Source: https://www.trustedshops.co.uk/imprint/?__hstc=34495550.c0be045d4ffc79d21d6977d802260948.1537342856283.1565964434522.1567521353933.12&__hssc=34495550.11.1567521353933&__hsfp=1839684036
Timestamp: 2020-01-18 09:25:09
Document Index: 127772168

Matched Legal Cases: ['§ 5', 'art. 6', 'art. 46', 'art. 6', 'Art. 6', 'Art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'art. 6', 'Art. 6', 'art. 6', 'Art. 6', 'art. 6', 'art. 6', 'Art. 6']

Imprint and data privacy information | Trusted Shops
Person responsible under § 5 of Germany’s Telemedia Act (TMG) for http://business.trustedshops.co.uk, www.etrusted.com, for the Facebook fan page at www.facebook.com/trustedshops.co.uk, for the linkedin profile at www.linkedin.com/company/trusted-shops-gmbh and for the Twitter profile at www.twitter.com/trustedshopsuk is:
E-mail: info@trustedshops.co.uk
Cologne Local Court, Germany,
Commercial Register (HRB) 32735
VAT ID No.: DE 812 947 877
Ulrich Hafenbradl (responsible), Dr. Carsten Föhlisch
Representative for minor protection, pursuant to Article 7 JMStV: Stefan Bodewig, jugendschutz@trustedshops.de
Trusted Shops GmbH is registered in the Brokers’ Register under Register Number [D-B6MZ-QKA67-38] as a licensed insurance agent pursuant to section 34d subsection 1 GewO (German Industrial Code) (www.vermittlerregister.info). The competent licensing and supervisory authority is the Cologne Chamber of Industry and Commerce, Unter Sachsenhausen 10-26, 50667 Cologne (https://ihk-koeln.de/). Trusted Shops GmbH is a member the Cologne Chamber of Industry and Commerce.
Professional regulations governing insurance brokerage:
– section 34d Gewerbeordnung (GewO): German Industrial Code
– sections 59 – 68 Versicherungsvertragsgesetz (VVG): German Insurance Contract Act
– Versicherungsvermittlungsverordnung (VersVermV): German Insurance Brokerage Ordinance
The professional regulations can be viewed and downloaded from www.gesetze-im-internet.de, the homepage operated by the German Federal Ministry of Justice together with juris GmbH.
Information on resolving disputes
Information on online dispute resolution pursuant to Article 14 para. 1 ODR Regulation: The European Commission provides a platform for online dispute resolutions (ODR) which can be accessed under http://ec.europa.eu/consumers/odr/. Consumers have the possibility to use this platform for resolving their disputes. We are ready to participate in extra-judicial dispute settlement proceedings before a consumer dispute resolution body.
Information on the resolution of disputes pursuant to section 214 VVG in conjunction with the VVG Regulation governing Conciliation Bodies
As insurance brokers, Trusted Shops GmbH is obliged by section 214 of the German Insurance Contract Act (VVG) in conjunction with the VVG Regulation governing Conciliation Bodies to participate in dispute resolution procedures. The competent body is as follows:
Postfach 080632, 10006 Berlin (Germany)
Communication via Email or contact form
You can visit our website without providing any personal information. With every visit of the website, the web server automatically saves a so-called server log file which, for example, contains the name of the requested file, your IP address, date and time of the call, the amount of data transmitted and the requesting provider (access data) and documents the call. For the purpose of a shorter loading time we also use a Content Delivery Network (“CDN”) for delivering our web assets via web servers of that CDN provider, who is working for us by means of an order processing agreement. Access data is also collected accordingly on the provider’s web servers.
These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. This serves according to art. 6 para. 1 sentence 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site. We use a CDN provider based in the USA. An adequate level of data protection is ensured.
etrusted.com/en: Raidboxes GmbH, Friedrich-Ebert-Straße 7, 41853 Münster, DE
trustedshops.co.uk: ANEXIA Internetdienstleistungs GmbH, Feldkirchener Straße 140, 9020 Klagenfurt am Wörtersee, Österreich
business.trustedshops.co.uk: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA
shop.trustedshops.com/en: Timme Hosting GmbH & Co. KG, Ovelgönner Weg 43, 21335 Lüneburg, DE
If a service provider is based in the USA, it is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. Further, we have agreed the application of EU standard data protection clauses with other service providers based in a country outside the EU or the EEA in order to provide suitable guarantees pursuant to art. 46 para. 2 lit. c GDPR.
Data collection and use for the use of Trusted Shops products
Registration for Trusted Shops Services for Online Shoppers
If you register for the Trusted Shops Services for Online Shoppers, your e-mail address will be processed.
Your data will be used as part of the performance of the contract according to Article 6 (1) sentence 1 letter b GDPR for the purpose of providing you with the Trusted Shops Services for Online Shoppers. As part of these services you can use the Trusted Shops buyer protection and the rating system.
If you register for the free-of-charge Trusted Shops Services for Online Shoppers after making a purchase in one of our member online shops by clicking on the appropriate button in Trustbadge, the current transaction will be secured through buyer protection. In both cases, personal data required for this purpose will be automatically collected from the purchase order data. This is necessary to protect our overriding legitimate interests as well as those of the online shop during the provision of the buyer protection for a specific purchase order and of transaction rating services in line with Article 6 (1) sentence 1 letter f GDPR.
Through the Trusted Shops rating system you can benefit from other customers’ reviews and after placing your purchase order with the member online shops you will receive automatic reminder emails about rating a transaction.
If you choose to use the Services for Online Shoppers you will also receive access to the Trusted Shops login area (My Trusted Shops). In the Trusted Shops member area, you may view your active buyer protection contracts, request a refund, rate your purchase orders or modify your reviews. In this process, your e-mail address serves as the identification and the username for signing in to My Trusted Shops. You can personalise your account by providing more detailed personal information such as your name, address and/or profile photo in the Trusted Shops login area or when posting your rating.
Thus, we will be able to display your ratings with that additional information, whereas some of your information will be displayed only with some of its parts being masked to protect your privacy. The public will be able to view a summary of all your ratings posted so far. Your email address will be not published, though. You may delete or change your personal data in My Trusted Shops at any time. There, you may also make appropriate settings to hide your profile from the public view.
Upon fulfilment of your purchase order or deactivation of your customer account, any further processing of your data will be restricted, and your data will be erased upon expiry of the retention period applicable under tax or commercial law, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by law, of which we inform you in this notice. You can deactivate your customer account at any time. For this purpose you can either send a message using contact details specified below or use the relevant function available in the customer account.
Use of the Trusted Shops buyer protection and rating services
The Trusted Shops buyer protection and rating services will be provided if you register for them in the member online shops after you make your purchase order or if you have already registered as an online shopper-member and the registration is made automatically as part of the contract handling.
The fact whether you have already registered as an online shopper to use the product will be automatically checked in advance on the basis of a neutral parameter – the email address hashed using cryptographic one-way function. Before transmission, the e-mail address will be converted into a hash value which cannot be decrypted by Trusted Shops. After a check for a match, the parameter will be automatically deleted.
To provide the buyer protection and warranty services we will need the name of the online shop from which you ordered the product, the purchase order date, the purchase order number, or your customer number (if you have one), the total order price, currency, the expected delivery date, the selected payment method, and your e-mail address. To send you email reminders about rating your purchase order, we only need your e-mail address and the purchase order number. In both cases, personal data required for this purpose will be automatically collected from the purchase order data.
Both the recognition and the automatic collection are necessary to protect our overriding legitimate interests as well as those of the online shop during the provision of the buyer protection for a specific purchase order and of transaction rating services in line with Article 6 (1) sentence 1 letter f GDPR.
Your data will be used as part of performing the contract in line with Article 6 (1) sentence 1 letter b GDPR to enable us to ensure that your purchase order is protected under buyer protection or warranty and to enable you to use the Trusted Shops system. Only if you want to make use of the warranty will we need additional information and personal data to check and process your request for a refund. In the process of registering your claim for a refund, we will collect your name, street address, telephone number, where appropriate, and your bank account number to make the refund. We will use these data solely for the purpose of handling your refund claim. After that, the data will be blocked from further use and finally erased once all retention periods under commercial and tax law expire.
Posting a rating
If you post a rating through the Trusted Shops rating system, we and the rated enterprise will need –on the basis of the contract for the use of the rating system and according to Article 6(1) sentence 1 letter b GDPR– your e-mail address to make sure that your rating is valid and credible and to contact you, only if actually needed, for the purpose of clarifying any complaints and verify the rating you posted. The e-mail address will be stored for this purpose together with the purchase order number and the posted rating and will be transmitted to the rated enterprise.
If you rate a product, we will also store the URL of the product and the product photo, the name of the product, the product’s SKU, GTIN and MPN and the manufacturer.
In order to ensure security of the rating system, prevent false or incorrect ratings and enable smooth and proper operation of the rating system, we will also collect information about your IP address the moment you post your rating. This serves to protect our overriding legitimate interests in preventing abuse and to ensure the protection of our systems in line with Article 6 (1) sentence 1 letter f GDPR. The IP address will be stored for up to 7 days in reference to the rating and then erased.
You can link your Trusted Shops buyers account to your Facebook or Google account.
Facebook, Inc. is based in the USA. Facebook is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
In case of a link between the accounts, you will only need to authenticate to Facebook or Google using your login information to be logged into your Trusted Shops customer account for buyers. For this purpose, you will be asked to consent to the transmission of the following data to Trusted Shops the first time you create a link:
The data Trusted Shops receives from Facebook or Google will be used to help you design your shopper profile on the basis of your consent pursuant to art. 6 para. 1 sentence 1 lit. a GDPR. Facebook receives the e-mail address from Trusted Shops the first time it is linked in order to identify you as a user, and afterwards only the ID that has been set as an authentication feature for you between the two systems. Facebook or Google does not receive any further data. You can unlink the accounts at any time and revoke the transfer of data with future effect by changing your settings on Facebook (here) or Google (here).
Registration for Trusted Shops membership for online merchants
To help you integrate Trusted Shops elements into your website and optimize our product offering for you and to manage customers and contracts, we use the Service Cloud and Marketing Cloud of Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany, a subsidiary of Salesforce.com Inc, The Landmark @ One Marketing, Suite 300, San Francisco, CA 94105, USA. Salesforce Marketing Cloud is a user database management service. The data are processed in Ireland and the USA. Salesforce.com has certified this service under the EU-US Privacy Shield scheme. For more information about the Salesforce Marketing Cloud and Service and the information we process, visit https://www.salesforce.com/de/company/privacy/.
Salesforce uses methods to analyze your use of Trusted Shops products, platforms, and advertising materials, such as cookie tracking, pseudonymized user profiles for advertising and analysis purposes.
We collect and process personal and behavioral data (e.g. product usage data). All in all, Salesforce only provides us with access to specific personal data for marketing purposes if you are logged in to our site. As a rule, you provide us with this data together with your order and within the scope of the business relationship. In doing so, we collect only those data that are required for the respective contractual purpose. This data is enriched in perspective with data collected through Salesforce, Inc.
The data processing serves on the one hand to process the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR and on the other hand to safeguard our legitimate interests in an optimised presentation of our offer and direct advertising in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which predominate within the scope of a weighing of interests.
Application for a job at Trusted Shops
If you apply for a position at Trusted Shops via this website, personal data will be collected in our application portal for the purpose of handling the evaluation process in accordance with art. 6 para. 1 sentence 1 lit. b GDPR.
This portal is operated by a service provider who processes the data collected on its servers on our behalf .
Credit check when registering for Trusted Shops membership for online merchants
We transfer the personal data required for a credit assessment to the following company(s):
D-41460 Neuss, Germany
E-mail advertising with registration for the personalised newsletter
If you register for one of our newsletters or provide your data in order to download a document free of charge from our website or our Facebook or LinkedIn presence, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter on the basis of your consent in accordance with art. 6 para. 1 sentence 1 lit. a GDPR. The newsletter with tips & tricks from the world of online commerce, events, competitions and our products, members and partners is aimed at your specific interests and provides you with relevant information on the respective topics.
By registering to receive the personalised newsletter, you also agree that we can track and evaluate your click behaviour (which links you click and open) within the newsletter. This is done by linking the information about your click behaviour with your personal user profile in our internal customer administration system. This link makes it possible to evaluate the above-mentioned information precisely in relation to your person and your presumed interests in order to improve the personalisation of the newsletter. We, thus, evaluate the information on the basis of your consent in accordance with art. 6 para. 1 sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After deregistration, we delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.
To display our ratings collected, the Trusted Shops Trustbadge is integrated on some of our websites.
Pursuant to art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard our legitimate interests in the optimal marketing of our offer that are overriding in the process of balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
For website analysis, this website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited (www.google.de), a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. Pursuant to art. 6 para. 1 sentence 1 lit f GDPR, this serves to safeguard our legitimate interests in an optimised presentation of our offer that are overriding in the process of balancing of interests. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened prior to transmission within the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data. After the end of the use of Google Analytics by us the data collected in this context will be deleted.
Google Ireland Limited is a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield.
Hubspot, Inc. is headquartered in the USA and is certified to the EU-US Privacy Shield. You will see the up-to-date certificate here. Based on this agreement between the USA and the European Commission, the latter has recognised entities certified to the Privacy Shield as those ensuring an adequate level of data protection. The data will be processed in Ireland and in the USA.
a. Use for web analytics purposes
For the purpose of website analytics, this website uses technologies provided by Hubspot, Inc. (www.hubspot.com) to automatically collect and store data from which user profiles are created using pseudonyms. This serves, according to Article 6 (1) sentence 1 letter f GDPR, to protect our legitimate interests in the optimised presentation of our offering that prove to be overriding following the balancing of interests. We may use cookies for this purpose. Once the purpose for the collection of data ceases to exist and Hubspot is no longer used, the data collected for that purpose are erased.
b. Use for the administration of user accounts and communications
On our website, we use Hubspot, Inc. also to administer user accounts.
When you contact us via a contact form or a chat and give us your e-mail address for this purpose, your user account will be created and the communication content will be stored to enable us to better handle this and future enquiries. If you do not give us your e-mail address, no user account will be created and no communication content will be stored.
In addition, we use Hubspot to send e-mails.
Overall, the processing of data serves, on the one hand, to perform the contract according to Article 6 (1) sentence 1 letter b GDPR and, on the other hand, to protect our legitimate interests –which prove to be overriding following the balancing of interests– in the optimised presentation of our offering, the optimal processing of your enquiries and the direct marketing in line with Article 6(1) sentence 1 letter f GDPR.
You may object to the collection and storage of data at any time with effect for the future, by storing an opt-out cookie on your end-user device or by using an appropriate browser plugin, e.g. Ghostery which suppresses the operation of the tool.
You can object to the collection and storage of data at any time with future effect by storing an opt-out cookie on your device or by suppressing the functionality of the tool with the help of an appropriate browser plugin, e.g. Ghostery.
Using Salesforce for web analytics
This website uses Salesforce.com, Inc. technologies for website analysis. (www.salesforce.com) Automatically collected and stored data from which user profiles are created using pseudonyms. Pursuant to Art. 6 para. 1 sentence 1 f GDPR, this serves to safeguard our legitimate interests in an optimised presentation of our offer, which predominate in the context of a balancing of interests. Cookies may be used for this purpose. After the expiry of our use of Salesforce, the data collected in this context will be deleted.
Headquartered in the United States, Salesforce.com, Inc. is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. You can object to the collection and storage of data at any time with future effect by storing an opt-out cookie on your terminal device or by suppressing the functionality of the tool with the help of an appropriate browser plugin, e.g. Ghostery.
Google Double Click is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield.
Google AdWords Remarketing and Google Analytics are services from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield.
Youtube is operated by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield.
For videos from Youtube, which are integrated on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of Google http://www.google.com/intl/en/+/policy/+1button.html.”.
Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”). Pursuant to art. 6 para. 1 sentence 1 lit f GDPR, this serves to safeguard our legitimate interests in an optimal presentation of our offer that are overriding in the process of balancing of interests.
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your mobile device. If you delete your cookies, you must click the link again. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in Vimeo’s data protection information at https://vimeo.com/privacy
Our presences on social networks and platforms serve a better, active communication with our customers and interested parties. We inform there about our products and current special offers.
When you visit our websites in social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from these data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your terminal. The visitor behaviour and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f. GDPR to protect our legitimate interests, which outweigh our interests, in an optimised presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective Social-Media platform operators for a consent (agreement) into the data processing, e.g. with the help of a checkbox, is the legal basis of the data processing art. 6 exp. 1 lit. a GDPR.
If the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has adopted a decision on appropriateness for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed at https://www.privacyshield.gov/list
Pixel of the VG WORT
On some of our websites the pixel of VG WORT is integrated, via which we record the page accesses in order to report them to the Verwertungsgesellschaft Wort (VG Wort). This serves the purpose of enabling our authors to participate in the distributions of VG WORT and is based on our legal obligation to ensure the legal remuneration for the use of copyrighted works pursuant to Section 53 UrhG in accordance with art. 6 para. 1 sentence 1 lit. c GDPR.
In other cases, requests for evaluation are sent as consideration for free membership and thus as an integral part of the membership contract. In these cases, data processing is necessary for the fulfilment of the contract and is therefore based on Art. 6 para. 1 sentence 1 lit. b GDPR.