Source: https://www.fashionette.nl/privacy-statement
Timestamp: 2019-04-19 21:05:55+00:00

Document:
We take the protection of your personal data very seriously. Therefore, we collect, process and use your data solely in accordance with the German Data Protection Act (BDSG), German Telemedia Act (TMG) and the European Data Protection Directive 95/46/EC of the European Parliament. We would like to inform you about the type, scope and purpose of the collecting, processing and use of your personal data. By giving your consent, you agree to the collection, processing and use to the extent described. You can revoke your consent at any time in the future, for which it is sufficient to send an e-mail to datenschutz@fashionette.de.
Controller according to Art. 4 (7) EU General Data Protection Regulation (GDPR) is Fashionette GmbH, Grafenberger Allee 295, 40237 Düsseldorf; service@fashionette.de (see our Legal information). You can contact our data protection officer at info@schlutius-privacy.de or the mailing address: Dr Volker Wodianka, LL.M. c/o SCHLUTIUS Data Privacy & Compliance GmbH, Ferdinandstraße 3, 20095 Hamburg. If you contact us via email or a contact form, the data you provide (your email address, potentially your name and your phone number) will be saved by us in order to answer your questions. We will delete the data collected in this context as soon as its storage is no longer necessary, or restrict its processing if there are statutory retention obligations.
If we engage commissioned service providers for individual aspects of our services, or would like to use your data for marketing purposes, we will inform you in detail below regarding the operations in question. We will also state the stipulated criteria regarding the duration of storage.
The right to portability of data.
You also have the right to lodge a complaint with a supervisory authority for data protection regarding the processing of your personal data.
You can obtain information or clarifications regarding data protection from our data protection officer (see contact details above). Send us an email to our email address service@fashionette.de or a letter to our address Fashionette GmbH, Grafenberger Allee 295, 40237 Düsseldorf with a corresponding declaration if you would like to exercise your rights of objection or withdrawal according to the GDPR.
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. When collecting data to make this website available, this is the case when a respective session has ended. The collection of data to make this website available is necessary for the operation of our website. In this regard, therefore, you have no option of objection.
In addition to the abovementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files stored on your hard drive and allocated to the browser you use, allowing the entity that places the cookie (in this case, us) to receive certain information. Cookies cannot run programs or transmit viruses to your computer. They are used to make the internet service more user-friendly and effective as a whole.
a. Transient cookies are automatically deleted when you close your browser. These especially include session cookies. These cookies store a so-called session ID which makes it possible to attribute various requests from your browser over the entire session. This makes it possible to recognize your computer when you return to our website. These session cookies are automatically deleted when you log out or close your browser.
b. Persistent cookies are automatically deleted after a predefined period of time which varies depending on the cookie. You can delete these cookies in your browser’s security settings at any time.
c. You can configure your browser settings at any time according to your wishes and, for instance, reject third-party cookies or all cookies as a rule. We inform you that if you reject cookies, you may not be able to use all features of this website to their full extent.
e. Flash cookies that are used will not be collected by your browser, but instead by your Flash plugin. We also use HTML5 storage objects that are saved to your device. These objects store the required data independently of the browser you use and have no automatic expiration date. If you do not want Flash cookies to be processed, you will have to install a corresponding add-on, such as “Better Privacy” for Mozilla Firefox ( https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend you to regularly delete your cookies and browser history.
In addition to purely informational use of our website, we offer various services that you can use if you are interested. To do so, you generally have to provide additional personal data that we use to perform the service in question and which are subject to the abovementioned principles of data processing.
To process your data in some cases we make use of external service providers. We select and engage these third parties carefully, bind them to follow our instructions and regularly monitor their performance.
Insofar as our services or partners have their registered offices in a country outside of the European Economic Area (EEA) we will inform you of the consequences of these circumstances in the description of the service.
If you have consented to the processing of your data, you may withdraw this consent at any time. This withdrawal will influence the allowability of processing your personal data after you have asserted this right against us.
If we base the processing of your personal data on our legitimate interests, you can file an objection to this processing. This is the case if processing is no longer required to implement a contract with you, which we will indicate under the following description of each aspect. When exercising this right of objection, we request you to provide the reasons why this processing should not be carried out as conducted by us. If you file a justified objection, we will review the factual circumstances and either stop or adjust data processing, or indicate to you our overriding legitimate interests that lead us to continue processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising by using the following contact details: Fashionette GmbH, Grafenberger Allee 295, 40237 Düsseldorf; datenschutz@fashionette.de.
If you would like to place an order in our online shop, in order to conclude the contract it is necessary for you to provide personal information that we require for handling your order. Mandatory information required for handling contracts are marked as such, other information is optional. We will process the data you provide in order to handle your order. To do so, we can transfer your payment details to our principal bank. The legal basis for this is Art. 6 (1) Sentence 1 (b) GDPR.
You can choose to create a customer account with us, where we will save your information for the next time you shop at fashionette. You may delete the data provided when creating an account at any time. The following information is saved as part of your customer account: Personal information (title, first name, surname, date of birth), address information (delivery and billing address for your orders in the last 13 months), order and payment information for the last 13 months as well as current order status of your orders.
If we have received your email address in connection with an order placed by you in the shop, we will use this email address to service emails such as order and shipping confirmations. The data you provide may also be used for direct marketing to inform you about our similar products or services, unless you have objected to this use. We of course clearly and unequivocally inform you that you have such a right of revocation every time you use your email address. Your email address will not be passed on to third parties. At any time you can revoke this consent to the use of your email address for advertising purposes in the future by clicking the >Unsubscribe < at the end of a recommendation message or by sending an email to service@fashionette.de. The legal basis is Art. 6 (1) Sentence 1 (f) GDPR.
Due to the provisions of trade and tax law, we are obligated to save your address, payment and order data for a period of ten years.
To prevent unauthorised access of your personal data by third parties, particularly financial data, the order process is encrypted using TLS technology.
Where applicable, to the extent permitted by law and with due regard for your legitimate interests pursuant to Art. 22 (2)(a) GDPR, Art. 6 (1)(a) and Art. 13 GDPR, we will perform an automatic risk assessment and control of the payment methods available to you, as well as a credit check together with our partners if necessary. If we provide advance performance, for instance for purchase on account, we may obtain a credit check from a credit agency based on statistical methods in order to preserve our legitimate interests. To this end we will transfer the personal data required for a credit check to a credit agency and use the information obtained regarding the statistical probability of payment default to make a balanced decision regarding the establishment, implementation or termination of the contractual relationship.
To this end, we transfer your information (first name, last name, date of birth, email address, shipping and billing address, basket data, selected services if relevant) to the companies Arvato Payment Solutions GmbH on Gütersloher Str. 123 in 33415 Verl and RatePAY GmbH on Franklinstraße 28-29, 10587 Berlin. Appropriate measures to safeguard your rights, freedoms and legitimate interests will be considered in this context. You have the option of presenting your perspective and contesting the decision by contacting the contact options described below. After full contract processing, your data processed for this purpose will be deleted unless you expressly consented to further use of your data or if we reserve the right to more extensive use of the data as legally permitted, regarding which we will inform you in this policy.
When providing your bank account information for payment purposes, we also compare these details with the return debit prevention pool (RPP) of ICD. This acts as a blacklist if irregularities arise when using the bank account details provided. Only the account number and sort code/BIC, and no other personal details, are compared.
As an alternative we also carry out an address and/or credit check with SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany, where appropriate. If a check is conducted with SCHUFA Holding AG, the following SCHUFA notice applies SCHUFA-Hinweis. Please find a relevant SCHUFA information sheet attached SCHUFA-Informationsblatt.
If you would like more information about the companies mentioned in this section, in particular the personal data that they store, then please contact these companies directly. We do not receive any detailed personal information as part of the credit check, only IBAN and BIC.
You may revoke your consent to transmit your details to the companies named in this section at any time. You only need to send a relevant email to datenschutz@fashionette.de. However, we would like to point out that this may mean that the only method of payment available to you is advance payment. The legal basis for this is Art. 6 (1) Sentence 1 (f) GDPR.
To ensure the high quality standards that we have for the security and protection of our online shop, we use technology from infoscore Tracking Solutions GmbH, Zollhof 11-15, 40211 Düsseldorf, Germany, that collects, stores and uses the details of end devices used on your visit to our website for the purposes of preventing fraud or misuse.
Your details required for contract processing (e.g. the item(s) purchased, name, address, email address, telephone number, date of birth, delivery address, payment type and bank details) are transmitted by us the companies Arvato Payment Solutions GmbH at Gütersloher Str. 123 in 33415 Verl and RatePAY GmbH at Franklinstraße 28-29 in 10587 Berlin, for the purposes of recognising and preventing fraud or misuse. Appropriate measures to safeguard your rights, freedoms and legitimate interests will be considered in this context. You have the option of presenting your perspective and contesting the decision by contacting the contact options described below. After full contract processing, your data processed for this purpose will be deleted unless you expressly consented to further use of your data or if we reserve the right to more extensive use of the data as legally permitted, regarding which we will inform you in this policy.
These details are collected, processed and used by Arvato Payment Solutions GmbH, Gütersloher Str. 123, 33415 Verl, Germany, in conjunction with a cookie (see more under Section 3) and/or a visitor ID, each of which may contain information about the end devices used during your visit to our websites and which probably may be recognised via the end devices used during future purchases. These details are automatically checked for indications of improper use of our online shop. Arvato Payment Solutions GmbH commissioned informa solutions GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany, and infoscore Tracking Solutions GmbH, Zollhof 11-15, 40211 Düsseldorf, Germany, as data processing providers, in accordance with Section 6 (1)(a) GDPR to implement risk assessment, and for the recognition and prevention of abuse.
If you hand over devices used during a visit to our online shop, any third parties to whom you leave devices that you have used to access our online shop must be informed of your consent, and you must ensure that they also consent to the measures described, or agree to avoid visiting our online shop with your devices.
You can revoke your consent to the storage, collection and use of your data from the end devices used at any time with effect from this point in time forward via the following link: http://www.infoscore-tracking-technology.de/optout/form/91116. The details of the end devices used will then no longer be used for the aforementioned purposes. However, we would like to point out that a withdrawal of this consent may limit the usage possibilities of our online shop.
When you consent to receiving advertisements, you also subscribe to our newsletter, by means of which we inform you of current offers. In addition to regular newsletters, we will also send you birthday mailings and customer surveys. We will also send you reminders about unordered goods. Information on articles in your shopping cart will be stored and automatically deleted by us in accordance with legal regulations. Our advertisements may be sent by email or by traditional postal mail. Your email address will not be passed on to third parties. The legal basis is Art. 6 (1) Sentence 1 (a) GDPR.
For subscriptions to our newsletter, we use the so-called double opt-in procedure as well as other forms of consent. Double opt-in means that we will send you an email after you subscribe to the email address you provided requesting you to confirm that you would like to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked. We also save the IP address you use, as well as the date and time of registration and confirmation. The purpose of this procedure is to confirm your registration and to resolve any potential misuse of your personal data.
The only mandatory information for receiving the newsletter is your email address. Entering additional separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending the newsletter. The legal basis for this is Art. 6 (1) Sentence 1 (a) GDPR.
You can withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare this withdrawal by clicking on the link provided in each newsletter email, or by sending an email to service@fashionette.de.
Please note that we analyse your user behaviour when mailing the newsletter. Our email communications may contain so-called hyperlinks containing random but unique identification numbers. We (or any external service providers that work for us, such as web analytics service providers) may collect and store these identification numbers when your computer accesses these links to retrieve additional information from our servers. The identification numbers in these links will not be linked to your name, address or other personally identifiable information, unless you have expressly allowed us to send you information specifically tailored to your interests. We use these links and information about your requests to track the use of our emails and website, and to track and measure the success of certain marketing activities. We use this information to improve our website and email newsletters, in particular by tailoring our information and offers to the individual interests and needs of each user. The legal basis for this is Art. Art. 6 (1) Sentence 1 (a) GDPR.
Email advertising without subscription to the newsletter and your right to object: If we have obtained your email address in connection with the sale of a product or service and you have not objected, we reserve the right to regularly send you offers via email about similar products in our range to those you have previously bought, on the basis of Section 107 (3) TKG. This serves to safeguard our overriding legitimate interests, when duly weighing the interests involved, in approaching our customers with advertising content. You may object to this use at any time by sending a message to the contact options described below or via a link provided for this purpose in the advertising email without incurring any costs other than the costs for transmission according to the basic rates.
Furthermore, for analysis of our website by econda (www.econda.de), anonymised data is collected and stored, and user profiles are compiled from this data using pseudonyms. Cookies may be used for this purpose to make recognition of an internet browser possible. Usage profiles will not be linked with personal data about the holder of the pseudonym. IP addresses are made unrecognisable immediately upon entry to prevent any allocation of user profiles to IP addresses. You can revoke your consent to this data collection and storage at any time with future effect at the following website: http://www.econda.de/econda/datenschutz/widerruf-datenspeicherung.html. The legal basis for this is Art. 6 (1) Sentence 1 (f) GDPR.
This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and make analysis of your use of the website possible. The information generated by the cookies regarding your use of this website (including your IP address) will be transmitted to a Google server in the U.S., where the information will be stored. Google will use this information to evaluate your use of the website, to produce reports on website activities for the website operator, and to provide other services related to the use of the website and of the Internet. Google will also transmit this data to third parties if necessary, provided that this is legally mandated or to the extent that third parties have been commissioned by Google to process this data. Under no circumstances will Google connect your IP address with other data from Google. By using this website you agree to the processing of data collected about you by Google in the manner previously described and for the purposes previously mentioned. You can prevent the storage of cookies (see Section 6) by changing your browser settings accordingly. However, we hereby inform you that in this case you may not be able to use all features of this website to their full extent. You can also prevent the collection of the data generated by the cookie concerning your use of this website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link. You can find more information about Google Analytics and privacy at: http://tools.google.com/dlpage/gaoptout?hl=de.
On this website, the web analysis service Hotjar collects and stores data to generate usage profiles using pseudonyms. This usage profile is used to analyse visitor behaviour and for the improvement and needs-oriented design of our services. Cookies may be used in this context. These are small text files stored locally on a visitor’s computer that make it possible to recognise the user when they visit our website again. Pseudonymised usage profiles will not be linked with personal data about the holder of the pseudonym without the separately granted express consent of the data subject. You can object to the collection and storage of data for web analysis at any time with future effect at https://www.hotjar.com/legal/compliance/opt-out.
On this website, the web analysis service New Relic collects and stores data to generate usage profiles using pseudonyms. This usage profile is used to analyse visitor behaviour and for the improvement and needs-oriented design of our services. Cookies may be used in this context. These are small text files stored locally on a visitor’s computer that make it possible to recognise the user when they visit our website again. Pseudonymised usage profiles will not be linked with personal data about the holder of the pseudonym without the separately granted express consent of the data subject. You can object to the collection and storage of data for web analysis at any time with future effect by following the instructions on this website: https://newrelic.com/termsandconditions/privacy.
On this website, the web analysis service Convert collects and stores data to generate usage profiles using pseudonyms. This usage profile is used to analyse visitor behaviour and for the improvement and needs-oriented design of our services. Cookies may be used in this context. These are small text files stored locally on a visitor’s computer that make it possible to recognise the user when they visit our website again. Pseudonymised usage profiles will not be linked with personal data about the holder of the pseudonym without the separately granted express consent of the data subject. You can object to the collection and storage of data for web analysis at any time with future effect at https://www.convert.com/opt-out/.
We use the online marketing program “Google AdWords” as well as conversion tracking within the framework of Google AdWords. Google conversion tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This means that a cookie for conversion tracking will be stored on your computer if you have clicked on an ad displayed by Google. These cookies lose their validity after 30 days and contain no personal data, so they cannot be used for personal identification.
If you visit particular pages of our website and the cookie has not yet expired, we and Google can see that you clicked on the ad and were forwarded to this website. Every AdWords client receives a different cookie. As a result, cookies cannot be traced across the websites of AdWords clients.
The information obtained using the conversion cookie serves to generate conversion statistics for AdWords clients that have opted for conversion tracking. Clients learn the total number of users that clicked on their ad and were forwarded to a website containing a conversion tracking tag. However, they do not receive any information that could allow users to be personally identified.
This website uses Channelpilot, an online marketing tool provided by Channel Pilot Solutions GmbH. This use occurs on the basis of Art. 6 (1) Sentence 1 (f) GDPR. Channelpilot uses so-called "cookies", text files that are stored on your computer and make analysis of your use of the website possible. The information generated by the cookies regarding your use of this website will generally be transmitted to a Channelpilot server in Germany, where the information will be stored. The IP address transmitted by your browser through Channelpilot will not be linked with other Channelpilot data. Additionally, Channelpilot only temporarily stores the IP address for a short period of time (generally 24 hours at most) and then makes it unidentifiable. This intermediate storage occurs exclusively to detect potential click fraud (bot detection).
On behalf of the operator of this website, Channelpilot uses this information to analyse the performance of connected online marketing channels such as idealo.de or Google Shopping. You can prevent the storage of cookies by changing the settings of your browser software accordingly; however, we inform you that in this case it may not be possible to use all features of this website to their full extent. You can also prevent the collection of the data generated by the cookie concerning your use of this website (incl. your IP address) as well as the processing of this data by ChannelPilot by exercising the opt-out option available at the following link: www.channelpilot.de/optout. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in the most recently used browser. If you delete the cookies in this browser, you will need to set the opt-out cookie again. You can find more information regarding data protection in connection with ChannelPilot at www.channelpilot.de/datenschutz.
We use this cookie to collect personal information about your buying behaviour and use of our online shop, as well to analyse the data we have already stored concerning you in order to send you tailored personal offers. The data collected by Rich Relevance are pseudonymous, but not personal or personally identifiable. You can find more information here: http://www.richrelevance.com/privacy/ (Seite auf Englisch). You can object to the use of data at any time with future effect at http://www.richrelevance.de/privacy/opt-out/. Your objection will be stored as a cookie without personal information.
-The date and time of the click in the cookie.
Emarsys eMarketing Systems AG (Stralauer Platz 34, 10243 Berlin; www.emarsys.com/de) is implemented to technically manage newsletter mailing and is an Austrian company with a registered office in Berlin that provides software and infrastructure for sending consent-based electronic messages. Emarsys is aware of its responsibility to recipients of such messages and has a zero-tolerance spam policy. If you have given your consent as outlined below, Emarsys will use the preferences collected through the pseudonymous user profile to determine the content and design of the newsletter, and will associate your email address with this user profile for the purposes of personalised newsletter mailing.
Furthermore, Emarsys offers various options for analysing how the mailed newsletter is opened and used, for instance how many users an email is sent to, whether emails are rejected and whether users have unsubscribed from the mailing list after receiving an email. However, this analysis only refers to groups and we will not use it for personal analysis. After registration, Emarsys will send you an email to confirm your registration (“double opt-in”). If you would not like to receive our newsletter anymore, you can unsubscribe at any time by clicking on the unsubscribe link in each mailing.
To display our Trusted Shops quality seal and Trusted Shops products for buyers after an order, the Trusted Shops trust badge is embedded on this website. This serves to safeguard our overriding legitimate interests, when duly weighing the interests involved, in optimal marketing of our services pursuant to Art. 6 (1) Sentence 1 (f) GDPR. The trust badge and the services it advertises are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When accessing the trust badge, the web server will automatically store a so-called server log file that contains information such as your IP address, date and time of access, volume of data transmitted and the provider receiving the request (access data) and will document this access. This access data will not be analysed; it will automatically be overwritten no later than seven days after the end of your visit to the website. Additional personal data will only be transmitted to Trusted Shops if you have given your consent, or if you decide to use Trusted Shops products after placing an order, or if you previously registered to use them. In this case, the contractual arrangement between you and Trusted Shops shall apply.

References: Art. 4
 Art. 6
 Art. 6
 Art. 22
 Art. 6
 Art. 13
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6