Source: https://de.opus-fashion.com/en/privacy
Timestamp: 2019-04-19 03:11:52+00:00

Document:
We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational website and of our content and services. Collection and utilisation of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or factual reasons and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 (a) of the EU Data Protection Ordinance (GDPR) serves as the legal basis for the processing of personal data.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 (d) GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 (f) GDPR serves as the legal basis for processing.
The data subject's personal data will be deleted or blocked as soon as the reason for storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Blocking or erasure of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
The data is also stored in our system's log files. This data is not stored together with other personal user data. This process is anonymised. It is not possible to draw any conclusions about you personally. The data you provide helps us to design and continuously improve your shopping experience in our online shop. For this purpose, user profiles are created using a pseudonym. A connection between the person behind the pseudonym and the collected usage data is not established. When this purpose is achieved, log data is deleted.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 (f) GDPR.
For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 (f) GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing the website, this will be undertaken once the respective session has ended.
Any data is to be stored in log files will be stored for seven days at most. Further storage is possible. In this case, the user's IP addresses will be deleted or distorted, so that identification of the accessing client is no longer possible.
Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there the user has no option to object.
Two types of cookies are used. Temporary cookies are automatically deleted when you close your browser (so-called session cookies). Other Cookies remain on your end device and enable us and our partner companies to recognise your browser on your next visit (persistent Cookies). This type of cookie allows you to be recognized when you return to the site. These serve to make our website more user-friendly, effective and secure. Some elements of our website require that the calling browser can be identified even after changing pages.
The user data collected in this way is pseudonymised via technical arrangements. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users' other personal data.
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). As a rule, the cookie-generated data regarding your use of this website will be forwarded to a Google server in the USA and stored there. However, if IP anonymisation is activated on our website, your IP address will be stored by Google in shortened form within member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. The full IP address will only be transferred to a Google server in the USA and shortened in exceptional cases.
Google will use the information generated by the cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. When you visit a Google Display Network website, Google uses a cookie to store a number in the user's browser. This number is used to record your visits. It is used to uniquely identify a web browser on a particular computer and not to identify a person. Users' browsers can then be assigned to a demographic category based on the websites they visit, such as a specific gender, age group or parental status. In addition, some websites provide demographic information that users share on certain websites, such as social networks. Google may also use demographic features derived from Google profiles. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
By using our website you agree to the processing of data relating to you and collected by Google, and to the processing of data as described above and for the purpose described above. You may refuse the saving of cookies by selecting the appropriate settings in your browser. We would like to point out, however, that doing this may mean that not all functions of this website can be used to their full extent.
You can also prevent the disclosure to Google and processing by Google of the data generated by cookies about your use of the website (incl. your IP address), by downloading and installing the browser plugin available via the following Link.
The Google Tag Manager manages website tags via an interface. The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not collect any personal data.
The online shop uses the online advertising program "Google AdWords" with the possibility of conversion tracking. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. This cookie expires after 30 days and is not used for personal identification.
Based on the data records collected by the conversion cookie, conversion statistics are generated from which information can be derived about the total number of users who clicked on an ad and were forwarded to a page in the online shop with a conversion tracking tag. However, the conversion statistics do not provide any information that can be used to personally identify an individual user.
We also use technologies that collect anonymous information about the surfing behaviour of website visitors for marketing purposes. In addition, we use technologies that can track in anonymous form how you use our website. The knowledge gained in this way serves exclusively to optimise the online shop.
Plugins are integrated on our website for the social network Facebook, provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise the Facebook plugin from the Facebook logo or the Like button on our site. For an overview of Facebook plugins, please check: http://developers.facebook.com/docs/plugins/.
When you visit our site, a direct connection between your browser and the Facebook server is established through the plugin. This enables Facebook to receive information that you have visited our site with your IP address. If you click on the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate visits to our site with your user account. Please note that, as the provider of this site, we have no knowledge of the content of the data that is transmitted to Facebook or of how Facebook uses this data. For more information, please see Facebook's data privacy statement at the following link.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 (f) GDPR.
The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1 (a) GDPR.
Analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service.
You can subscribe to a free newsletter on our website. The data from the contact form is transmitted to us when you subscribe to the newsletter.
During the registration process, your consent is obtained for processing data and reference is made to this data protection declaration.
If you purchase goods or services on our website and provide us with your email address, we may subsequently use it to send you a newsletter. In such a case, only direct marketing of our own similar products or services will be sent via the newsletter.
No data is disclosed to third parties in connection with data processing for sending newsletters. The data will be used exclusively for sending the newsletter.
The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, Art. 6 Para. 1 (a) GDPR.
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para. 3 of the Unfair Competition Law (UWG).
The subscription to the newsletter can be cancelled by the user at any time. A link to do this can be found in every newsletter.
On our website, we offer users the ability to register with the entry of personal data. The data is entered into an input screen, transmitted to us, and stored. This data shall not be transferred to third parties.
The legal basis for the processing of data is Art. 6 para. 1 (a) GDPR if the user has given his consent.
If registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 (b) GDPR.
The user's registration is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.
It is explicitly used to process orders, make deliveries of goods and process payments. Furthermore, it is used for the provision of services, e.g. creation and dispatch of newsletters, provided that you have consented to this.
This is the case for data collected during the registration process for fulfilment of a contract or implementation of pre-contractual measures, if the data is no longer necessary for fulfilment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
As a user you have the option of cancelling the registration at any time. You can change the data stored about you at any time.
If the data is required for the fulfilment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.
For the purpose of payment processing, we collect and process your card and transaction data.
Within the framework of concluding a purchase via our online shop, the user's consent to the processing of this data is obtained.
If the processing of the data serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 (b) GDPR.
Data processing for payment processing is for the fulfilment of a purchase contract with the user or is necessary for the execution of pre-contractual measures.
This is the case for the performance of a contract or for the execution of pre-contractual measures if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
As a user you have the ability to change the data stored about you at any time.
Your data will only be collected and used by us. This data will not be transferred to third parties. Selling your customer information is not part of our business. We will only forward your personal data within the framework of order data processing relationships. This serves to process the contract concluded with you. In this case, we remain the responsible body within the meaning of the BDSG, while the data processing body is a service provider that collects, processes and stores your personal data in accordance with the instructions of the online shop. The online shop reserves the corresponding control rights with regard to the respective service providers. This guarantees that your data will only be processed for the purposes on which the customer relationship between you and the online shop is based.
We have commissioned a reliable payment service provider, BS PAYONE GmbH, to process the payments (direct debit Germany, direct debit Austria, instant transfer, PayPal, credit card). For this purpose we will transmit the data mentioned in the preceding paragraph (VIII., paragraph 1) to BS PAYONE GmbH. BS PAYONE GmbH may use this data for the purpose of payment processing and pass it on to us. It is obliged to treat the information in accordance with German and European data protection laws. Detailed information on BS PAYONE GmbH within the meaning of Article 14 EU GDPR, i.e. information on the purpose of the business, data storage purposes, data recipients, the right of self-information, the right to cancellation or correction, etc. can be found under the following link.
If you wish to receive information about your personal data stored by the companies mentioned above, please contact them directly. We do not receive any detailed information about you as part of the credit assessment. Please understand that we reserve the right to exclude payment methods for first and subsequent orders depending on the credit rating and order amount.
The Online Shop will otherwise only pass on your data to third parties if we are legally obliged to do so or if such a passing on is necessary in order to assert and protect our rights as well as your rights. Please note that data transmitted via the internet (e.g. via e-mail communication) may be subject to security breaches. It is not possible to fully protect data from third-party access. The online shop guarantees that it will do everything technically and organisationally possible to make communication with you secure.
The legal basis for these transfers is Art. 6 para. 1 (b) and Art. 6 para. 1 (f) of the European Data Protection Regulation (EU GDPR). Transmission on the basis of these provisions may only take place if this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests of the fundamental rights or freedoms of the data subjects which require the protection of personal data. Detailed information on the ICD within the meaning of Article 14 EU GDPR, i.e. information on the purpose of the business, data storage purposes, data recipients, the right of self-information, the right to cancellation or correction, etc. can be found under the following link.
Data transmission takes place for the purpose of payment processing and serves the fulfilment of a purchase contract with the user or is necessary for the execution of pre-contractual measures.
Each data subject has the right of access under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to cancellation under Article 17 GDPR, the right to limitation of processing under Article 18 GDPR, the right of objection under Article 21 GDPR and the right to data portability under Article 20 GDPR, each under the legal conditions. The restrictions according to paras. 34 and 35 of the German federal data protection law (BDSG - new version) apply to the right to access and the right to erasure.
You can contact us via the e-mail address provided. In this case, the user's personal data that is transmitted along with the e-mail will be stored.
The legal basis for processing the data transferred in the course of sending an email is Article 6 paragraph 1 (f) GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 (b) GDPR.
The responsible body within the meaning of the BDSG is Simplicity trade GmbH, Heinrich-Hertz-Strasse 2, 59302 Oelde, represented by its Managing Director, Mr Stefan Leewe.
You may at any time and for no fee receive information about the data we have stored about you without stating any further reason. You can also have your data collected by us blocked, corrected or deleted at any time. Furthermore, you can revoke your consent to the collection and use of data given to us at any time without stating any reasons. Please contact the following e-mail addresses: datenschutz@opus-fashion.com or datenschutz@someday-fashion.com with the subject "Data Protection Objection". We will take care of it immediately. We will be happy to answer any further questions you may have about our data protection policy and the processing of your personal data.
You can request that the data controller confirm whether we will process personal data that concerns you.
(8) the existence of automated decision-making, including profiling, referred to in Article 22 paras. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
You have a right of rectification and/or completion with respect to the data controller if the personal data processed concerning you is incorrect or incomplete. The controller shall make the correction immediately.
(4)	if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.
Where the processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the European Union or of a Member State.
If the processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
(2)	You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR, and there is no other legal basis for the processing.
(6)	The personal data that concerns you was collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If the data controller has made the personal data concerning you public and is in accordance with Article 17 para. 1 of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
If you have exercised your right to have the data controller correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
(2)	the processing is undertaken using automated procedures.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6 para. 1 (e) or (f) of the GDPR; this also applies to profiling based on these provisions.
The data controller will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
(3)	is undertaken with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 (a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on behalf of the data controller, to state his or her own position and to challenge the decision.
The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 8
 Art. 9
 Art. 9
 Art. 78