Source: https://www.toepfer-babywelt.de/en/data-protection
Timestamp: 2020-06-04 05:50:07
Document Index: 215784817

Matched Legal Cases: ['Art. 13', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Data protection: Töpfer
Privacy policy for this online offering and other information concerning the obligation to provide information pursuant to Art. 13 GDPR where personal data is collected from the data subject
This privacy policy (version: GDPR 1.0 of 23/05/2018) was created by:
Deutsche Datenschutzkanzlei Datenschutz-Munich Office – www.deutsche-datenschutzkanzlei.de
We, Töpfer GmbH, are the controller for this online offering and, as the provider of a teleservice, have to inform you of the nature, scope and purposes of the collection and use of personal data at the start of your visit to our online offering in a concise, transparent, intelligible and easily accessible form, using clear and plain language. You must be able to access the content of the information at all times. We are therefore obliged to inform you of what personal data will be collected or used. Personal data means any information concerning an identified or identifiable natural person.
The security of your data and compliance with data protection regulations is extremely important to us. The collection, processing and use of personal data is subject to the requirements of the European and national laws currently in force.
We want to show you how we handle your personal data and how you can contact us with the following privacy policy:
Telephone: +49 8374 934 0
Email: info@toepfer-babywelt.de
You can contact our data protection officer with any questions as follows:
Email: datenschutz@toepfer-gmbh.de
For better comprehensibility, no gender-specific differentiation is used in our privacy policy. For the purpose of equal treatment, corresponding terms apply to both sexes.
The meaning of terms such as “personal data” or its “processing” can be found in Article 4 of the EU General Data Protection Regulation (GDPR).
The personal data processed for the purposes of the website includes inventory data (e.g. name and addresses of customers), contract data (e.g. services used, names of clerical staff involved, payment information), usage data (e.g. websites of our online offering visited, interest in our products) and content data (e.g. entries in the contact form).
“User” covers all categories of persons affected by the data processing here. This includes, for example, our business partners, customers, prospective customers and other visitors of our online offering.
We guarantee that we only collect, process, store and use your data generated in connection with handling your enquiries – and only for internal purposes and to provide services requested by you or to provide content.
We only process the user's personal data in compliance with the relevant data protection regulations. The user's data is only processed if the following statutory permissions apply:
to provide our contractual services (e.g. processing of orders) and to provide online services
on the basis of our legitimate interests (e.g. interests in the analysis, optimisation and economic operation and security of our online offering within the meaning of Art. 6 (1) f. GDPR, particularly in reach measurement, the creation of profiles for advertising and marketing purposes, the collection of access data and the use of the services of third-party providers)
We would like to point out to you where the above lawful basis is set out in the GDPR:
Consent Art. 6 (1) a. and Art. 7 GDPR
Processing to perform our services and implement contractual measures Art. 6 (1) b. GDPR
Processing to meet our legal obligations Art. 6 (1) c. GDPR
Processing for the purposes of our legitimate interests Art. 6 (1) f. GDPR
Data is only transferred to third parties in accordance with legal requirements. We only give user data to third parties when this is necessary, e.g. for contractual purposes, or on the basis of legitimate interests in the economic and effective operation of our business.
If we use subcontractors to provide our services, we take suitable legal precautions and corresponding technical and organisational measures in order to ensure the protection of personal data in accordance with the relevant legal requirements.
Third countries mean countries in which the GDPR is not a directly applicable law. This generally covers all countries outside of the EU and the European Economic Area.
Data is transferred to a third country or an international organisation. It is taken into account here that appropriate/suitable safeguards exist and rights and effective legal remedies are available to you.
You can obtain a copy of the appropriate safeguards at the following link:
We adhere to the principles of data economy and data reduction. This means that we only store the data you have provided us with for as long as is necessary to fulfil the aforementioned purposes or as required by the various storage periods stipulated by law. If the respective purpose ceases to exist or following the expiry of the relevant periods your data is routinely blocked or erased in accordance with statutory requirements.
To this end, we have created an internal policy within the company in order to ensure this is done.
If you contact us by email, telephone, fax or via the contact form etc., you agree to electronic communication. In the course of contacting us, personal data will be collected. What data is collected when a contact form is used can be seen from the contact form itself. Your data is transmitted in SSL encrypted form. The information you provide is used exclusively for the purpose of processing the query and stored for possible follow-up questions.
We would like to inform you of the legal basis for this:
We use software to maintain customer data (CRM system) on the basis of our legitimate interests (efficient and quick processing of user queries). The system is operated by us in-house. Data is not transferred to any third parties.
Please note that emails can be read or changed without authorisation and unnoticed during transmission. Furthermore, we would like to draw your attention to the fact that we use software to filter unwanted emails (spam filter). Emails may be rejected by the spam filter if they have been wrongly identified as spam as a result of certain characteristics.
You have the right to obtain information about your stored data free of charge. On request, in accordance with current legislation, we will inform you in writing of what personal data we have stored about you. This also includes the origin and recipient of your data and the purpose of the data processing.
You have the right to have your data that is stored with us rectified if it is incorrect. You can request restriction of processing, e.g. in the event that the correctness of your personal data is disputed.
Furthermore, you can have your data blocked. So that any blocking of your data can be taken into account at all times, this data must be kept in a blocking file.
You can also request the erasure of your personal data if no statutory retention obligation exists. If such an obligation exists, we will block your data on request. If the applicable legal requirements are met, we will also erase your personal data without you having sent any request to do so.
You are entitled to request that we provide the personal data transferred to us in a format that enables transfer to another body.
You have the option of lodging a complaint with one of the data protection supervisory authorities.
Fax: +49 981 53 981300
The complaint form for Bayerisches Landesamt für Datenschutzaufsicht is available on the following link: https://www.lda.bayern.de/de/beschwerde.html
You have the option of withdrawing consent for the use of your data for internal purposes at any time with effect for the future. Just send an email to datenschutz@toepfer-gmbh.de. Such withdrawal of consent does not, however, affect the lawfulness of the data processing carried out by us until the date of withdrawal. This does not affect data processing with regard to any other legal basis, such as contract initiation (see above).
We take contractual, organisational and technical security measures in accordance with the state of the art in order to ensure that data protection regulations are complied with and in order to protect the data processed by us from accidental or intentional manipulation, loss or destruction or from access by unauthorised persons.
The security measures particularly include the encrypted transmission of data between your browser and our server. 128-bit SSL (AES 128) encryption technology is used for this. This includes your IP address.
Maintaining the confidentiality of your personal data
In order to maintain the confidentiality of your personal data stored with us, we have taken various measures for access control.
Maintaining the integrity of your personal data
In order to maintain the integrity of your personal data stored with us, we have taken various measures for transmission and input control.
In order to maintain the availability of your personal data stored with us, we have taken various measures for processing and availability control.
The security measures in use are continuously improved in line with technological progress. Despite these precautions, due to the insecure nature of the Internet we cannot guarantee the security of the transmission of your data to our online offering. For this reason, any data you transmit to our online offering is transmitted at your own risk.
People who have not yet reached the age of 16 are only allowed to provide us with personal information if they have the express permission of their parents or guardians or once they have reached the age of 16 or more. This data is processed in accordance with this privacy policy.
We use cookies to improve our online offering and to optimise the website's use for you, but also for advertising purposes. Cookies are small text files that are stored locally in the cache of your Internet browser and enable your browser to be re-associated. Cookies store information, such as your language settings, how long your visit to our website was or the data you entered there. This avoids you needing to enter all the necessary data again every time you use the website. In addition, cookies enable us to recognise your preferences and tailor our website to your areas of interest. Our online offering uses browser cookies.
Cookie control by the user
Most browsers accept cookies automatically. If you want to prevent cookies from being stored you can select “do not accept cookies” in your browser settings. You can find out how this works in detail in your browser manufacturer's instructions. You can delete cookies that are already stored on the computer at any time. However, please note that you may then experience reductions in the user-friendliness of this online offering.
Third-party providers set [further] cookies in our online offering by means of the insertion of editorial texts or advertising (third party cookies). The third-party providers are also subject to strict data protection requirements on the obtainability of personal data.
Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are thus deleted.
Persistent cookies are used for repeat visits and are stored in the user's browser for a certain period (usually for 1 year or longer). These cookies are not deleted when the browser is closed. This type is used for reusing a user's preference as soon as they return to the page.
Deactivate or remove cookies (opt out)
Every web browser offers options to restrict or delete cookies. You can find further information on this on the following websites:
We use the Matomo web analytics service (https://matomo.org/) to collect and store data for marketing and optimisation purposes. User profiles are created under a pseudonym from this data using cookies. The data collected with Matomo technology (including your anonymised IP address) is transferred to our server and stored for usage analytics purposes, enabling us to optimise our online offering.
The information generated by the cookie in the pseudonymous user profile is not used to personally identify you and is not combined with personal data about the person represented by the pseudonym. If you do not consent to the storage and analysis of this data from your visit to our online offering and want to object for the future, you can prevent the use of cookies and thus participation in tracking.
To do this, you can set your browser to inform you when cookies are set and you can decide whether to accept each one individually or can prevent cookies from being accepted in specific circumstances or in general. If you do not accept cookies, the functionality of our online offering may be reduced.
You have the option of objecting to the collection and analysis of data for marketing and optimisation purposes. To do this, you must click on the following checkbox in order to store the Matomo deactivation cookie in your browser.
We use the Adform tool from Adform A/S Wildersgade 10B, sal. 1 DK-1408 Copenhagen, Denmark on this website. It collects data for analysis, marketing and optimisation purposes, helping us to improve our marketing measures, website or app. The data collected is used by Adform to link advertising contacts and clicks on ads with any resulting use of our website. This way, we can also ascertain whether Internet users who have seen our ads visit our site or which products they are interested in. This helps us use our advertising budget more efficiently. We may also use the data collected to deliver advertising based on your interests (e.g. products viewed). Pseudonymous online identification numbers (online IDs) such as cookie IDs, IP address, device IDs, advertising ID/IDFA (e.g. on Android or Apple smartphones) are used for data collection. No clear user-related data such as name or address is stored in the process. All the IDs we use only enable your device or Internet browser to be recognised again. The data collected is not used to identify you as a user of our website personally without your separate consent. The legal basis for the data processing is Art. 6 (1a) and (1f) GDPR and section 15 (3) of the Telemedia Act (TMG). If you do not want Adform to collect your data, you can do the following:
You can find an explanation of how you can deactivate data collection on your computer or mobile device on the following links:
German version: https://site.adform.com/de/privacy-center/platform/widerrufsrecht/
English version: https://site.adform.com/privacy-center/platform-privacy/opt-out/
Facebook tracking pixel and Custom Audiences
We use the “Custom Audiences” remarketing feature of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This feature serves to present interest-based ads (“Facebook ads”) to users of this website when they use the social network Facebook. Facebook's remarketing pixel is used for this purpose on this website. When you visit the website, a direct link to the Facebook service is produced via this pixel. The fact that you have visited this website is reported to the Facebook server and Facebook attributes this information to your personal Facebook user account. This attribution only takes place if you have a Facebook user account. More information on Facebook's collection and use of the data and on your rights in this regard and the options for protecting your privacy are available in Facebook's privacy information on https://www.facebook.com/about/privacy/. Alternatively, you can deactivate the “Custom Audiences” remarketing feature on https://www.facebook.com/settings/?tab=ads#_=_. To do this, you must be logged into Facebook.
We use the tool The Trade Desk from The UK Trade Desk Ltd. (co. no. 8539108), 11th Floor Whitefriars Lewins Mead, Bristol, BS1 2NT, United Kingdom, which collects data for analysis, marketing and optimisation purposes, thereby helping us to improve our marketing measures and website. The data collected is used by The Trade Desk to link advertising contacts and clicks on ads with any resulting use of our website. This way, we can also ascertain whether Internet users who have seen our ads visit our site or which products they are interested in. This helps us use our advertising budget more efficiently. We may also use the data collected to deliver advertising based on your interests (e.g. products viewed). Pseudonymous online identification numbers (online IDs) such as cookie IDs, IP address, device IDs, advertising ID/IDFA (e.g. on Android or Apple smartphones) are used for data collection. No clear user-related data such as name or address is stored in the process. All the IDs we use only enable your device, your Internet browser or the app used to be recognised again. The data collected is not used to identify you as a user of our website personally without your separate consent. The legal basis for the data processing is Art. 6 (1a) and (1f) GDPR and section 15 (3) of the Telemedia Act (TMG). If you do not want The Trade Desk to collect your data, you can do the following:
You can find an explanation of how you can deactivate data collection on your computer or mobile device on the following link: http://www.adsrvr.org/
By means of remarketing technology from Google, users who have already visited our website are approached again through interest-based advertising on the pages of the Google partner network. Interests when visiting the website can be analysed using cookies and then used for relevant product advertising.
Where users have a Google account and have consented to Google associating their web and app browsing history with their Google account and to information from our Google account being used to personalise ads they see on the Web, Google will use data from its signed-in users together with Google Analytics data to build and define audience lists for cross-device remarketing. In order to support this feature, Google Analytics collects these users' Google-authenticated IDs. Google will temporarily join this personal data with our Google Analytics data in order to populate audiences.
More information and options for deactivating this ad placement are available on https://adssettings.google.com/u/0/authenticated?hl=en (“Ad settings” link, then “deactivation”).
We use Google Maps to display maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this online offering, you agree to the collection, processing and use of automatically collected data and data you enter (including the IP address) by Google, one of its representatives or third-party providers. The terms of service for Google Maps are available on the following link:
Data may be transferred to a third country or an international organisation. It is taken into account here that appropriate/suitable safeguards exist and rights and effective legal remedies are available to you.
Detailed information on transparency and options and the data protection rules are available in the data protection centre of google.com: https://www.google.com/intl/en/policies/privacy/?fg=1
We use the double opt-in process for people signing up to our newsletter. This means that after entering your email address, we send you a confirmation email to the email address you entered. The confirmation email asks you to confirm that you want to receive the newsletter. If you do not confirm this within 24 hours, your registration for the newsletter will be automatically deleted. If you confirm that you want to receive the newsletter, we store your email address until you unsubscribe from the newsletter. You can unsubscribe from the newsletter at any time by using the unsubscribe link in the newsletter or by sending an email asking to unsubscribe to toepferchen_reply@toepferweb.de. After you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately and will be included into a blocking file to ensure the opt out is respected.
Your email address is stored solely for the purpose of being able to send you the newsletter. Furthermore, we store your IP address and the time when you sign up and when you give confirmation in order to be able to prevent misuse of your personal data.
During newsletter tracking, user behaviour is collected in pseudonymised form. The pseudonymised data comprises: recipients, recipients minus bounces, recipients in queue, recipients skipped, unique unsubscribe rate, unique unsubscribes, bounce rate, bounces (of which hard and soft bounces), unique open rate, unique opens, open rate, opens, unique click rate, unique clicks, click rate, clicks, effective unique click rate, clicks for target audience segmentation.
To send the newsletter, we work together with an external service provider,
D-79106 Freiburg, Germany.
For the purpose of sending the newsletter, your personal data is transferred to Inxmail GmbH, which exclusively processes this personal data in accordance with our instructions.
We use RSS feeds to continuously inform you about the latest topics.
RSS stands for “Really Simple Syndication”. It is an electronic news format. In order to be able to use the feed, you need an RSS reader. Various RSS readers are available for all operating systems. Some browsers make it possible to use RSS feeds without it being necessary to install any further program.
Transfer of personal data for the purpose of order processing
The personal data we have collected is transferred to the transport company tasked with the delivery as part of the processing of the contract to the extent this is necessary for the delivery of the product. We transfer payment data to the instructed credit institution for the purpose of processing payments.
We reserve the right to amend our privacy policy from time to time so that it always meets the current legal requirements or in order to reflect changes in our services in the privacy policy. This could, for example, concern the introduction of new services. The new privacy policy then applies to your subsequent visit.
Every trademark or logo mentioned here is the property of the respective company. Trademarks and names are mentioned for information purposes only.
The above services of our online offering are not intended for citizens of the Russian Federation who are resident in Russia.
If you are a Russian citizen who is resident in Russia, you are hereby expressly informed that any personal data that you provide to us via this online offering is at your own risk and your own responsibility. Furthermore, you hereby declare that you agree that you will not hold us responsible for any failure to comply with the laws of the Russian Federation.
General Terms and Conditions for B2B Customers ǀ General Terms and Conditions for Retail Customers ǀ Terms and Conditions of Purchase ǀ Obligation to Provide Information ǀ Publication details ǀ Data protection Copyright © Töpfer 2020