Source: https://fitzandhuxley.com/en/data-privacy-statement/?fh_origin=top-bar&fh_campaign=data-security
Timestamp: 2019-12-09 04:20:47
Document Index: 262838988

Matched Legal Cases: ['Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 21', 'Art. 20', 'Art. 7', 'Art. 77', 'Art. 6', 'Art. 21']

Data Privacy Statement | Fitz & Huxley
The purpose of this data privacy statement is to inform you, as the user, about the gathering of personal data on this website. We therefore place great value on all the essential information concerning the protection of your data being presented in the most transparent way possible. Should anything nonetheless be unclear to you, or should you have any questions, and thus a need for clarification, please do not hesitate to contact us.
A1. The Controller, within the meaning of the General Data Protection Regulation (Art. 4(7) GDPR) and the other national data privacy laws, as well as any other provisions under data protection law, is:
Telephone: +49 (0) 30 2352 3909
Full provider details: https://www.fitzandhuxley.com/impressum/
These contact details are thus relevant for all matters of a data privacy nature relating to this website, as well as any claims on your part under data privacy law.
A2. The Data Protection Officer can be contacted as follows:
Schlueterstr. 29, 10629 Berlin
B. GATHERING AND STORING OF PERSONAL DATA WHEN VISITING OUR WEBSITE
We are informing you below about the procedures that take place when accessing our website that are relevant under data protection law.
B1. Logfiles
Every time you access our website, we automatically gather data and information from the computer system that you use to access the website.
(1) Information on your browser type and the browser version used
(2) Information on your operating system
(3) Information on your Internet Service Provider
(4) The date and time of your access
(6) Websites that are accessed by your system via our website
The data is stored in the log files of our system. Not affected by this are your IP address or other data which enable the data to be assigned to you. This data is not stored together with other personal data of yours. The legal basis for the temporary storage of this data is Art. 6(1)(f) GDPR.
Both the gathering of data and the saving of data in log files are absolutely necessary for the provision and operation of our website. Therefore, you do not have the option to object.
B2. Cookies
We deploy so-called “cookies” on our website. These are small files that your browser creates automatically and which are stored on your computer system if you visit our site. Cookies do not harm your computer system, and do not contain any viruses, Trojan horses or other malware.
We deploy cookies in order to improve our website, thus, for example, to design it to be more user-friendly and adapt it to users’ interests.
In that respect, the following data is stored in the cookies and transmitted:
(2) Items in your shopping cart
(3) Login details
(5) History of the ordering process
(6) Making use of website functions
The data gathered in this way is pseudonymised by means of technical precautions. It is therefore not possible to allocate the data to you. The data is not stored together with any other personal data.
The data processed by cookies is necessary for the purposes mentioned, in order to protect our legitimate interests, as well as those of third parties, pursuant to Art. 6(1)(1)(f) GDPR.
Most browsers accept cookies automatically. In order to prevent this, you may, however, configure your browser in such a way that no cookies are stored on your computer system, or that a notice always appears before a new cookie is placed. Completely deactivating cookies may, however, lead to you not being able to use all the functions of our website.
B3. Website analysis
We use services of third parties to evaluate the visit to our site by the user.
We use the “Google Analytics” service on this website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
This service enables us to create pseudonymised usage profiles and use cookies (see Clause B. 2). The information generated by the cookie on your use of this website, such as
(3) Referring URL (the page visited previously)
may be transmitted to a server of Google Inc. in the USA and stored there. These servers are operated by Google Inc., USA, which is certified by the EU-US Privacy Shield. The information will be used to evaluate the use of the website, compile reports on the website activities, and provide further services associated with the use of the website and the Internet for market research purposes and to design these web pages in line with requirements. This information may also be transmitted to third parties, in so far as such is required by law or if third parties process such data by order. Your IP address will never be merged with other data of Google. The IP addresses are anonymised, so that the allocation of data will not be accessible to anyone.
You can prevent cookies from being installed by adjusting a corresponding setting in the browser software. We would like to point out that, in such a case, it may not be possible to use all the functions of this website in their entirety.
You can, moreover, prevent generation of the data by the cookie which relates to your use of the website from being recorded, as well as the processing of such data by Google Inc., by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, in particular with browsers on mobile terminals, you can additionally prevent your data from being recorded by Google Analytics by clicking on this link: An opt-out cookie is placed, which prevents your data from being recorded when visiting this website in future. The opt-out cookie only applies in this browser, and only to our website, and will be placed on your device. If you delete the cookies in this browser, you need to re-set the opt-out cookie.
You can find further information on data privacy in connection with Google Analytics, for instance in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
The cookies are stored for a period of 26 months.
For the optimisation and evaluation of our website, it is necessary to deploy Google Analytics pursuant to Art. 6(1)(F) GDPR. You can, via the following link, prevent the data from being gathered (opt-out): http://www.google.com/ads/preferences.
In addition, the “Jetpack” service is used, which is offered by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
This service enables us to create statistics about the visit to our website. This is done by deploying cookies (see Clause B. 2.), which are stored on your computer system.
The information from the cookies, and thus the visitor statistics, is stored in the USA. The data privacy policy on the cookies captured can be inspected here: https://de.jetpack.com/support/cookies/
The use of Jetpack is necessary, pursuant to Art. 6(1)(f) GDPR, in order to optimise and evaluate our website. Inter alia via the following link, you can prevent data from being gathered (opt-out): EDAA http://www.youronlinechoices.com/uk/your-ad-choices/.
We use Hotjar to understand the needs of our users and to optimize the offerings on this website better. This is a service of Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Slie-ma SLM 1640, Malta. Using Hotjar technology we get a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and what they do not like etc.) and helps us tailor our offerings to our users’ feedback. Hotjar uses cookies and other technologies to collect information about the behavior of our users and their devices.
Hotjar uses cookies and other technologies to collect information about the behaviour of our users and their devices.
(1) IP address of the device (collected and stored only in anonymous form)
(2) Screen size
(3) Device type (Unique Device Identifiers)
(4) Information about the browser used
(5) Location (country only)
(6) Preferred language for displaying our website
Hotjar stores this information in a pseudonymous user profile. The information will not be used by Hotjar or by us to identify individual users or merged with other data about individual users. You can find more information in Hotjar’s privacy policy here.
You may opt out of Hotjar’s storage of a user profile and information about your visit to our website and Hotjar tracking cookies on other websites by clicking this opt-out link: https://www.hotjar.com/legal/compliance/opt-out
The use of HotJar is necessary for the purposes mentioned, in order to protect our legitimate interests, as well as those of third parties, pursuant to Art. 6(1)(1)(f) GDPR.. The legitimate interest is the performance of our business activities.
B4. Website marketing
We use the “Google AdWords” marketing service on this website. This service is provided by Google Ireland Limited. (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Irland).
This service enables us to place advertisements concerning our content with greater precision and evaluate them according to users’ interests. This is done by deploying cookies (see Clause B. 2.), which are stored on your computer system if you came to our website via a Google advertisement (a so-called “conversion cookie”). That makes it possible to track from which page you were re-routed. The service is, however, not aimed at identifying you personally. Your data may be transferred to a server in the USA and stored there. These servers are operated by Google Inc., USA, which is certified by the EU-US Privacy Shield.
If you would prefer not to take part in the tracking procedure, you can also reject the placing of a cookie that would be required for this – for instance by setting your browser accordingly, so that the automatic placing of cookies is deactivated. You can, however, also deactivate cookies for conversion tracking, by setting your browser in such a way that cookies from the domain www.googleadservices.com are blocked. You will find Google’s data privacy briefing on the conversion tracking here: (https://services.google.com/sitestats/en.html).
Such advertising efforts are necessary in order to assess our website and optimise the advertising efforts in accordance with Art. 6(1)(f) GDPR. You can, via the following link, prevent the data from being gathered (opt-out): http://www.google.com/ads/preferences.
In addition, we use an advertising measure of the Facebook network, the so-called “Facebook Pixel”. This is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This concerns a script (“pixel”), that we use on our website. If you are simultaneously logged into the website of Facebook Ireland Ltd. when visiting our website, Facebook Ireland Ltd. may recognise that you have visited our website. That means that advertisements that are more targeted, and therefore more in line with your interests, can be shown on the network of Facebook Ireland Ltd. It can also be ascertained from that whether any users (and which ones) have been routed to our website by clicking on an advertisement in the network of Facebook Ireland Ltd.
You can infer the purpose and scope of the gathering of data and the further processing and use of the data by Facebook Ireland Ltd., as well as your rights and setting options for protecting your privacy in this respect from Facebook Ireland Ltd.’s data privacy policy (https://www.facebook.com/about/privacy/). You can adjust the settings for the Facebook advertisements yourself (https://www.facebook.com/settings?tab=ads).
This advertising measure of Facebook is necessary to promote our website and optimise the advertising efforts pursuant to Art. 6(1)(f) GDPR. Inter alia using the following links to pages of third party providers, you can prevent data from being gathered (opt-out): NAI – http://optout.networkadvertising.org/ or EDAA http://www.youronlinechoices.com/uk/your-ad-choices/
C. TAKING UP CONTACT
You can get in touch with us electronically by e-mail. In this case, the data that you send us by e-mail will be transmitted to us and saved by us.
This concerns the following:
(2) Date of taking up contact
(4) Any further data, provided that you give it
If you write us an e-mail and are interested in our services, the legal basis for the data processing is Art. 6(1)(b) GDPR.
This data, transmitted to us, will only be used for handling the conversation, and not passed on to third parties.
We will delete this data once it is no longer required for the respective purpose. In other words, if the e-mail exchange with you has been terminated and we have addressed your concern in full.
You at any time have the opportunity to revoke the consent to the processing of your data. For this purpose, please contact us using the above-mentioned options. In the event of a revocation, all your personal data that has been stored for the purpose of taking up contact with you will be deleted.
We offer to send a newsletter, in which we inform the recipients about our services (newsletter subscription). In order to receive this newsletter, you need to register on our website for it. The data entered by you within the context of registering will be transmitted to us and only used in order to send you the newsletter.
(1) The e-mail address specified by you
(2) The IP address of the computer system used by you
(3) The date and time of the registration
We need your e-mail address to deliver the newsletter to you. The remaining information is necessary to prevent abuse of our services, but also of the e-mail address specified.
Further voluntary details include:
(5) Your date of birth
(6) Your place of residence
The voluntary details serve the purpose of being able to inform you more precisely about our website. These details are, however, not necessary for the newsletter to be sent.
In order to send it, we use the services of CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede (Germany). The above-mentioned data is transmitted to this company within the context of the contract data processing under Art. 28(3)(1) GDPR, i.e. this data is not used by the company to write to you directly or to pass on the data to third parties.
We evaluate the user conduct in regard to our newsletter mailings and can ascertain how many of the newsletters are opened and how many clicks are made within them. We can allocate this conduct to the individual recipients of the newsletters. This is done with the aim of making our newsletter more interesting and adapting it to the requirements of any prospective buyers.
Before the registration to receive our newsletter is despatched, your consent will be obtained and reference is made to this data privacy statement (Art. 6)(1)(a) GDPR).
It is possible to terminate the subscription at any time, which is equivalent to an objection to the data processing and option to have the data removed. For this purpose, a corresponding unsubscribe link is to be found in every newsletter sent by e-mail.
We use third party services on our website.
This includes the integration of videos into our website, which are stored on the platform YouTube. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
When you play back one of the integrated videos, your IP address is transmitted to Google LLC. If you are logged into YouTube, this information will also be allocated to your YouTube user account (you can prevent that by logging out of YouTube before you access the video). Your data may be transferred to a server in the USA and stored there. These servers are operated by Google Inc., USA, which is certified by the EU-US Privacy Shield.
The data privacy policy of Google LLC can be viewed here: https://www.google.com/policies/privacy/
The data is processed on the basis of our legitimate interest, i.e. the optimisation of our website and our products in accordance with Art. 6(1)(f) GDPR.
This consent to data storage can be revoked via the opt-out: https://adssettings.google.com/authenticated.
(2) Social Plugin
We have also integrated a plugin of the social media platform Instagram. The platform and the plugin are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
If you are logged into Instagram, this information is also allocated to your user account (you can prevent this by logging out from Instagram before opening the video).
You can view the data privacy statement of Instagram here: https://www.instagram.com/about/legal/privacy/.
F. CONCLUSION OF THE AGREEMENT AT THE WEB SHOP
The following information relates to handling your data in connection with an order from the web shop on our website.
(1) User account
You can set up a user account with us in the course of ordering. The data specified by you in this respect will only be used for the purposes of making use of the offer. The data stored in the course of the registration is not passed on to third parties, as long as no order has been placed at the shop simultaneously with the registration.
(6) Your telephone number
By registering on our website, you can submit orders in future without having to give your data all over again.
Before the registration is despatched, your consent is obtained and reference is made to this data privacy statement (Art. 6)(1)(a) GDPR).
It is possible to delete the user account, which is equivalent to an objection against the data processing and to an option to have the data removed, at any time. Any data arising from any contractual relationship is, however, not covered by this.
Should you place an order on our website, we will use the data provided by you to process the order and fulfil our contractual obligations.
It is possible to order either in connection with registering (see Clause F (1)) or as a “guest”. In the latter case, no user account is created.
The following data, which is necessary in order to fulfil the contract, is saved when you order.
The legal basis for the processing of this data results from Art. 6(1)(b) GDPR.
(3) Payment transaction
In order to carry out the payment transaction, we only save the means of payment specified by you if you decided to pay by bank transfer. Otherwise, the purchase price is paid using the services of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For this it is not necessary for you to have a user account with PayPal Europe. Besides the payment data (your bank details for the direct debit or your credit card details), the following data is also processed by PayPal Europe:
The payment data specified, as well as the remaining data, is not passed on to third parties who are not involved in fulfilling the contract and processing the payment by either PayPal or us.
Please note that PayPal Europe collaborates with credit reference agencies. It is therefore possible for your data to be transmitted to the company specified by PayPal Europe in the data privacy statement found there. You can inspect the data privacy statement of PayPal here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
The legal basis for the storage and processing of this data results from Art. 6(1)(b) GDPR.
You have the opportunity to revoke the consent to the processing of your data at any time. For this purpose, please contact us using the above-mentioned options. In the event of a revocation, all your personal data will be deleted, as long as no statutory archival period prevents it.
(4) Shipment service provider
The goods ordered are shipped via DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn (Germany) and Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn (Germany). We pass on the following data to the shipment service provider for this purpose:
(3) Your e-mail address for any DHL tracking e-mail (unless objected to)
You at any time have the opportunity to revoke the consent to the processing of your data. Please, for this purpose, contact us using the above-mentioned options. In the event of a revocation, all your personal data will be deleted, as long as no statutory archival period prevents it.
In so far as we have processed personal data of yours, you are the data subject within the meaning of the GDPR, and you have the following rights in relation to us:
(1) Art. 15 GDPR – You can request information about your personal data processed by us. You can in particular request information about the purposes of the processing, the category of personal data, the category of recipients to who your data has been or will be disclosed, the scheduled duration of storage, the existence of a right of correction, deletion, limitation of the processing or opposition, the existing of a right of appeal, the origin of your data, in so far as it was not gathered by us, and also the existence of automated decision-making, including profiling and any meaningful information on the details of the latter;
(2) Art. 16 GDPR – you may request the immediate correction of incorrect data or completion of your personal data stored with us.
(3) Art. 17 GDPR – you may request the deletion of your personal data stored with us, unless the processing is necessary in order to exercise the right of freedom of expression and information, for fulfilling a legal obligation, on grounds of the public interest or in order to assert, exercise or defend legal claims.
(4) Art . 18 GDPR- you may request that the processing of your personal data to be limited,
– in so far as the accuracy of the data is disputed by you,
– the processing is illegitimate, however you refuse to have it deleted and we no longer need the data,
– however you need it to assert,
– exercise or defend legal claims or you have filed an objection to the processing under Art. 21 GDPR;
(5) Art. 20 GDPR – you may obtain your personal data that you have provided us with in a structured, prevalent and machine-readable format, or to request the transmission of it to another officer.
(6) Art. 7(3) GDPR – you may revoke your consent, previously granted to us, at any time. The consequence of this is that we can no longer, in the future, continue the data processing that was based on such consent.
(7) Art. 77 GDPR – You may complain to a supervisory authority. You can usually, for this purpose, contact the supervisory authority at your usual place of residence or place of work or our place of business.
H. THE RIGHT OF OPPOSITION
Should your personal data be processed on the basis of justified interests pursuant to Art. 6(1)(1)(f) GDPR, you are entitled, under Art. 21 GDPR, to file an objection to the processing of your personal data, in so far as grounds exist for the latter which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without details of any special situation.
If you wish to make use of your right of revocation or right of objection, it is sufficient to send an e-mail to the above-mentioned e-mail address of the responsible person or data protection officer.