Source: https://www.paul-hewitt.com/en/uk/privacy
Timestamp: 2019-04-25 14:36:25+00:00

Document:
We take the protection of your personal data during your visit to our website very importantly. We therefore observe the statutory regulations of data protection, in particular the General Data Protection Regulation (GDPR), the German Federal Data Privacy Act (FDPA), the German Telemedia Act (TMA) and the regulations of the individual states with regard to data protection.
The subject of data protection is ‘personal data’. This data refers to any information relating to an identified or identifiable natural person (data subject). This includes details such as name, postal address, email address or phone number, but also information associated with you, such as purchases made by you.
This website is intended solely for the use of persons aged 16 and above. Please keep this in mind when using our website. We must also point out that persons under the age of 16 will not be able to use our services, unless they have the consent of their parents or legal guardian. This shall apply in particular for the use of contact forms, ordering goods and registering for the newsletter.
Art. 6 (1) f) GDPR provides the legal basis for the processing of data. Our legitimate interest follows from the purposes for processing data listed above.
This data shall be stored separately from other data provided within the context of using our website. We shall not be able to link this data to a specific individual. This data shall be evaluated for statistical purposes. This data shall be evaluated exclusively for the purpose of optimising our website and shall be subsequently erased. They cannot be used to identify you.
Information obtained in connection with the specific terminal device is stored on the cookie. However, this does not mean that we are immediately aware of your identity.
a) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID that enables various requests from your browser to be assigned to the same session. Your computer can therefore be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
b) Persistent cookies are deleted automatically after a specified time, which may vary from one cookie to the next. You can delete the cookies at any time in your browser’s security settings.
c) You can configure your browser settings according to your own requirements and, for example, refuse to accept third-party cookies or all cookies. We must point out, however, that you may not be able to use all of this website’s functions in this case.
Functional cookies ensure that all of the functions of the website work properly. These cookies, for example, transmit information from page to page. They ensure that certain preferences stated by you for the use of the website (e.g. language preference) are stored. Prior consent for the use of these cookies is not required.
PAUL HEWITT would like to make the visit to our website as easy as possible for users. To do so, PAUL HEWITT evaluates how the visitors interact with the website. PAUL HEWITT uses Google Analytics and Shopwarefor this purpose. Please see the privacy policies of our partners for further information on the cookies used by these partners and the data that can be collected by them.
PAUL HEWITT uses marketing cookies to identify which marketing channels are used by the users to access the PAUL HEWITT online shop.
PAUL HEWITT uses this information to help you choose a product that best suits your needs and to offer you products in which you might be interested in the course of remarketing campaigns.
Please see the privacy policies of these partners for further information on the cookies used by these partners and the data that can be collected by them.
The PAUL HEWITT online shop uses retargeting technologies available from several providers. Retargeting technologies enable us to target ads to those users who have already shown interest in our shop and our products. A number of studies have shown that relevant advertising is more appealing for users than non-personalised advertising. In retargeting, the ads are displayed on the basis of an analysis of the user’s previous conduct on the Internet. No personal or pseudonymous data is stored. Retargeting technologies are used in compliance with the currently valid statutory data protection regulations. By disabling and/or deleting the existing cookies, you can prevent these ads from being displayed.
The data processed by these cookies is necessary for the specified purposes in order to safeguard our legitimate interests and the interests of third parties pursuant to Art. 6 (1) f) GDPR.
The information shall be stored separately from any other data provided to us. In particular, the data collected by the cookies shall not be linked with any other data relating to you.
Apart from using our website for purely informational purposes, we also offer a wide variety of services that you are welcome to use, if interested. For this purpose, you will usually have to provide personal data which we require and use to provide the respective service. Where additional voluntary data is required, such data is marked accordingly.
Our web shop may only be used by persons aged 16 and above or with the consent of a parent or legal guardian. By using our web shop, you thereby confirm that you are over 16 years of age or that a parent or legal guardian has given their consent.
If you would like to order something in our web shop, you can either enter the data required for the order once only for this particular order or create a customer account, thereby allowing your data to be stored for future purchases. If you create an account, we store your data for the purpose of fulfilling the contract and erase this data as soon as we are no longer legally obligated to store the data. Mandatory details necessary for performing the contracts are marked accordingly; other information is provided voluntarily.
The data provided by you when you create an account under [‘My account’] is stored on a revocable basis. Please contact customer service at shop[at]paul-hewitt.com to delete your customer account.
We use the data provided by you to process your order pursuant to Art. 6 (1) b) GDPR. For this purpose, we forward your address details to a shipping company contracted by us and, where required, your bank details are sent to our main bank. We shall erase this data once the contract has been fulfilled and the data retention obligations under tax and commercial law have expired.
The order process is SSL encrypted to prevent unauthorised access by third parties to your personal data, particularly financial data.
You may only provide us with your email address for contact purposes if you are aged 16 and above or if you have the consent of a parent or legal guardian. By using this function, you thereby confirm that you are over 16 years of age or that you have the consent of a parent or legal guardian.
If you have any questions, you can also contact us using a form provided for this purpose on the website. In this case, you are required to state your email address so that we can answer your questions. Other details (e.g. name and phone number) may be provided voluntarily and are marked accordingly.
Alternatively, you may contact us using the email address provided. In such cases, we store your personal data transmitted in the email.
Art. 6 (1) a) GDPR provides the legal basis for data processing for the purpose of establishing contact. Additionally, Art. 6 (1) b) GDPR provides the legal basis for processing data where the purpose of the email contact is to conclude a contract.
The personal data collected by us shall be erased after your question has been answered.
You may only register for the newsletter if you are aged 16 and above or if you have the consent of a parent or legal guardian. By registering for the newsletter, you thereby confirm that you are over 16 years of age or that you have the consent of a parent or legal guardian.
Where you have given us your express consent to do so pursuant to Art. 6 (1) a) GDPR, we shall use your email address to send you our newsletter at regular intervals.
For newsletter registration, we use the so-called double opt-in procedure. This means that, after you have provided us with your email address, we send a confirmation email to this address asking you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your registration will be automatically deleted. If you confirm that you would like to receive the newsletter, we will store your email address until such time as you unsubscribe from the newsletter. We store your data solely for the purpose of sending you the newsletter. Additionally, we also store the time of registration and confirmation, as well as the IP addresses used by you, to prevent any misuse of your personal data.
You may withdraw your consent to have the newsletter sent to you at any time. You can withdraw your consent by clicking on the link provided in each newsletter email, by way of the online contact form, by sending an email to shop[at]paul-hewitt.com or by contacting us using the contact details stated in the Legal Notice, without incurring costs other than the transmission costs charged at the basic rates. Your data shall not be forwarded to third parties.
The only mandatory information required to send you our newsletter is your email address. The provision of other separately marked data is voluntary and shall be used solely to personalise the newsletter. This data shall also be completely erased where consent is withdrawn.
The PAUL HEWITT website uses Userlike, a live chat software from the company Userlike UG (limited). Userlike uses ‘cookies’, text files, which are stored on your computer and enable personal conversation in the form of a real-time chat on the site. The data collected will not be used to personally identify visitors to our website and will not be merged with personal data about the bearer of the pseudonym.
Depending on the nature of the conversation with our employees, additional personal data may be generated in the chat, entered by you. The nature of this information depends on your request or the problem you have. All information that you share in the chat with our employees is done so voluntarily.
You may only contact us via the live chat if you are aged 16 and above or if you have the consent of a parent or legal guardian. By using this function, you thereby confirm that you are over 16 years of age or that you have the consent of a parent or legal guardian.
The legal basis for data processing in the context of the use of the chat function is your consent acc. Art. 6 (1) a) GDPR, which you can revoke at any time. Additionally, Art. 6 (1) b) GDPR provides the legal basis for processing data where the purpose of the email contact is to conclude a contract.
Besides processing your data for the purpose of completing your purchase, we also use your data in individual cases to communicate with you concerning the purchase of our goods and to recommend similar products from our range (e.g. watches, jewellery and accessories) that might be of interest to you.
Section 6 (1) f) provides the legal basis for transmitting these direct marketing measures following the sale of goods or services.
You may object to the use of your personal data for the aforementioned marketing purposes at any time, either for all measures or for individual measures, without incurring costs other than the transmission costs charged at the basic rates. Notification in text form (e.g. email, letter) to the contact addresses specified in 1 and 2 above shall be sufficient in that respect.
we engage a processor to process the data in compliance with Art. 28 GDPR.
Your personal data shall not be disclosed for purposes other than those specified above.
Pursuant to Art. 13 (2) e) GDPR, please note that the provision of your personal data to us is neither a statutory nor a contractual requirement. The fields marked as mandatory in the order process are, however, necessary for the conclusion of a contract. You are under no obligation to provide us with your personal data. Failure to provide personal data shall have no negative consequences for you.
pursuant to Art. 15 GDPR, to request access to the personal data that we have processed in relation to you.
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a general rule, you can address this complaint to the competent supervisory authority at your usual place of residence or work or at our place of business.
Provided that your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are reasons for this relating to your particular situation or where the objection refers to direct marketing. In the latter case, you have a general right of objection that will be implemented by us without reference to a particular situation.
Please address any queries and/or declarations concerning your above rights by email to datenschutz[at]paul-hewitt.com or to the address specified in Section 1 (2) above.
If you access a page of our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly to your browser by Facebook and integrated into the page. This integrated content allows Facebook to receive information that your browser has accessed the respective page of our website even if you do not have a Facebook profile or are currently not logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged into Facebook, Facebook can directly link your visit to our website to your Facebook profile. If you interact with plug-ins, for example, by pressing the ‘Like’ button or posting a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and is then visible to your Facebook friends.
If you access a page of the PAUL HEWITT website that contains such a plug-in, your browser establishes a direct connection to the Google servers. The content of the plug-in is transmitted directly to your browser by Google and integrated into the page. This integrated content allows Google to receive information that your browser has accessed the respective page of our website even if you do not have a Google+ profile or are currently not logged into Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there.
If you are logged into Google+, Google can directly link your visit to our website to your Google+ profile. If you interact with plug-ins, for example, by pressing the ‘+1’ button, this information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and is then visible to your contacts.
If you do not want Google to directly link the information collected on your visit to our website to your Google+ profile, you should log out of Google+ before visiting our website. You can also completely prevent Google plug-ins from being uploaded by installing add-ons in your browser, for example, the script blocker ‘NoScript’ (http://noscript.net/).
If you access a page of our website that contains such a plug-in, your browser establishes a direct connection to the Twitter servers. The content of the plug-in is transmitted directly to your browser by Twitter and integrated into the page. This integrated content enables Twitter to receive information that your browser has accessed the respective page of our website even if you do not have a Twitter profile or are currently not logged into Twitter. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there.
If you are logged into Twitter, Twitter can directly link your visit to our website with your Twitter profile. If you interact with plug-ins, for example, by pressing the ‘Twitter’ button, this information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and is then visible to your contacts.
If you do not want Twitter to directly link the information collected on your visit to our website to your Twitter profile, you should log out of Twitter before visiting our website. You can also completely prevent Twitter plug-ins from being uploaded by installing add-ons in your browser, for example, the script blocker ‘NoScript’ (http://noscript.net/).
If you access a page of the PAUL HEWITT website that contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is transmitted directly to your browser by Instagram and integrated into the page. This integrated content enables Instagram to receive information that your browser has accessed the respective page of our website even if you do not have a Instagram profile or are currently not logged into Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.
If you are logged into Instagram, Instagram can directly link your visit to our website to your Instagram account. If you interact with plug-ins, for example, by pressing the ‘Instagram’ button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and is then visible to your contacts.
If you do not want Instagram to directly link the information collected on your visit to our website to your Instagram profile, you should log out of Instagram before visiting our website. You can also completely prevent Instagram plug-ins from being uploaded by installing add-ons in your browser, for example, the script blocker ‘NoScript’ (http://noscript.net/).
In order to send you special offers that are currently relevant and interesting in your particular region, we pseudonymise your title, year of birth, country, postcode, (anonymised) hash value of the email address and your IP address and transmit this information to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe, Germany (Sovendus) in encrypted form (Art. 6 (1) b) GDPR). The IP address is used by Sovendus solely for purposes of data security and is usually anonymised after seven days.
If you click on a special offer, we will forward your name, your address and your email address to Sovendus in encrypted form (Art. 6 (1) b) and f) GDPR) for the purpose of preparing the personalised request for the special offer from the product supplier.
If you are interested in a coupon offer from Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe, Germany (Sovendus) and click on the coupon banner, we will forward your title, name and email address to Sovendus in encrypted form (Art. 6 (1) b) and f) GDPR) for the purpose of preparing the coupon. The IP address is transmitted first; this is used by Sovendus solely for purposes of data security and is usually anonymised after seven days. We also forward the order number, order value and currency, session ID, coupon code and timestamp to Sovendus in pseudonymised form for invoicing purposes.
Please see the online data protection information provided at www.sovendus.de/datenschutz, www.sovendus.at/datenschutz or www.sovendus.ch/datenschutzfor further information on the processing of your data by Sovendus.
The Trusted Shops Trustbadge is integrated into this website to enable the Trusted Shops trustmark, any customer reviews and the range of Trusted Shops products to be displayed to buyers following an order.
In balancing the various interests, this serves to safeguard our legitimate overriding interests in the optimal marketing of our product range. The Trustbadge and the services advertised by it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is retrieved, the web server automatically stores a so-called server log file which contains, for example, your IP address, the date and time of retrieval, the transmitted data volume and the requesting provider (access data). It also documents the retrieval. This access data is not evaluated and is automatically overwritten seven days after your visit to the website.
Other personal data shall only be forwarded to Trusted Shops if you decide, after placing an order, to use Trusted Shops products or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops shall apply.
This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics uses so-called cookies (i.e. text files) which are stored on your computer and enable an analysis of how you use the website. The information generated by the cookie about your use of this website is normally sent to a Google server in the USA and stored there. If IP anonymisation has been enabled on this website, however, your IP address will first be truncated by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activity and to provide the website operator with other services relating to website activity and Internet usage.
The IP address transmitted by Google Analytics from your browser will not be combined with any other data held by Google.
You can prevent the storage of cookies on your computer by adjusting your browser settings accordingly; we should point out, however, that in this case you may not be able to use all of this website’s functions to their full extent.
This website uses Google Analytics with the extension ‘_anonymizeIp()’. This allows further processing of the truncated IP addresses, thereby preventing any direct connection being established to a particular individual.
This website uses the map service Google Maps by way of an API. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The storage of your email address is required to enable you to use the Google Maps feature. This information is usually transmitted to a Google server in the USA and stored there. The provider of this website has no influence over the data transmitted.
Google Maps is used in the interests of ensuring that our website is visually appealing to the user and that the locations specified on the website are easy to find. This constitutes a legitimate interest within the meaning of Art. 6 (1) f) GDPR.
The PAUL HEWITT website can determine the geographic location of your device. The collection of the data serves only to provide you with information that could be interesting and relevant for you on grounds of your geographic location.

References: Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 13
 Art. 15
 Art. 77
 Art. 6
 Art. 21
 Art. 6