rather, Akanoo uses heuristics which attempt to identify a visitor with a prior visit by combining specific data, e.g. the resolution, the browser, the plug-ins used and the operating system and calculating them to a hash value.

(13.2.3) The storage of Akanoo cookies is done upon the basis of Art. 6 Para. 1 Clause 1 lit. f) GDPR. The processing of the users’ personal data enables us to conduct an analysis of our users’ surfing behaviour. Through the evaluation of the data obtained, we are able to compile information regarding the usage of the individual components of our website. By so doing, this helps us to constantly improve our website and its userfriendliness. These purposes also form the basis for our entitled interest in the processing of the data in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR. Through the anonymisation of the IP address, the users’ interest in the protection of their personal data is sufficiently taken into consideration.

(13.2.4) Akanoo cookies remain on your device until you delete them.

(13.2.5) You can prevent the storage of cookies by correspondingly adjusting the settings on your browser software. However, we wish to point out that, in this case, you may not be able to comprehensively use all functions of this website. Moreover, you can prevent the collection of the data generated by the cookie and making reference to your usage of the website from being sent to Akanoo as well as the processing of these data by Akanoo as well as object to the collection of the data generated by the cookie and making reference to your usage of the website from being sent to Akanoo as well as the processing of these data by Akanoo by clicking on the following link: https://akanoo.com/manager/optOut. By so doing, an opt-out cookie is placed which will prevent the future collection of your data when visiting this website.

(13.3) ad4mat®

(13.3.1) This website uses the Web analysis tool ad4mat® from advanced store GmbH, Alte Jakob-straße 79/80, 10179 Berlin („ad4mat®“). You can find detailed information on this third-party provider at www.ad4mat.com.

(13.3.2) With regards to the scope of the data storage and/or data processing and data usage, ad-vanced store GmbH proceeds as follows in accordance with the Data Protection Declaration (in excerpt form) which is retrievable by clicking on the following link https://www.ad4mat.com/de/datenschutz.

ad4mat® never stores personal data or data with personal inferences without your express consent. That is to say, ad4mat stores no information whatsoever such as, for example, name, address, e-mail or telephone number. It likewise stores no data whatsoever which enables inferences to be attributed to specific persons. Thus, it is ensured that neither ad4mat nor the providers of products or services are able to link general information about advertising-relevant target groups to specific persons. Moreover, ad4mat never knowingly collects information about online users under 13 years of age. The same applies to websites which appeal to this target group.

ad4mat filters advertising-relevant target groups by socio-demographic characteristics and interests. An categorisation to sensitive interest categories, which are based, for example, on race, religion or sexual orientation, is not done by ad4mat. The various target groups filtered by socio-demographic characteristics are presented with the advertising content that is as relevant for them as possible. Thus, any disruptive effects are minimised which could be cre-ated from advertising which is irrelevant for the target group. During the presentation of advertisements to target groups, the interests of individual persons are not taken into consideration, but rather the interests of anonymous, standardised groups of persons. ad4mat processes exclusively statistical models which are created from the anonymous usage of online advertising and editorial content.

ad4mat disseminates no personal data to companies, organisations or persons. ad4mat may provide data of identified and/or filtered target groups via cookies to third parties in order to present target group-relevant advertising content.

Although the data processed by ad4mat encompasses exclusively anonymous data, all ad4mat employees who work with these data are subjected to a confidentiality obligation upon beginning their employment for ad4mat. Moreover, ad4mat utilises technical and organisational security measures in order to protect data from manipulation, destruction or loss.

ad4mat uses cookies. If a user visits Internet sites which contain advertisements from ad4mat (ad4mat), ad4mat stores a number (with a cookie) in the user’s Internet browser. Via this number, e.g. „2089“, the browser „remembers“ the user’s visits. A transfer of this number to another browser is not possible. Thus, inferences about the person are not possible – neither for ad4mat nor for third parties!

(13.3.3) We use ad4mat upon the basis of our entitled interest in targeted advertising in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(13.3.4) You have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can generally deactivate usage-based ad4mat banners. In order to do so, i.e. for the purpose of the opt-out, you can use the following link: https://www.ad4mat.com/de/adchoices.

(13.4) Facebook Pixel

In order to measure conversions, our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

Thus, the behaviour of the visitors to the website can be tracked after they have been guided to the provider’s website by clicking on a Facebook advertisement. Thus, the effectiveness of the Facebook advertisements can be evaluated for statistical and market research purposes and future advertising measures can be optimised. We use Facebook pixel upon the basis of our entitled interest in targeted advertising in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

The collected data are anonymous for us as the operator of this website whereby we can draw no inferences regarding the identity of the users. However, the data are stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes according to Facebook-Datenverwendungsrichtlinie. Thus, Facebook can enable the placement of advertising on Facebook’s pages as well as outside of Facebook. This usage of data cannot be controlled by us as the website operator.

In Facebook’s Data Protection Guidelines, you can find additional comments on the protection of your private sphere: Facebook Data Usage Guidelines.

Moreover, you can deactivate the „Custom Audiences“ remarketing function in the Settings section for advertising at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. In order to do this, you must be logged-in to Facebook at that time.

If you have no Facebook account, you can deactivate the usage-based advertising of Facebook on the European Interactive Digital Advertising Alliance’s website: http://www.youronlinechoices.com/de/praferenzmanagement/.

(13.5) Cloudflare

Our webpages use functions from CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.

The operator of this website uses services from the CloudFlare Company. CloudFlare offers a so-called worldwide-allocated content delivery network with DNS. Technically, the information transfer between your browser and our website is managed via CloudFlare’s network. CloudFlare is thus able to analyse the data communication between the user and our website in order to, for example, detect and ward off attacks on our services. In addition, CloudFlare may possibly store cookies on your computer for the purposes of optimisation and analysis. This serves the purpose of safeguarding our prevailing entitled interests in an optimal marketing of our website in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR during a reconciliation of interests. You can find additional information in the CloudFlare Data Protection Declaration.

 

§ 14     Online Advertising (Remarketing; Retargeting)

(14.1) Google AdWords Conversion Tracking

(14.1.1) This website uses the „Google AdWords“ online advertising programme and, within the parameters of Google AdWords, the conversion tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). We use the offerings from Google Ad-Words in order to draw attention to our attractive offerings on external websites via advertisements (so-called Google AdWords). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. We are thus pursuing the interest of presenting advertising to you which is interesting to you, to design our website to be more interesting to you and to attain a fair calculation of advertising costs.

(14.1.2) The cookie for conversion tracking is placed whenever a user clicks on an AdWords advertisement that has been placed by Google. Cookies are small text files which are stored on your computer system. As a rule, these cookies lose their validity after 30 days and do not serve for personal identification purposes. If the user visits specific pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was guided to this page. Each Google AdWords customer receives a different cookie. Cookies can thus not be tracked via the websites of AdWords customers. The information obtained via the conversion cookies serve the purpose of creating conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their advertisement and were guided to a page affixed with a conversion tracking tag. However, they receive no information which can be used to personally identify the users.

(14.1.3) We utilise Google AdWords upon the basis of our entitled interest in targeted advertising in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(14.1.4) Google LLC, with its Headquarters in the USA, has been certified for the US-European Data Protection Convention called „Privacy Shield“ which guarantees the fulfilment of the data protection level that is valid in the EU. At the following Internet address, you can find additional information regarding Google’s Data Protection Guidelines: http://www.google.de/policies/privacy/.

(14.1.5) If you would not like to participate in tracking, you can block this usage by deactivating the cookie from the Google conversion tracking via your Internet browser under „User Settings“. You shall thereupon not be included in the conversion tracking statistics.

(14.1.6) You can permanently deactivate cookies for advertising purposes by preventing this by correspondingly adjusting the settings on your browser software or downloading and installing the browser plug-in that is available by clicking on the following link: http://www.google.com/settings/ads/plugin?hl=de.

(14.1.7) Please keep in mind that specific functions of this website may possibly not be used or only in a limited fashion if you have deactivated the usage of cookies.

(14.2) Google Remarketing

(14.2.1) This website uses the remarketing function from Google Inc. („Google“). This function serves the purpose of presenting the website’s visitors with interest-based advertisements within the Google advertising network. The website visitor’s browser stores so-called „cookies“ – text files which are stored on your computer and which enable the visitor to be recognised again whenever he visits websites which are part of Google’s advertising network. On these pages, the visitor can then be presented with advertisements which make reference to contents which the visitor previously accessed on websites which use Google’s remarketing function.

(14.2.2) According to its own statements, Google collects no personal data during this process.

(14.2.3) However, if you should not want Google’s remarketing function, you can in principle deactivate it by correspondingly adjusting the settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the usage of cookies for interest-based advertising via the Advertising Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

(14.3) Awin (previously „Zanox“)

(14.3.1) ETERNA has integrated components from Awin into this Internet site. Awin is a German affiliate network which offers affiliate marketing. Affiliate marketing is an Internet-supported sales form which enables the commercial operators of Internet sites – the so-called merchants or advertiser – to present advertising, which is usually compensated via click or sales commissions, on Internet sites of third parties – thus of sales partners who are also called affiliates or publishers. Via the affiliate network, the merchant provides an advertisement – thus an advertising banner or other suitable Internet advertising resources which are subsequently integrated by an affiliate into its own Internet sites or promoted via other channels, e.g. keyword advertising or e-mail marketing.

(14.3.2) Awin’s operating company is Awin AG, Eichhornstraße 3, 10785 Berlin, Germany.

(14.3.3) Awin places a cookie on your information technology system as the affected party. What cookies are has already been discussed in § 5 of these Data Protection Guidelines. Awin’s tracking cookie stores no personal data whatsoever. Merely the following are stored: The identification number of the affiliate – thus of the partner brokering the potential customer – as well as of the reference number of the visitor to an Internet site and of the advertisement that has been clicked. The purpose of the storage of these data is the processing of commission payments between a merchant and the affiliate which are processed via the affiliate network – thus Awin. The storage of „Awin cookies“ is done upon the basis of Art. 6 Para. 1 Clause 1 lit. f) GDPR. The entitled interest is derived from the basis that the amount of the affiliate’s commission can be determined only via the cookies.

(14.3.4) The affected party can at any time prevent the placement of cookies via correspondingly adjusting the settings of the Internet browser being used and thus permanently object to the placement of cookies. Such a setting of the Internet browser being used would also prevent Awin from placing a cookie on the affected party’s information technology system. In addition, any cookies already placed by Awin can be deleted at any time via an Internet browser or other software programmes. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.3.5) Awin’s valid Data Protection Guidelines can be retrieved at https://www.awin.com/de/rechtliches/privacy-policy.

(14.4) target performance

(14.4.1) This website uses the retargeting technology from Target Performance GmbH („target performance“), Rosenheimerstr. 145 e-f, 81671 Munich. You can find detailed information regarding this third-party provider at http://www.targetperformance.de.

(14.4.2) The target performance ad-serving technology uses so-called cookies in order to control the displaying and delivery of advertisements. These cookies are small text files which are stored on your computer or mobile device. In these text files, pseudonymised information is stored regarding your visits to various websites on the Internet. In this manner, the target performance ad-serving technology can conduct a controlling of the advertising that is presented. Among other things, the advertisement display frequency is regulated which prevents you from repeatedly seeing the same advertisement, but also more extensive measures for the optimisation of the advertising that is displayed. In the cases of the retargeting technology, a cookie is placed on your computer or mobile device in order to collect pseudonymised data regarding your interests and thus to adapt the advertising individually to the stored information. You thus receive advertising which is displayed to you which will most likely correspond to your product and informational interests. Insofar as the collected information has a personal reference, the processing shall be done in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research. The stored data within the cookies encompass exclusively so-called alpha-numerical IDs for the pseudonymised identification of the user as well as of the visit’s data which enable no personal references whatsoever. Moreover, the target performance ad-serving and retargeting technology uses the visitors’ IP addresses in order to evaluate the geographical region, the access speed as well as the Internet provider. Insofar as the collected data contain a personal reference, the processing of these data shall be done in accordance with Art. 6 Para. 1 lit. f) GDPR upon the basis of the entitled interest of target performance GmbH in market research and in the optimisation of the service. In this regard, a categorisation to concrete persons, the precise address, the place of residence or more extensive personal data is at no time possible.

(14.4.3) In order to object to the data collection and the creation of pseudonymised user profiles for the future, you can procure a so-called opt-out cookie. A link to the opt-out page is provided with each advertisement which uses the corresponding data. Users who have selected the opt-out for themselves will receive no additional cookies from target performance ad-serving technology. In order to generally deactivate the usage of cookies on your computer, you can adjust the settings on your Internet browser in such a manner that, in the future, no more cookies can be stored on your computer and/or any cookies that have already been stored can be deleted (cf. § 5 of these Data Protection Guidelines). However, the deactivation of all cookies may have the result that some functions on our Internet site may no longer be able to be run.

(14.4.4) target performance’s valid Data Protection Guidelines can be retrieved at http://www.targetperformance.de/datenschutz/.

(14.5) Kupona

(14.5.1) On our website, we use Kupona, a tool for the optimised delivery of advertising campaigns by Kupona Media GmbH, Frankfurter Straße 8, 36043 Fulda. You can find detailed information about this third-party provider at https://www.kupona.de.

(14.5.2) This tool collects anonymised information and data regarding the users’ behaviour on our website. In order to do this, cookie text files are stored on your computer. Based upon an algorithm-based analysis of the user behaviour, Kupona also places product recommendations in the form of product-specific advertising banners on other websites. In this regard, the usage of cookies serves only for the purpose of website optimisation. The legal basis of this pro-cessing is created from Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and in market research. In so doing, no inferences are drawn about the user. Moreover, no usage and no dissemination of the data are made to third parties.

(14.5.3) You can object to the usage of your user data by clicking on the following link: http://datenschutz.kupona.de/?cus=%28HEIASID%29. There, it will be explained in detail to you how you can deactivate the data collection so that you will no longer receive usage-based advertising from Kupona. Moreover, you have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.6) Targeting360

(14.6.1) On our website, we use Targeting360, a tool for the optimised delivery of advertising campaigns by targeting360 GmbH, Gredinger Straße 28, 90453 Nuremberg. You can find detailed information in this regard on this third-party provider at https://www.targeting360.de, the Data Protection Declaration at https://targeting360.de/de/privacy-policy/.

(14.6.2) This tool collects anonymised information and data regarding the users’ behaviour on our website. In order to do this, cookie text files are stored on your computer. Based upon an algorithm-based analysis of the user behaviour, Kupona also places targeted product recommendations in the form of product-specific advertising banners on other websites. In this regard, the usage of cookies serves only the purpose of website optimisation. The legal basis of this processing is created from Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research. In so doing, no inferences are drawn about the user. Moreover, no usage and no dissemination of the data are made to third parties.

(14.6.3) You have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.7) epoq

(14.7.1) This website uses software technology from epoq internet services GmbH, Am Rüppurer Schloß 1, 76199 Karlsruhe („epoq“). You can find detailed information on this third-party provider at https://www.epoq.de.

(14.7.2) Via epoq’s software technology, it is possible for us to present you with targeted and individual product recommendations on the start, product detail, shopping basket or category pages. In this regard, the presentation of the product recommendations is done upon the basis of a cookie-based analysis of the previous and current clicking and purchasing behaviours where-by no personal data are nonetheless stored. In these cases, a cookie is stored on your computer or mobile device in order to collect anonymised data regarding your interests and thus to adapt the advertising individually to the stored information. These cookies are small text files which are stored on your computer or mobile device. You thus receive advertising that is displayed to you which will be highly likely to correspond to your product and informational interests. Insofar as the collected information has a personal reference, the processing shall be done in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research.

(14.7.3) You can permanently deactivate the placement of cookies for advertising purposes by adjusting the settings on your Internet browser in such a manner that, in the future, no cookies can be stored on your computer anymore and/or any cookies that have already been stored will be deleted. However, the deactivation of all cookies may have the result that some functions on our Internet site may no longer be run. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.8) The Reach Group

(14.8.1) This website uses remarketing and/or retargeting tools from Reach Group GmbH which has, among others, a location in In den Schwanenhöfen, Erkrather Str. 228a, 40223 Dusseldorf („Reach Group“). You can find detailed information about this third-party provider at https://www.reachgroup.com, the Data Protection Guidelines at https://www.reachgroup.com/datenschutz.

(14.8.2) On this website, cookies from the Reach Group are used whereby data are collected and stored for retargeting purposes. Via the retargeting technology, information is collected regarding the surfing behaviour of the website’s visitors for advertising purposes in anonymised form and stored in „cookie“ text files on your computer. Thereupon, targeted product recommendations can be displayed as personalised advertising banners on other websites which are interesting to you. The legal basis of this processing is created in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research.

(14.8.3) You may object to the usage of your user data by clicking on the following link: https://www.reachgroup.com/opt-out. Moreover, you have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can find detailed in this regard in (5.3) of these Data Protection Guidelines.

(14.9) ad:C media

(14.9.1) This website uses the retargeting tool from ad:C Media GmbH, Marktplatz 10, 93128 Regenstauf („ad:C media“). You can find detailed information on this third-party provider at https://ad-c.media/.

(14.9.2) On this website, cookies from ad:C Media are used whereby data are collected and stored for retargeting purposes. Via the retargeting technology, information regarding the surfing behaviour of the website visitors is collected for advertising purposes in anonymised form and stored in „cookie“ text files on your computer. Ad:C media analyses the surfing behaviour based upon an algorithm. Subsequently, targeted product recommendations can be displayed as interesting personalised advertising banners for you on other websites. In no case can these data be used to personally identify the visitor to this website. The legal basis of this processing is created in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research.

(14.9.3) The technology of the retargeting cookies has already been discussed in detail in (5.1.5) of these Data Protection Guidelines while the legal basis is specified in (5.2) of these Data Protection Guidelines.

(14.9.4) You have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.10) Marvellous Machine

(14.10.1) This website uses the „Marvellous Machine“ retargeting tool from Maytrics GmbH, Beratgerstraße 36, 44149 Dortmund („Maytrics“). You can find detailed information regarding this third-party provider at https://www.marvellousmachine.net/, while the Data Protection Declaration is retrievable by clicking on the link https://marvellousmachine.net/content/datenschutz.

(14.10.2) Maytrics is a service provider for the targeted delivery of advertising for the purpose of digital marketing. In this regard, particularly so-called targeting and so-called realtime bidding are used. Moreover, in this context, cookies are used whereby data are collected and stored for retargeting purposes. Via the retargeting technology, information about the surfing behaviour of the website visitors is collected in anonymised form for advertising purposes and stored in „cookie“ text files on your computer. The legal basis of this processing is created in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR upon the basis of our entitled interest in the presentation of personalised advertising and market research.

(14.10.3) The data are retained for 120 days and then deleted.

(14.10.4) You have the option of blocking the storage of cookies by correspondingly adjusting the settings in your Internet browser. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.11) Effiliation

(14.11.1) This website uses the Effiliation Partner Programme from Effiliation, 80, rue Taitbout, 75009 Paris, France. You can find detailed information regarding this third-party provider at https://www.effiliation.com.

(14.11.2) Through the placement of advertisements and links to our website, website operators can obtain an advertising cost reimbursement. Effiliation uses cookies on your computer in order to be able to determine the origin of the orders. Among other things, Effiliation can recognise that you have clicked on the partner link on a website. This cookie fulfils the respectively-valid Data Protection Guidelines and stores no personal data whatsoever, but rather merely the ID of the referring partner as well as the reference no. of the advertisement that has been clicked on by the visitor (e.g. banner or text link). The storage of „Effiliation cookies“ is done upon the basis of Art. 6 Para. 1 Clause 1 lit. f) GDPR. The entitled interest is created from the fact that the amount of the affiliate remuneration is determinable only through the usage of cookies.

(14.11.3) You can prevent the placement of cookies at any time by correspondingly adjusting the settings on your Internet browser and thus permanently object to the placement of cookies. Such a setting on your Internet browser would also prevent Effiliation from placing a cookie on your information technology system. In addition, any cookies already placed by Effiliation can be deleted at any time via an Internet browser or other software programmes. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.12) Universal Media Solutions

(14.12.1) ETERNA has integrated components of Universal Media Solutions („UMS“) into this Internet site. ETERNA uses services from UMS in order to manage the commissions of the aforementioned affiliate networks and to prevent fraud in this context.

(14.12.2) The operating company of Universal Media Solutions is 22-Visions GmbH, Oberbecksener Str. 6, 32547 Bad Oeynhausen, Germany. You can find detailed information regarding this third-party provider at http://www.universalmediasolutions.net.

(14.12.3) UMS uses a cookie on the information technology system of the affected party. What cookies are was discussed in detail above in § 5 of these Data Protection Guidelines. The UMS tracking cookie stores no personal data whatsoever. Merely the following are stored: The identification number of the network, of the affiliate as well as, where applicable, the reference number of the visitor to an Internet site and the advertisement and/or the advertising campaign that has been clicked. The purpose of the storage of these data is the processing of commission payments between ETERNA and the affiliate networks. The legal basis of this form of data processing is Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(14.12.4) You can at any time prevent the placement of cookies by correspondingly adjusting the settings on your Internet browser and thus permanently object to the placement of cookies. Such a setting of your Internet browser would also prevent UMS from placing a cookie on the information technology system of the affected party. In addition, any cookies already placed by UMS can be deleted at any time via an Internet browser or other software programmes. You can find detailed information in this regard in (5.3) of these Data Protection Guidelines.

(14.12.5) UMS’ valid Data Protection Guidelines can be retrieved at https://www.universalmediasolutions.net/DataPrivacy.

(14.13) Criteo

Our website uses cookies/advertising IDs for advertising purposes. Thus, we can present our advertising on partner websites and via apps and e-mails to visitors who are interested in our products. Retargeting technologies use cookies or advertising IDs and display advertising based upon your previous browsing behaviour. In order to reject this interest-based advertising, please visit the following websites:
http://www.networkadvertising.org/choices/
http://www.youronlinechoices.com/

We can exchange information such as technical codes from your registration information on our website or our CRM system with reliable advertising partners. Thus, your devices and/or environments can be linked together and offer you a seamless user experience via the devices and environments which you use. You can find more details regarding these connection capabilities in the Data Protection Guidelines which you will find on the aforementioned platforms or in the following explanations.
Criteo’s Data Protection Policies: http://www.criteo.com/de/privacy

(14.14) AdDefend

In order to display advertising, our website uses AdDefend, a service from AdDefend GmbH, Borselstrasse 3, 22765 Hamburg.
This service uses cookies in order to determine whether you have already visited a website. You can at any time object to the usage of these cookies by AdDefend by using the opt-out option at https://www.addefend.com/de/opt-out/

 

§ 15     Customer Survey Inquiry from eKomi

(15.1) Description and Scope of the Data Processing

For the purposes of customer and product assessments by ETERNA’s customers and for the internal quality management, ETERNA has integrated the evaluation software from eKomi Ltd., Markgrafenstraße 11, 10969 Berlin („eKomi“) into its website. ETERNA would thus like to offer you the possibility of submitting an assessment after you have completed your purchase. eKomi is a company which specialises in the Web-based collection of authentic customer opinions, product assessments and recommendations. You can find detailed information regarding this third-party provider at http://www.ekomi.de.

After the goods are shipped, eKomi will send a link to a purchasing assessment page to randomly-selected customers together with the request to submit an assessment of your purchase from ETERNA („customer survey inquiry“). Your submission of such a customer survey is done absolutely voluntarily.

Because only such customers can submit a purchasing rating who have bought a product from ETERNA, it is necessary that ETERNA forward the personal data that you have provided and/or order data to eKomi – thus your name, your e-mail address as well as the order number.

eKomi will receive the data from ETERNA exclusively for the purpose of obtaining the customer survey.

(15.2) Legal Basis for the Data Processing

The legal basis for the processing of your aforementioned personal data is Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(15.3) Purpose of the Data Processing

Feedback from our customers in the form of customer and product assessments enables us to control our online shop. By reviewing the assessments that have been submitted, we are able to compile information about customer satisfaction. This helps us to constantly improve our website and its userfriendliness. These purposes also create the basis for our entitled interest in the processing of the data in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR.

(15.4) Rights of Objection and Deletion

You can at any time object to the sending of such a customer assessment inquiry by ETERNA. You can declare your objection via e-mail to service@eterna.de or by sending a message (e.g. fax or letter) to ETERNA’s contact data that are stated in § 1.

 

§ 16     Voucher Offers from Sovendus GmbH

We participate in the partner network of Sovendus GmbH, Hermann-Veit-Str. 6, 76133 Karlsruhe, www.sovendus.de; hereafter: „Sovendus“), in order to be able to offer you vouchers for purchases made in other shops which participate in Sovendus’ network.

For the selection of a voucher offer that is interesting to you currently, we pseudonymise and encrypt the hash value of your e-mail address and your IP address before transmitting them to Sovendus GmbH, Hermann-Veit-Str. 6, 76133 Karlsruhe (Sovendus) (Art. 6 Para. 1 Clause 1 lit. f) GDPR). The pseudonymised hash value of the e-mail address is used for the consideration of any objection that may possibly be lodged against Sovendus’ advertising (Art. 21 Para. 3, Art. 6 Para. 1 Clause 1 lit. c) GDPR). The IP address is used by Sovendus exclusively for the purposes of data security and, as a rule, are anonymised after seven days (Art. 6 Para. 1 Clause 1 lit. f) GDPR). Moreover, for invoicing purposes, we pseudonymise the order number, the order amount with the currency, session ID, coupon code and time stamp before sending them to Sovendus (Art. 6 Para. 1 lit. f) GDPR).

If you are interested in a voucher offer from Sovendus, no advertising objection has been lodged in conjunction with your e-mail address and you click on the voucher banner displayed only in this case, we shall send the encrypted form of address, name, postcode, country and your e-mail address to Sovendus in order to prepare the voucher (Art. 6 Para. 1 Clause 1 lit. b), f) GDPR).

Please review more extensive information regarding the processing of your data by Sovendus in its Online Data Protection Guidelines at www.sovendus.de/datenschutz.

 

§ 17     Usage of Facebook, Google+ and Instagram

(17.1) ETERNA maintains online presences on the social networks Facebook, Google+ as well as Instagram in order to inform you of its services as well as news from the fashion and lifestyle segments. This serves the purpose of safeguarding our prevailing entitled interests in an optimal marketing of our website during a reconciliation of interests in accordance with Art. 6 Para. 1 Clause 1 lit. f) GDPR. In order to increase the protection of your data when visiting our website, these buttons have not been integrated into the website in unrestricted fashion as plug-ins, but rather merely while using an HTML link. This integration guarantees that, when visiting a page of our website which contains such buttons, no connection is created with the servers of the provider of the respective social network. If you click on one of the buttons, a new window of your browser will open and access the webpage of the respective service provider where you can (where applicable, after entering your log-in data) press the Like or Share button, for example.

(17.2) In the following, you will find detailed information regarding the respective providers of the online websites as well as – by clicking on the respective links – a description of the respective data processing.

(17.2.1) Facebook

The provider of Facebook is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 (Ireland).

The purpose and scope of data collection, the continued processing and usage of the data by Facebook as well as your related rights and setting options for the protection of your private sphere can be found in Facebook’s Data Protection Guidelines which you can retrieve by clicking on the following link: https://www.facebook.com/privacy/explanation.

You can object to the usage of data for advertising purposes by Facebook by clicking on the following links via an opt-out:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

or

http://www.youronlinechoices.com/

 

We wish to expressly point out to you that Facebook Ireland limited is a subsidiary of the American company Facebook Inc. (1 Hacker Way, Menlo Park, California, 94025, USA). Accordingly, a transmission of the data to the USA cannot be ruled out. However, Facebook Inc. has nonetheless obligated itself to fulfil the EU-US Privacy Shield which guarantees that the data will also be subjected to an appropriate data protection level in the USA. You can find additional general information regarding certification by clicking on the link: https://www.privacyshield.gov; you can retrieve the current Privacy Shield status of Facebook by clicking on the following link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

(17.2.2) Google
The Google+ service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“)..

The purpose and scope of the data collection, the continued processing and usage of the data by Google as well as your related rights and setting options for the protection of your private sphere can be found in Google’s Data Protection Guidelines which you can retrieve by clicking on the following link: https://policies.google.com/privacy.

Owing to the location of Google’s Headquarters, a transmission of the data to the USA cannot be ruled out. However, Google has obligated itself to fulfil the EU-US Privacy Shield which guarantees that the data in the USA will also be subjected to an appropriate data protection level. You can find additional information regarding the certification by clicking on the link https://www.privacyshield.gov; you can retrieve the current Privacy Shield status of Google by clicking on the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

(17.2.3) Instagram

The Instagram service is provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 (Ireland)). You can find detailed information regarding the purpose and the scope of the data collection, the continued processing and usage of the data by Instagram as well as your related rights and setting options for the protection of your private sphere in Instagram’s Data Protection Guidelines which you can retrieve by clicking on the following link: https://instagram.com/about/legal/privacy/.

We wish to expressly point out to you that Facebook Ireland limited is a subsidiary of the American company Facebook Inc. (1 Hacker Way, Menlo Park, California, 94025, USA). Accordingly, a transmission of the data to the USA cannot be ruled out. However, Facebook Inc. has nonetheless obligated itself to fulfil the EU-US Privacy Shield which guarantees that the data in the USA will also be subjected to an appropriate data protection level. You can find additional information regarding the certification by clicking on the link https://www.privacyshield.gov; you can retrieve the current Privacy Shield status of Facebook by clicking on the following link: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.


(17.3)
 Please keep in mind that the exercising of your affected party rights can be done most effectively against the respective provider because merely the respective provider has direct access to your data. Insofar as you require support in this regard, please feel free to contact us via the contact data that have been provided for ETERNA.

 

§ 18     Data Security

Within the website visit, we use the popular SSL procedure (Secure Socket Layer) in conjunction with the respectively-highest encryption level which is supported by your browser. As a rule, this entails a 256-bit encryption. You can recognise an encrypted connection by the fact that the browser’s address line has changed from „http://“ to „https://“ and by the lock symbol in your browser line.

Moreover, we utilise suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulations, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are constantly being improved based upon the technological development.

 

§ 19     Your Affected Party Rights

If your personal data are processed, you are considered to be the affected party in accordance with the GDPR and you shall be entitled to the following rights visàvis us as the Responsible Party.

You can declare these rights against us via an e-mail sent to service@eterna.de or via a message (e.g. fax or letter) sent to the contact data specified in § 1.

Right of Information, Art. 15 GDPR

You have the right to demand that we confirm whether your personal data are being processed. If this is indeed the case, then you have a right to request information regarding these personal data and (particularly) regarding the

-     Processing purposes,

-     The category of the personal data,

-     The categories of recipients to whom your data have been or are being disclosed,

-     The planned storage duration,

-    The valid existence of a right of correction, deletion, restriction of the processing or objection,

-    The valid existence of a right of complaint,

-    The origin of your data insofar as we have not collected them,

-    As well as the existence of automated decision-making including profiling and, where applicable, detailed information in this regard.

Right of Correction, Art. 16 GDPR

You have a right to request the correction and/or completion of your personal data by the Responsible Party insofar as your processed personal data are incorrect or incomplete. We must undertake the correction in a prompt manner.

Right of Deletion („Right to be Forgotten“), Art. 17 GDPR

You have the right to demand the deletion of your personal data which we have stored unless (particularly) the processing is required for the exercising of the right of free expression and information, for the fulfilment of a legal obligation, for reasons encompassing the public’s interest or in order to assert, exercise or ward off legal claims.

Right of Restriction of the Processing, Art. 18 GDPR

You have the right to demand the restriction of the processing of your personal data insofar as you dispute the accuracy of the data, the processing is illegal but you reject their deletion and we no longer require the data, but you nonetheless require them in order to assert, exercise or ward off legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

Right of Notification, Art. 19 GDPR

If you have asserted the right of correction, deletion or restriction of the processing against us, we shall be obliged to notify all recipients, to whom your personal data have been disclosed, of this correction or deletion of the data or restriction of the processing unless this is determined to be impossible or is associated with disproportionate expenditures.

You shall have the right to request that we disclose information about these recipients to you.

Right of Data Portability, Art. 20 GDPR

You have the right to receive your personal data, which you have provided to us, in a structured, standard and machine-readable format or to demand the transmission thereof to another Responsible Party.

Right of Objection, Art. 21 GDPR

You have the right, for reasons which are based upon your particular situation, to at any time lodge an objection against the processing of your personal data which is made in accordance with Art. 6 Para. 1 Clause 1 lit. e) or lit. f) GDPR; this shall also be valid for a profiling supported by these provisions.

We shall no longer process your personal data unless we can document mandatory reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves the purpose of asserting, exercising or warding off legal claims.

If your personal data are processed in order to operate direct advertising, you have the right to at any time lodge an objection against the processing of your personal data for the purpose of such advertising; this shall also be valid for the profiling insofar as it is in conjunction with such direct advertising.

If you object to the processing for purposes of direct advertising, then your personal data shall no longer be processed for these purposes.

Right of Revocation of the Declaration of Consent Granted in Accordance with Data Protection Law, Art. 7 Para. 3 GDPR

You shall have the right to at any time revoke your consent which has been issued to us. This shall have the consequence that we may no longer continue the data processing in the future which was based upon this consent. However, the revocation of the consent shall not affect the legality of the processing that was done based upon the consent until it was revoked.

Right to Lodge a Complaint to a Government Supervisory Agency, Art. 77 GDPR

Notwithstanding any other legal remedy under administrative law or issued by a court, you shall have the right to lodge a complaint to a government supervisory agency – particularly in the member country of your residence, your workplace, or the location of the purported violation if you are of the belief that the processing of your personal data violates the GDPR.

 

§ 20     Currentness of and Changes to This Data Protection Declaration

(20.1) This Data Protection Declaration is being drafted in the version of: 17/10/2019.

(20.2) Owing to the continued development of our website or owing to changed statutory and/or government directives, it may become necessary to modify this Data Protection Declaration. The respectively-current Data Protection Declaration may be retrieved and printed out at any time on our website by clicking on the following link: (click here).