Source: https://ivy-oak.com/pages/privacy-policy
Timestamp: 2019-04-24 08:02:43
Document Index: 598487705

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 7', '§ 7', 'Art. 21', 'Art. 6', 'Art. 26', 'Art. 15', 'Art. 16', 'Art.17', 'Art. 18', 'Art. 20', 'Art. 21', 'Art. 7', 'Art. 77']

Privacy Policy – IVY & OAK
We, IVY & OAK GmbH, Monbijouplatz 4, 10178 Berlin, Germany (Imprint), are the operator of the website www.ivy-oak.com. We are therefore responsible for the collection, processing and use of your personal data in terms of Data Privacy provisions, when visiting our website.
Our data protection officer can be reached under the above mentioned email-address as well as under datenschutz@ivy-oak.com.
We only send out Newsletter, E-Mails and further electronical messages with commercial purpose (hereby “newsletter”) only with your explicit opt-in or based on a legal allowance. As long as the contents are described appropriaptely during subscribtion-process, those are basis for your agreement.
Furthermore, our newsletter containt information about frequent offers and campaigns.
Subscribing to our newsletter works with the double-opt-in process. This means, after entering your email-address you will receive an email with a confirmation link. This is necessary to prevent spam.
The subscribtion is being logged in order to adhere to legal requirements. This includes logging the subscribtion and confirmation time as well as the IP-address. Furthermore your data changed within mailchimp will be logged.
Our newsletter is distriputed via “MailChimp”, a mailing-platform from the US-based provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
Both the email-addresses of our subscribers as well as the gathered data (as explained here) will be persisted on MailChimp-servers in the USA. Mailchimp uses those data for sending out and analysing the newsletter on behalf of IVY & OAK.
Furthermore MailChimp can use this data in oder to improve their own service, e.g. optimizing the technical distribution, displaying the email appropriatly or for commercial reasons do dinstiguish the country the receiver are localized. MailChimp is not providing the data to any third party.
We trust in the reliability of MailChimp’s IT and data security. MailChimp is certified under the US-EU-data protection agreement „Privacy Shield“
and hereby commits to comply with European data protection law. Furthermore we have signed a „Data-Processing-Agreement“. In this agreement Mailchimp commits to protect our customers’ data, process our data based on our data-protection law and particularly does not pass on the data to any third party.
You can view MailChimp’s data privacy statement here.
The newsletter contains socalled “web-beacons”. That is a pixel-sized file, which is called by the MailChimp server when opening the newsletter. With this call, technical information as to the used browser, your system, IP-address and point of time are stored. This data is used to improve the technical services and distribution quality.
Furthermore the information is stored, if and when the newsletter was opened by the user and which links have been clicked.
This information can indeed be related to a specific user, but we explicitly insist on not tracking a single user both IVY & OAK nor MailChimp. These information only help us to identify general user behaviour due to the usage of our newsletter and to improve the contents towards the optimal user experience.
There are scenarios, where we redirect the customer to webpages of MailChimp. E.g. our newsletter contains a link which allows the user to view the newsletter online whereas this page is hosted on MailChimp servers. Furthermore, users are able to correct their data, e.g. email-address, later. Also MailChimp’s data privacy statment is only available on their sites.
We want to point out, that MailChimp uses Cookies on their sites which allows the data collectio of personal data through MailChimp, their partners and used service providers (e.h. Google Analytics).
We do not have any impact on that process. You can get more information on MailChimp’s data privacy statement.
Additionaly we want to inform you about your right for withdrawal within the EWR (see http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/).
You can withdraw you subscribtion at any time. This includes the withdrawal of receiving IVY & OAK newsletters from MailChimp and being part of statistical analysis.
There is no separate withdrawal of statistical analysis and newsletter distribution.
You can request to end the subscription at any time without any additional costs other than the communications costs based on basic rates. To do so, please send us a written message (e.g. email, letter) to the contact details referred to in the beginning of our privacy policy. Additionally, you will find a cancellation link in each email that you receive from us.
Individual product recommendations & analyses
As a valued customer of IVY & OAK, we offer free information about your ordered products, as well as product recommendations via email. The information service, as well as our product recommendations are provided to every customer, whether they are subscribed to the newsletter or not. This is to provide you with information about our products and offers that suit your order history and might be of interest to you based on what your most recent purchases may have been. In doing so, we of course comply with all relevant legal requirements. You can request to unsubscribe from our information service and/or product recommendations at any time without any additional costs other than the communications costs based on basic rates. To do so, please send us a written message (e.g. email, letter) to the contact details referred to in the beginning of our privacy policy. Additionally, you will find a cancellation link in each email that you receive from us.
The processing here is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is hereby to promote our products. We store your data for this purpose until you object to its use.
To constantly improve your customer experience and to protect you against unwanted advertisements, we use both the information that is automatically generated, as well as the information you provide us with, to tailor our promotions individually to your interests. We solely use the information in its pseudonymous form, for example, receipt and read confirmation of emails, your order history, dates and times of website or product pages visits. The analysis and evaluation of this information allows us to send you tailored promotions that might be of interest to you, for example in the form of newsletters, product recommendation emails, postal advertisements or brochures in packages. If you do not wish to receive any personalised advertisements, you can request to stop receiving them or alternatively, to tailor them better to your interest, at any time without any additional costs other than the communications costs based on basic rates. To do so, please send us a written message (e.g. email, letter) to the contact details referred to in the beginning of our privacy policy. Additionally, you will find a cancellation link in each email that you receive from us and/or a direct contact address on the material to send us your request.
Based on the requirements of the general data protection regulation (GDPR) as of 25th of May 2018 we inform you, that your subscribtion of our newsletter is based Art. 6 Abs. 1 lit. a, Art. 7 DSGVO as well as § 7 Abs. 2 Nr. 3, bzw. Abs. 3 UWG.
Using MailChimp, applying statistical analysis as welll logging the subscribtion process are based on our legitimate interest as per 6 Abs. 1 lit. f DSGVO. Our interest goes towars using a both user-friendly as well as secure service provider, that adheres both to our commercial needs as well as our customer’s expectations.
We inform you, that you can withdraw future data processing of your personal data as per Art. 21 DSGVO at any time. Particularly, your withdrawal can be applied to direct mail.
When registering as customer we persist data only in the most necessary extent. Data processing happens for the purpose of improving your shopping experience as well es to optimize our fulfillment processes.
The data processing happens as per Art. 6 Absatz 1 lit. a DSGVO with your explicit consent. You can withdraw your consent at anytime without touching the legitimacy of the data processing based on your consent until your withdrawal. Your account will be deleted subsequently.
You can also create an account with your social profiles of Facebook and Instagram. If you register via Facebook or Instagram, we automatically create an account with the same email-address you are using for your appropriate social-account. If you agree to transfering the mentioned data, Facebook or Instagram will identify and redirect you to our page. With this, Facebook or Instagram will set a Cookie, which allows them to recognize you. Registering via Facebook or Instagram, data is transferred, which allows us to create an user account. You can withdraw this transfer
at any time within your Facebook or Instagram account. You have the possibility to remove the connection between your social-account and your account at IVY & OAK at any time. If you want to do so, please login into your social-account of Facebook or Instagram, go to settings, find and edit the connected apps.
By using the Instagram-Social-Login button, you agree to share the following data:
Public media and profileinformation
By using the Facebook-Social-Login button, you agree to share the following data:
Public profileinformation (username, age, profile picture and potentially further information)
Beyond this, we will pass your data on to third parties to the extent that this is necessary for processing the contract. We collaborate with external companies for the purpose of processing our various payment transactions: This is Paypal Deutschland GmbH, Am Marktplatz 1, 14532 Europaparc Dreilinden, when paying via Paypal and Klarna AB, Sveavägen 46, 111 34 Stockholm, Schweden when paying via Klarna. Klarna reviews and evaluates the data you provided and in case of legitimate interest performs a data exchange with other companies and credit rating agencies. Your personal data will be processed in accordance with applicable data protection law as described in Klarnas privacy statement.
Further third party providers, that are necessary for carrying out the contracts are: shipping provider, logistics fulfillment provider, service provider for processing our orders as well as webhoster. In any case we strictly adhere to legal requirements.
Persisted data limits to the necessary minimum.
Furthermore, we use cookies to evaluate the use of our website statistically and to optimize our offer to you (Sec. IV) and to provide you with interest-based information (Sec. V). These cookies, for example, identify you as registered user without logging in. These cookies are deleted automatically after a certain time (as illuded in the table below).
wpml_referer_url Saves the latest visitied page of the customer for language reasons 1 day
For the purpose of demand-responsive design and ongoing optimization of our sites we use Google Analytics, a web analytics service of the Google Inc., 1600 Amphitheatrae Parkway, Mountain View, CA 94043 USA. The information generated by the Cookie about your use of this website (including your IP address) is transferred to a server by Google in the USA and is stored there. IP addresses are anonymized to exclude all possibility of such association (IP masking). The information is used to evaluate use of the website, to compile reports on website activity and to provide further services associated with website and Internet use for the purposes of market research and needs-based design of these web pages. Your data will not in any case be associated with other data from Google.
We trust in the reliability of Google’s IT and data security. Google is certified under the US-EU-data protection agreement „Privacy Shield“
and hereby commits to comply with European data protection law.
This website uses Fullstory, a web site analysis service of Fullstory Inc., 818 Marietta Street, Atlanta, GA 30318, USA. Fullstory records user behavior on our website. Visitor recordings allow IVY & OAK to analyze them and then improve the visitors’ website experience. Fullstory stores and collects data in anonymous form using cookies. The tracking (that is, the collection of the data generated by the cookie and related to the use of the website) can be deactivated at any time. Please follow the instructions on https://www.fullstory.com/optout.
We trust in the reliability of FullStory’s IT and data security. FullStory is certified under the US-EU-data protection agreement „Privacy Shield“
Further information on the data privacy statement of FullStory can be found here.
3. Criteo data privacy
We use the technology of Criteo (Criteo GmbH, Unterer Anger 3, 80331 München) in order to track information regarding the browsing-behaviour of our customers for marketing reasons. This
happens in a purely anonymous way and cookies are set for this.
Criteo is able to analyse the browsing-behaviour and can then recommend appropriate products on ad-banners, when visiting other websites. Not in any case anonymous data can be used to
identify one single person. The data persisted by Criteo is only used to improve our marketing-offer. On any ad you can find a small “i” (for information). Clicking that link will lead you to
a page which explains the systematic and allows you to opt-out. For this, an opt-out cookie is set which prevents the ads to be displayed for you. No data is transferred to any third parties.
Further information on Criteo’s data privacy statement can be found here and < href=”https://www.criteo.com/de/privacy/”>here for opt-out options.
We use the online advertising program "Bing Ads" and conversion tracking as part of Bing Ads. Bing Conversion Tracking is an analysis service provided by Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA.
When you click on an ad placed by Bing, a conversion tracking cookie is placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification.
If you visit certain pages of our website and the cookie has not expired, Bing and we may recognize that you clicked on the ad and were directed to that page. Each Bing Ads customer receives a different cookie. Therefore, there is no way that cookies can be tracked through the Bing customer's website.
The information collected using the conversion cookie is used to generate conversion statistics for Bing customers who have opted for conversion tracking. This tells customers the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and the Bing Ads privacy policy can be found at: https://privacy.microsoft.com/de-de/privacystatement
We use the services of Ve Interactive DACH GmbH (Französische Straße 47, 10117 Berlin, hereinafter "Ve"). In providing its services, Ve collects personal data from users who visit our websites.
For this purpose Ve uses cookies and other similar technologies. Detailed information about the technologies Ve uses is available in Ve's cookie policy. A listing of the purposes for which Ve collects personal data is listed in Ve's privacy Policy. In general, through the use of cookies, Ve collects personal data from users, especially contact information and behavioral data. Ve uses this personal information to draw conclusions about the user's personal preferences and to personalize the user's web experience, for example by displaying personalized offers when visiting customer websites or similarly personalizing the customer's website to the user and displaying personalized advertisements when visiting customer websites or websites of third parties. Ve and we are jointly responsible for the collection of personal data according to Art. 26 GDPR. Details can be found in Ve's privacy policy.
We use the online advertising program "Google AdWords" and the conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies expire after 30 days, do not contain any personally identifiable information, and do not serve personal identification.
If you visit certain pages on our website and the cookie has not expired, Google and we may recognize that you clicked on the ad and were directed to that page. Each Google AdWords customer receives a different cookie. As a result, there is no way that cookies can be tracked through the AdWords customer's website.
If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found here.
7. Google Remarketing (Online Marketing)
This website uses the remarketing function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This feature is used to serve interest-based ads to visitors to the site as part of the Google advertising network. The visitor's browser stores "cookies", which are text files placed on your computer, that allow the visitor to be recognized when the visitor visits Web pages that are part of Google's advertising network. These pages may then present advertisements to the visitor that refer to content previously viewed by the visitor on the website visited using Google's remarketing function. According to its own information, Google does not collect any personal data during this process. However, if you do not want Google's remarketing function to work, you can always deactivate it by making the appropriate settings at https://www.google.com/settings/ads .
Further information on Google Remarketing and Google's privacy policy can be found at: https://www.google.com/privacy/ads/.
Pixels from Facebook, Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA ("Facebook") are integrated on our pages. This enables us to make our online offering more interesting and tailored to your needs. Thus, we are able to target those users with online advertising on the websites of our partners who have already shown interest in our shop and our products. For this purpose, a cookie is set with which interest data is collected using pseudonyms. On the basis of this information, you will be shown interest-related advertisements about our offers on the websites of our partners. This also enables us to record the effectiveness of Facebook advertisements for statistical purposes. No directly personal data is stored and no user profiles are merged with personal data about you.
You have the option of deactivating the collection of data for the purpose of personalised advertising under the following link: https://www.facebook.com/ads/website_custom_audiences. A cookie is then set, which permanently prevents the collection of data, unless you delete this cookie in your browser specifically or via the "Delete all cookies" function. You can repeat the objection at any time.
The collected data remains anonymous for IVY & OAK. This means that we cannot view the personal data of individual users. However, the collected data is stored and processed by Facebook. Facebook may link the data to the data on your Facebook account and uses the data for its own advertising purposes, in accordance with the Facebook data guidelines https://www.facebook.com/about/privacy/.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options to protect the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/ or at https://www.facebook.com/help/568137493302217.
If we transmit data to Facebook for comparison purposes, this data is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing it with the data encrypted by Facebook.
If you are a Facebook member and do not want Facebook to connect the data concerning your visit to our website with your member data already stored by Facebook, please log off Facebook before entering our website. You can also block Facebook social Plugins by using add-ons for your browser, like the “Facebook Blocker” or you use our opt-out feature for the duration of your session. Click on the following link: https://www.ivy-oak.com/optout-for-facebook/
We trust in the reliability of Facebook’s IT and data security. Facebook is certified under the US-EU-data protection agreement „Privacy Shield“
Right to be informed (Art. 15 DSGVO)
Right to correct or delete your data (Art. 16 und Art.17 DSGVO)
Right to restrict the usage of your data (Art. 18 DSGVO)
Right for data portability (Art. 20 DSGVO)
Right for withdrawing the processing of your data(Art. 21 DSGVO)
Based on Art. 7 Abs. 3 DSGVO you have the right to withdraw you initially provided consent at any time. This means, that we are not eligible to process your data from now on.
You furthermore have the right to complain about your data being processed by us at the data privacy authority (Art. 77 DSGVO).
To get information on your personal data, to have incorrect data corrected, to have data blocked or deleted or for further questions on the use of your personal data please send an e-mail to info@ivy-oak.com.
We use appropriate technical and organisational security measures to protect your stored personal data against manipulation, partial or complete loss and
against unauthorised access by third parties. Our security measures are continuously enhanced as new technology becomes available.
Through further development of the website or due to changes in legal or regulatory requirements, it might be necessary to make amendments to this privacy policy. The current privacy policy can always be retrieved and printed by you from the website www.ivy-oak.com.