Source: https://www.shopware.com/en/privacy/
Timestamp: 2019-08-22 21:09:40
Document Index: 439639732

Matched Legal Cases: ['Art. 13', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 88', '§ 26', 'Art. 6', 'Art. 7', '§ 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', '§ 34', 'Art. 77', '§ 19']

Privacy | Footer | Shopware (EN)
Data protection information according to Art. 13 and 21 GDPR for the website of shopware AG
We, the shopware AG, take the protection of your personal data and the legal obligations that serve to ensure this protection very seriously. The legal provisions require comprehensive transparency in all issues regarding the processing of personal data. Only when the processing is traceable for you as the person concerned (data subject), you can be deemed to be sufficiently informed about the intention, purpose and scope of the processing. That is why our Privacy Policy explains to you in detail which so-called personal data we process when you use the website www.shopware.com or any other Webpages that refer to it (see definitions below 2.).
“Controller” in terms of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz – German Federal Data Protection Act (BDSG) as well as other data protection regulations is:
Please be aware that you may be redirected to other webpages via links on our website which other pages are not operated by us but by third parties. We either clearly mark such links or you can recognise them by the change of the URL in your browser. We are not responsible for compliance with the applicable data protection regulations and secure handling of your personal data by third parties operating such other webpages.
When you access our website and use it for mere information purposes, e.g. without using additional functions or features such as contact forms or social media plugins, we automatically collect personal data. We thereby collect the following information: IP address of your terminal device, the date and time when the website was accessed, the name of the requested file, the amount of data transferred and the requesting provider. This information is transferred by your browser unless you have configured it in such a way that the information transfer is prevented.
The personal data is stored for a period of 4 weeks. We do not combine the personal data with other data sources. The data is only disclosed or transferred to third parties if and to the extent this is necessary for operating our website. For such purpose, the personal data is transferred to our Hostprovider. It is not intended to transfer personal data to a third country or an international organisation.
Google CDN is used for modern design purposes and to optimise the loading speeds of our website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 Letter f DSGVO.
When you access our website, a plug-in is loaded to enable customized website design and easier networking which includes a so-called “Share” button. This button is made available by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). When you access our website, your browser loads the Twitter code required for this. For such purpose, the browser you use must establish a connection to the Twitter servers. Twitter thereby becomes aware that our website was accessed from your IP address. At the same time, Twitter can place cookies on your terminal unless you have forbidden the use of cookies in your browser settings, or Twitter can read cookies.
We use the Twitter plug-in to provide customized website design and to enable you to quickly display or comment individual parts of our website in your Twitter account. This is a legitimate interest in terms of Art. 6 subs. 1 f) GDPR.
We collect your IP address to enable data transfer to Twitter. You are not obliged to provide this personal data; however, if you do not provide this data, you will not be able to use the plug-in.
If you do not want Twitter to allocate the personal data collected via our website to your Twitter account, you must log out from Twitter before you visit our website. The Twitter Privacy Policy is available at https://twitter.com/privacy/.
Parts of our website use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, ("YouTube") to display video content. When you access the relevant pages, your browser loads the YouTube code required to view the video. To do this, the browser you are using must connect to YouTube's servers. This will let YouTube know that your IP address has been used to access our website. At the same time, YouTube may place cookies on your end device unless you have prohibited the use of cookies in your browser or read cookies.
YouTube plug-ins are used for the purpose of making our website appealing and to enable the display of video content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 letter f DS-GVO.
Your IP address is collected by us to enable transmission to YouTube. You are not obliged to provide this personal data, but it is not possible to use the affected parts of our website without providing it.
If you do not want YouTube to associate the personal data collected through our website with your YouTube account, you must log out of YouTube before visiting our website. For more information about YouTube, please visit https://www.youtube.com/intl/de/yt/about/.
YouTube's Privacy Policy is available as part of Google's Privacy Policy at https://policies.google.com/privacy.
Your IP address is collected by us in order to enable the shortening and then transmission to Google. You are not obliged to provide this personal data, a use of our website is possible without the provision. You can prevent the provision of this personal data by installing the AddOn under https://tools.google.com/dlpage/gaoptout?hl=en.
Further information on Google Analytics can be found at http://www.google.com/intl/de_ALL/analytics. You can find Google's data protection declaration at https://policies.google.com/privacy.
We use the analysis tool etracker Analytics to create usage profiles by using pseudonyms. This service is offered by etracker GmbH (Erste Brunnenstraße 1, 20459 Hamburg). Etracker Analytics uses cookies that are stored on your terminal device, unless you have prohibited the use of cookies in your browser and which enable an analysis of your use of the website.
The use of etracker Analytics is used to analyse visitor behaviour and is used to optimize our website economically and to design it in line with requirements. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR.
If you do not want etracker Analytics to store data about your use of our website, you can object to its use. For this purpose, Etracker Analytics offers a solution with which you can make an opt-out declaration with a single click and thus prevent being covered by analyses by etracker Analytics in the future. By using the opt-out link at http://www.etracker.de/privacy?et=jLs, a cookie is set for exclusion from the etracker analytics tool.
Google Adwords Conversion Tracking is used for the purposes of economic optimization, tailoring our website to your needs, and correctly billing you for advertising campaigns that we run. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 Letter f DS-GVO.
If you do not wish to participate in the tracking procedure, you can also refuse to set a cookie as required for this purpose - for example by setting your browser so that the automatic setting of cookies is generally deactivated. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com".
Google Remarketing services are integrated into our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This technology is used to re-address users who have visited this site through targeted advertising on the pages of the Google Partner Network. The integration of Google Remarketing thus allows us to create user targeted advertising and display interest-relevant advertising to the Internet user.
Google Remarketing places a cookie on the visitor's terminal. When the cookie is set, Google is able to recognize the visitor to this website when he or she subsequently visits Internet pages that are also members of the Google advertising network. Each time a website is called up on which Google Remarketing services have been integrated, the Internet browser of the person concerned automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, e.g. IP address, surfing behaviour, etc., which Google uses, among other things, to display advertisements relevant to your interests.
This personal data is processed for the purpose of optimising our offers and individualised advertising. This is also our legitimate interest, which is why processing is permitted under Art. 6 Para. 1 Letter f DS-GVO.
If you do not wish to participate in the tracking procedure, you can also refuse to set a cookie as required for this purpose - for example by setting your browser so that the automatic setting of cookies is generally deactivated.
For more information and to review Google's privacy policy, please visit https://policies.google.com/privacy.
4.9. Contact form / Email contact
If you use the contact forms (e.g. for easy contact, to become a partner, to get a support overview, to contact Enterprise or to request a Shopware demo) on our website or write us an e-mail, we will process the personal data you provide there. This information is transmitted by your browser or e-mail client and stored in our information technology systems. The processing of this personal data is necessary for answering your request. In addition, your IP address and the date and time of the contact request are stored when you write us an e-mail.
The date processing serves the purpose of answering your inquiry and to prevent misuse of the contact form and to guarantee the security of our information technology systems.
The personal data will be stored for as long as it is necessary to answer your enquiry. Should your enquiry lead to a later conclusion of the contract, it will be stored as long as this is necessary to carry out pre-contractual measures or to fulfil the contract. Thereafter, the personal data is routinely deleted. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but it is not possible to use the contact forms or send an e-mail without providing it.
4.10. Setting up and using your personal Shopware account and forum account
You can create your personal Shopware account on our website (account.shopware.com) or register in our forum. If you do so, your browser will transfer the personal data which you enter there to us and we store it in our information technology systems. In addition, we store your IP address and the time of registration. When you log in to your personal Shopware- account or your forum account, our website places cookies on your terminal to enable you to stay logged in even if you have to load the website anew in the meantime.
The processing of the personal data you have entered serves to allocate future usage activities such as order placing or contact inquiries or blog posts to your customer account. These processing activities are lawful because you have consented to the processing according to Art. 6 subs. 1 a) GDPR. Moreover, the opening of a personal Shopware- account is a prerequisite for placing orders in our online shop, the processing is also necessary for the performance of the contract according to Art. 6 subs. 1 b) GDPR. It is necessary to store your IP address and the time of registration to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR
The personal data you enter will be stored until your personal Shopware account or your forum account with us is terminated, but in any case as long as necessary to fulfil the contract. The cookies lose their validity when you log out, otherwise after 28 days at the latest. We do not combine this personal data with other data sources. Data will only be passed on to third parties if this is necessary for the operation of our online shop. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, however, the establishment or use of the personal Shopware account and the forum account "and thus an order in our online shop and use of our blog, is not possible without the provision.
4.11. Online shop (store.shopware.com)
Our website includes an online shop. When you add products to your shopping cart, our website places cookies on your terminal to enable you to continue the ordering process even if you have to load the website anew in the meantime. When you place an order, your browser also transfers to us the personal data which you have entered in the order form and which are then stored in our information technology systems. Your IP address and the time of your order will be stored, too.
The processing of the personal data entered by you serves the purpose of an order to be able to carry out. These processing activities are lawful because they are necessary for the performance of the contract according to Art. 6 subs. 1 b) GDPR. The storage of your IP address and the time of your order serves to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.
The personal data you enter will be stored for as long as necessary to fulfil the contract. We do not merge this personal data with other data sources. Data is only passed on to third parties if this is necessary to fulfil the contract (e.g. to payment service providers, IT service providers, mail order companies). A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, however, an order in our online shop is not possible without the provision.
4.11.1. Contact form to initiate contact with the manufacturer (shopware Store)
On our website you have the opportunity to contact the manufacturer of a product that is available in our store via an embedded contact form. Should you choose to do so, you need to give the following data: Firm, contact person, phone number, E-Mail, domain, and comment if necessary. When you enter this data into the form and then press the ‘Send’ button the data will be transmitted directly to the manufacturer’s server and will be processed there. We do not process any of your personal data on our server.
Information about the purpose and the scope of the data collection, the further processing and use of the data by the individual manufacturer can be taken from their current data protection guidelines.
You can subscribe to our newsletter on our website. If you do this, the personal data you provide during registration will be transmitted to us through your browser and stored in our information technology systems. Your IP address and the time of registration will be stored, too.
The processing of the data which you have entered is used to send the newsletter. These processing activities are lawful because you have consented to them according to Art. 6 subs. 1 a) GDPR. The storage of the IP address and the time of registration serves as proof of your consent, to which we are obliged pursuant to Art. 6 subs.1 c) GDPR.
4.13. Request for advertising material (e.g. free whitepapers)
On our website, you can request the supply of advertising material. If you do so, your browser will transfer to us the personal data you have entered in your request and we will then store this data in our information technology systems. Your IP address and the time of your request will be stored, too.
The processing of the personal data which you have entered serves to send you the requested advertising material. These processing activities are lawful because the processing is necessary for taking steps prior to entering into a contract according to Art. 6 subs. 1 b) GDPR, and answering your request is a legitimate interest for us according to Art. 6 subs. 1 f) GDPR. The storage of your IP address and the time of your request serves to ensure the security of our information technology systems. This is at the same time our legitimate interest which renders the processing permissible according to Art. 6 subs. 1 f) GDPR.
The personal data which you have provided to us will be stored as long as this is necessary for sending you the advertising material resp. for preparing the offer/quotation or, if a contract should be concluded subsequently, for performing the contract. The data is then routinely deleted. We do not combine this personal data with other data sources. The data is only transferred to third parties if and to the extent this is required for the performance of the contract (e.g. to Carrier). It is not intended to transfer the data to a third country or an international organisation. You are not obliged to provide this personal data; however, if you do not provide this data, we cannot supply you with advertising material or prepare an offer/quotation for you.
4.14. Registration for our Shopware User Group meetings
You can register on our website for the Shopware User Group meetings we offer. If you do this, the personal data you provide during registration will be transmitted to us through your browser and stored in our information technology systems. We also store your IP address and the time of registration.
The processing of the personal data entered by you serves the purpose of preparing and conducting the Shopware User Group meeting in which you would like to regularly participate. This processing is legal because it is necessary for the performance of the contract in accordance with Art. 6 subs. 1 b) GDPR. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also in our legitimate interest, which is why processing is permissible under Art. 6 subs. 1 f) GDPR.
The personal data provided by you will be stored until you refrain from participating regularly in the Shopware User Group meeting and inform us of this. We do not combine this personal data with other data sources. A data transfer only takes place, as far as this is necessary for the execution of the Shopware User Group meeting (e.g. to cooperation partners, who provide the premises). A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but participation in the Shopware User Group meetings is not possible without the provision.
4.15. Application form
You have the possibility to send us an application online via our application form. In the course of your online application, personal data will be collected and processed by us for the purpose of carrying out the application procedure. Only the data relating to your application that you provide to us will be stored (in particular master data; communication data; if you also provide us with: certificates, additional qualifications, CV, desired salary, earliest possible starting date, any messages and content relating to documents uploaded by you). As soon as the form is sent, the information will be forwarded to us. If you expressly consent to this, the data will also be processed for consideration in future application procedures with us or our subsidiaries that match your application.
The legal basis for the application procedure is Art. 88 subs. 1 GDPR in connection with § 26 subs. 1 s. 1 BDSG, for applications to subsidiaries and for storage for future application procedures Art. 6 subs. 1 a) GDPR in connection with Art. 7 GDPR, § 26 subs. 2 BDSG. Your data will not be passed on.
We store your data until the end of the application process. Three months later, data on unsuccessful applications will be deleted. This also applies if you revoke your consent. If you expressly consent to this, we will store your data for up to two years, after which the data will be deleted if the application was unsuccessful. This also applies if you revoke your consent. If the data is passed on to subsidiaries with your consent, the respective storage period also applies to them. Your personal data will not be transferred to a third country or an international organisation. You are not obligated to provide this personal data, but it is not possible to process your application without it.
4.16. Blog with comment feature (forum.shopware.com)
If you register in our forum, you can comment on a blog post on our website. If you do this by clicking on the button "Send comment", the personal data (name, e-mail address, Website) provided by you will be transmitted to us by your browser and stored in our information technology systems. Your IP address and the time of sending the comment will also be saved.
The processing of the personal data you have entered serves the purpose of presenting your comment on our website. Such processing constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR in order to verify the origin of the comment. The storage of the IP address and time of submission of the comment serves to guarantee the security of our information technology systems. This is also a legitimate interest under Art. 6 subs. 1 f) GDPR.
The personal data you enter will be stored for as long as it is necessary to display the comment. We do not combine this personal data with other data sources. Data will not be passed on to third parties. A transfer to a third country or to an international organisation is not intended. You are not obliged to provide this personal data, but it is not possible to make a comment without it.
This website uses the web analysis service Hotjar of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
With this tool, movements on our website can be tracked (so-called heatmaps). For example, you can see how far users scroll and which buttons users click and for which frequency. It is also possible to get feedback directly from the users of the website. This provides us with useful information to make our website even faster and more customer-friendly. The above analysis is based on our legitimate interests for optimization and marketing purposes and the design of our website in accordance with Art. 6 subs. 1 f) GDPR.
We take care to protect your personal data when using Hotjar. This way we can only see which buttons are used, or how far they are scrolled. Parts of the website in which personal data of you or third parties is displayed or entered are automatically hidden by Hotjar and are therefore at no time comprehensible.
Hotjar provides every user with the option of using a "Do Not Track Header" to prevent the use of Hotjar, so that no data about the visit of the respective website is recorded. This setting supports all common browsers in current versions. For this purpose, your browser sends a request to Hotjar to deactivate the tracking of the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track Header" for each of these browsers/computers separately.
On our website we use the marketing function of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter "LinkedIn"), the so called LinkedIn Insight Tag. Each time you visit our website, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. LinkedIn Insight Tag enables us to analyse the success of our campaigns within LinkedIn or to identify target groups for them based on user interaction with our website. If you are registered on LinkedIn, it is possible for LinkedIn to associate your interaction with our website with your user account.
The LinkedIn Insight Tag is used for the purpose of personalizing our website. This constitutes a legitimate interest within the meaning of Art. 6 subs. 1 f) GDPR. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).
For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy. An opt-out option is available here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
4.19. Facebook Custom Audiences with Facebook Pixel
We use the remarketing function "Custom Audiences" of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Custom audiences enable us to address the users of our website with targeted advertising by placing personalized and interest related Facebook ads (https://de-de.facebook.com/business/products/ads) for them when they visit Facebook. To perform this function, the Facebook Pixel remarketing tag is implemented on the website.
The Facebook Pixel establishes a direct connection to Facebook servers when you visit our website. This transfers to Facebook which of the individual pages of our website you have visited. Facebook associates this information with your personal Facebook account.
It is used for the purpose of individualised advertisement via the social network Facebook. This constitutes a legitimate interest within the meaning of Art. 6 subs 1 f) GDPR. If you do not want Facebook to directly associate the collected information with your Facebook account, you can disable the remarketing feature "Custom Audiences" in your Facebook account settings. You must be logged in on Facebook. Alternatively, you can deactivate this via hhttps://www.facebook.com/ads/website_custom_audiences/.
For more information about Facebook's collection and use of the data, your rights in this regard and ways to protect your privacy, see Facebook's privacy policy (https://www.facebook.com/about/privacy/).
4.20. Trainings with "Thinkific"
We offer various training courses on our website, which you can book for testing or for a fee. We use a training portal provided by Thinkific (Thinkific HQ, 400 - 369 Terminal Avenue, Vancouver, BC, Canada V6A 4C4) to create, deliver, market, upload videos, test and organize all content. Thinkific is a cloud-based software platform that enables companies to create, market, sell and deliver their own online training courses. This platform thus provides the training environment and offers the sales interface.
When you book our training courses, we process the following data from you: First name, last name, e-mail address, country of origin, booked training and optionally: name of your company and SW-ID (Software Identification ID). This information is transmitted by your browser and stored in our information technology systems. In addition, your IP address and the date and time of the course booking are stored.
The processing of the personal data entered by you serves the purpose of conducting the training courses in which you would like to participate. This processing is legal because it is necessary for the performance of the contract in accordance with Art. 6 subs. 1 b) GDPR. The storage of IP address and time of registration serves the purpose of ensuring the security of our information technology systems. This is also in our legitimate interest, which is why processing is permissible under Article Art. 6 subs. 1 b) GDPR.
In order to be able to use our training offer, an independent registration on the learning platform Thinkific (thinkific.com) is necessary in addition to the registration for the training on our website. Thinkific forwards the above-mentioned data to us as customers and stores them independently. To learn what information Thinkific collects from you and how Thinkific processes it, visit https://www.thinkific.com/privacy-policy/.
The personal data provided by you at the time of booking will be stored as long as this is necessary for the fulfilment of the contract. We do not combine this personal data with other data sources. Data is only passed on to Thinkific if this is necessary for the fulfilment of the contract. The data exchange then takes place for the respective fulfilment of the contract with you and is legal according to Art. 6 subs. 1 b) GDPR. The transfer to Canada complies with a level of data protection that meets European standards, which was established for Canada by the EU Commission in a formal decision (2002/2/EC).
You as the person concerned (hereinafter “data subject”) are entitled to a right to information according to Art. 15 GDPR, a right to rectification according to Art. 16 GDPR, a right to erasure according to Art. 17 GDPR, a right to restriction of processing according to Art. 18 GDPR as well as a right to data portability according to Art. 20 GDPR. The right to information as well as the right to erasure are subject to the restrictions under §§ 34, 35 BDSG (German Federal Data Protection Act). In addition, you are entitled to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG).