Welcome to our online shop! We appreciate your interest in our company. The protection of your personal data is important to us. We process your data in accordance with the applicable legal provisions on the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation acts that apply to our company.
Our data protection notice explains what personal data we gather from you via our website, what we use this for, when we delete this and how your data is protected as best as possible by means of security measures. In addition, we disclose the respective legal framework that authorises us to process data accordingly. Furthermore, you will be informed of your statutory rights in connection with the processing of your data. In order to provide you with the best possible transparency in connection with our processing of data, you will first find generally valid information concerning the processing of personal data and then detailed information concerning the following topics:
Personal data are any information that enables the identification of a natural person. This includes, in particular, names, birthdays, addresses, telephone numbers, e-mail addresses but also your IP address.
Anonymous data exist if no personal relationship can be established to the user.
The responsible party within the meaning of data protection legislation is:
s.Oliver Bernd Freier GmbH & Co. KG
s.Oliver Strasse 1
Telephone: +49 (0) 9572 – 91 60 09
Data collection/personal data
We collect personal data in accordance with the legal requirements. All personal data that we collect from you via the website will only be processed for the purposes described in greater detail below. This collection takes place within the framework of the legal provisions already named, more specifically, only with your consent.
Article 6 EU GDPR in particular specifies when data processing is allowed. s.Oliver collects data if:
- You have given consent (Article 6(1) lit. a EU GDPR)
- Processing is necessary for the performance of a contract/prior to entering into a contract (Article 6(1) lit. b EU GDPR)
- Processing is necessary for compliance with a legal obligation (Article 6(1) lit. c EU GDPR)
- Processing is necessary for the purposes of the legitimate interests of our company except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (Article 6(1) lit f. EU GDPR). In particular, we view an overriding, legitimate interest in data processing in the following cases:
Tracking measures and setting of cookies
In order to be able to provide you with an optimal user experience in our online shop and with our advertisements, an experience tailored to your unique needs, we work with various service providers and technology providers, using cookies and tracking methods in the process. In such a case, we base this on our legitimate interest in data processing as far as possible; in most cases, however, we obtain your consent first (Article 6(1) lit. a EU GDPR), which you can of course revoke at any time via the privacy settings. You can find detailed information under the “Tracking measures and setting of cookies” rubric.
Fraud prevention and reduction of payment default
In order to minimise the risk of default, a credit check is conducted within the order process. This check determines which payment options are displayed. All transferred orders which indicate fraud are checked downstream by an employee and relevant measures for preventing fraud are initiated - you can find further information in the “Payment systems / credit check / fraud prevention” rubric.
Protecting the security of our systems/investigating errors
For technical security reasons, particularly to protect against hacking attempts on our web server, data will be saved pursuant to Article 6(1) lit. f EU GDPR. No connection is established to individual users. In particular, we collect the following data: The web browser and operating system that are used/name of the internet service provider/information about the website you are visiting us from/information about the website/that you retrieve on our site, the date and time of your visit/the name of requested files/whether a file was transferred/the amount of data that is transferred/the IP address assigned by your internet service provider. Of course, personal data that is collected will be kept confidential.
Storage period and criteria for determining this period
s.Oliver Bernd Freier GmbH & Co. KG processes and saves your personal data only for the period required to achieve the particular processing purpose, or if there is a legal retention period (in particular for commercial or taxation purposes). Once this purpose has been achieved or the retention requirement has expired, the respective data will be routinely erased.
In certain cases it is necessary to transfer processed personal data in the course of data processing. In this respect, there are various recipient sites and recipient categories.
Where necessary, we will transfer your personal data within the s.Oliver Group (s.Oliver Bernd Freier GmbH & Co. KG, comma Verwaltung GmbH and LIEBESKIND GmbH). Of course, we comply with the legal framework associated with this process and ensure that your data is lawfully processed. Your personal data are accessible only by authorised employees who require data access because of their responsibilities, e.g. to fulfil your order or to contact you in case of an enquiry.
Personal data will be transferred to the following categories of recipients while respecting the legal requirements:
- Service providers as part of order fulfilment
- Delivery services, distributors, payment services
- Companies that conduct credit checks
- Companies that provide marketing services
- Service providers that are part of communication systems
- Government authorities and institutions to the extent that this is necessary or required
Safe transfer of your data
We employ the proper technical and organisational security measures to protect data that we save as best as possible from random or intentional manipulation, loss, destruction or access by unauthorised parties. The security level is constantly being monitored together with security experts and adjusted to new security standards.
It goes without saying that the security of your data is also important to us when transferred within the s.Oliver Group or to our partners or third parties - secure transfer procedures are selected accordingly:
Data is generally transferred via a transfer encoded connection. Here we apply state of the art protocols such as TLS 1.2 with PFS.
Therefore only encoded data is exchanged from and to our website. We offer HTTPS as the transfer protocol for our website, always using the current encryption protocols.
Links to other providers
Our website also contains clearly recognisable links to the websites of other companies. If and when there are links to the websites of other providers, we have no influence on the contents. For this reason we cannot assume any warranty or liability for this content. The respective provider or operator of these websites are always responsible for the content of these websites. The linked websites were evaluated for possible statutory violations and recognisable violations of the law at the time of linking. We did not identify illegal content at the time of linking. It is not possible, however, to constantly control the content of linked websites without specific evidence that the law has been broken. Should violations become known, these links shall be removed immediately.
Rights of the data subject
We are happy to inform you in the following of the rights that may be available to you free of charge as an affected party.
- Access: We are happy to inform you about whether, and if so, which personal data of yours we have and are processing.
- Rectification: If we are storing erroneous personal data, then of course we will be happy to correct them.
- Restriction: You can have the processing of your personal data restricted under certain legal conditions. This is possible, for example, if you contest the accuracy of the data we have.
- Erasure: We are happy to delete your personal data following a request by you, regardless of our deletion management, provided that this is legally possible for us.
- Objection: You can object to the data processing procedures we use to process your personal data, which we base on balancing the interests of all parties, by indicating the specific grounds for objection.
- Withdrawal: Of course, if you have given us consent to process data, you can also withdraw such consent with future effect without indicating the reason.
- Data portability: We are happy to make personal data concerning you which we have received as part of concluding a contract or through consent and based on an automated data processing procedure available to you or a third party named by you in a commonly-used, machine-readable format.
You can exercise your rights as a data subject at any time using the contact options provided or consult with us regarding data protection. You can contact our data protection organisation via the following email address: firstname.lastname@example.org.
Right to lodge a complaint with a supervisory authority
Of course, you have the freedom to contact the proper supervisory authority for you at any time. Alternatively, our supervisory authority is also available to you. This is:
The Bavarian State Office for Data Protection Supervision
(Bayerisches Landesamt für Datenschutzaufsicht)
You can contact our data protection organisation at any time via the following email address: email@example.com
Tracking measures and setting of cookies
Akamai mPluse (Soasta)
- Browser information
- Information concerning the operating system of the user's PC
- Information concerning any mobile device where necessary (e.g. operating system)
- IP address (however this is anonymised)
- Geographic location
The cookie measures the reaction speed of our website (for example in Madrid, it takes 0.4 seconds to load a detailed picture). For this purpose, the anonymised data are sent to the provider Akamai mPulse.
If you do not want cookies stored in your browser you can fix this by adjusting the relevant browser setting. You can disable cookies from being stored in your respective browser under Extras/Internet options, limit cookies to certain websites or set your browser so that you are notified as soon as a cookie has been sent. Please be aware, however, that in this case you should expect a limited display of online offers and limited user guidance. You can also delete cookies at any time. In this case the information contained within them is removed from your terminal device. In the case of this service, the data are deleted once the visit comes to an end - no data are saved.
We base the processing on our legitimate interest in accordance with Article 6(1) lit. f EU GDPR. You can raise an objection against the further processing of your data at any time. If you have any questions, please get in touch with us via the following e-mail address: firstname.lastname@example.org.
In order to tailor this website to our customers’ requirements and for the purpose of optimising it, the following data are recorded anonymously by using the solutions and technologies of econda GmbH, Zimmerstraße 6, 76137 Karlsruhe (www.econda.de).
- Information concerning the device used (e.g. operating system, browser, pixel resolution, language used)
- Information concerning the pages viewed during the visit to the website (e.g. category or product detail pages)
- Information within the framework of the ordering process (e.g. order number, gender, date of birth, delivery and payment types, address area)
- Information concerning access data (e.g. access via email newsletter, other websites or online advertising measures)
The scope of the saved and processed data is strictly limited to the carrying out of statistical evaluations within the econda Analytics tool. For this purpose, cookies are used. These enable an Internet browser to be recognised again in the future. Your IP address is anonymised immediately following receipt, whereby it is not possible to recognise the IP address from use profiles.
The collection of the data and the use of the tool are technically necessary in order to continually optimise the functions and the display of our website on various devices, operating systems and browsers and to make our service more interesting for you as a user. The collection of the data and the use of the tool are therefore based on the legitimate interest under Article 6(1) lit. f EU GDPR. The collected data are saved for a period of 5 years. No transfer to third countries takes place.
You can revoke your consent to the data processing here.
In your privacy settings, you can see which services we use and decide for yourself if and to what extent you would like to agree to these services and even subsequently change the settings at any time. The processing takes place on the basis of your consent in accordance with Article 6(1) lit. a EU GDPR.
We use tracking methods from search engine providers to optimise our advertisements so that you can easily find our online shop in the standard search engines, even with relevant future search queries. For example, to determine the relevance of an advertisement, we record the categories that are interesting to the shop’s visitor, and whether an order was placed. These data are pseudonymised and transferred to the search engine providers.
Google AdWords Remarketing & Conversion Tracking
Our website uses Google Adwords remarketing functions, which we use to advertise for this website in Google search results and on third party websites. These functions are provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google”). For this purpose, Google places a cookie onto the browser of your terminal device. This cookie has a pseudonymous ID which automatically facilitates interest-based advertisements based on the websites you visit. The processing takes place on the basis of your consent in accordance with Article 6(1) lit. a EU GDPR. You can withdraw at any time under the privacy settings.
Any data processing beyond that shall only take place if you have agreed with Google to connect your internet and app browsing history from Google with your Google account and information is used from your Google account to personalise advertisements that you see online. If in this case you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data in order to create and define target audience lists for remarketing across devices. To do so, your personal data from Google will be temporarily connected with Google Analytics data in order to create target audiences.
This website uses the online advertising program “Google AdWords” and conversion tracking by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") within Google AdWords. We use the services of Google Adwords to call attention to our attractive offers using advertising materials (Google Adwords) on external websites. We can determine how successful individual advertising measures are in relation to the data from advertising activities. We are therefore pursuing our interest in showing you advertisements that are interesting to you, designing our website so that it is more interesting to you and in obtaining a fair calculation of advertising costs.
The cookie for conversion tracking is added when a user clicks on an AdWords advertisement from Google. Cookies are small text files that are deposited on your computer system. These cookies generally expire after 30 days and cannot identify a user personally. If the user visits certain pages on this website and the cookie has not yet expired, then we and Google can detect that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Therefore cookies cannot be traced back to AdWords customers via a website. The information obtained through the conversion cookies serves to compile conversion statistics for AdWords customers who have decided to make use of conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. Customers do not, however, receive any information that can identify a user personally.
You can permanently de-activate the setting of cookies for the display of adverts via the following link: https://adssettings.google.com
Alternatively, you can find information concerning the placement of cookies and the settings in this respect by visiting the Internet site of the Digital Advertising Alliance: www.aboutads.info. Finally, you can set your browser so that you are informed when cookies are placed and decide to accept them on an individual basis, if you accept cookies in certain instances or generally block them. The functionality of our website may be limited if you decide not to accept cookies.
If need be, Google LLC may transfer personal data to the USA. However, Google is certified for the US-European Data Protection Privacy Shield Frameworks, which guarantees that the level of data protection is kept at the valid level required in the EU.
Further information and the data protection provisions concerning advertising and Google can be obtained from the following address: http://www.google.com/policies/technologies/ads/
We use Crealytics‘ Conversion Tracking, a web analysis service of Crealytics GmbH, Salzufer 12, 10587 Berlin (hereinafter ”Crealytics“). In this context, we set cookies and collect data concerning the use of our website by you. The data, including order and customer ID and your shortened IP address, are transferred pseudonymised to Crealytics for processing. In particular, it is determined whether you came across our Internet site by clicking on an advert of Crealytics and whether this has led to a desired successful outcome defined by us (“conversion”). These data are transferred to a server of Crealytics located in Germany and are saved there. Crealytics uses this information in order to generate analyses and evaluations concerning the use of our website. Crealytics may also pass this information on to third parties, should this be required by law.
Your data remain saved by Crealytics for a period of 9 weeks. Following the expiry of this period, the data will be deleted and only aggregated statistics will be retained.
We base the collection of the data on your consent to the relevant data processing in accordance with Article 6(1) lit. a EU GDPR, which you can of course also revoke at any time by altering your privacy settings. No transfer of data to third countries takes place.
Display - not currently active
Portals - not currently active
Affiliates - not currently active
We work together with affiliate programmes and use their cookies and tracking methods so that you do not miss any exciting promotions and can benefit from bonus programmes. Affiliate programmes are the partner networks of individual website operators such as voucher portals, bonus programmes and bloggers. These technologies help us to determine if the advertisements introduced by the affiliates have generated an order. This benefits both you and the partners.
Retargeting - not currently active
We work together with retargeting providers so that we can show you advertising banners on external websites with relevant products from our online shop which you may have been interested in, but which you have not yet purchased. In order to do so, transaction data from our website are recorded, e.g. items you have viewed or placed in your shopping cart. Please do not be surprised: If you decide against the collection of data for the purpose of retargeting, a new window will open which will take you to the website of our retargeting provider. In order to ensure that data will no longer be forwarded to the partners, please follow the instructions on their website and then save your details to conclude the process.
We use the cookies and tracking technologies of social media channels to show you exciting promotions and customised advertisements on your preferred social media channels. In order to do so, pseudonymised data are transferred to the networks and merged, if necessary, with additional data by the network.
YouTube is a video portal from YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). We have incorporated at least one YouTube plugin in our online services. If you call up an online service that contains a YouTube plugin, a direct connection is established from your browser with the YouTube server. In doing so, the information that your browser has visited the respective page of our online services is transferred to YouTube even if you do not have a YouTube account or are not logged in to your account. This information is transferred from your browser directly to a YouTube server in the USA and saved there.
If you are logged in to your YouTube account at the same time, then it is also possible that the page retrieval will be allocated to your YouTube account and you would allow YouTube to allocate your surfing behaviour directly to your personal profile.
If you would like to prohibit YouTube from transferring and storing your data and your behaviour on our online services, you must log out of YouTube before visiting our site and, if necessary, delete cookies placed by YouTube.
Further information concerning the collection and use of your data by YouTube can be found in the data protection notice at https://www.YouTube.com/static?template=privacy_guidelines, as well as in the data protection policy of Google, https://www.google.com/policies/privacy/.
We base the collection of the data on your consent to the relevant data processing in accordance with Article 6(1) lit. a EU GDPR, which you can of course also withdraw at any time by altering your privacy settings.
Econda Profile Tracking
In order to provide you with the best possible shopping experience in our online shop, we create pseudonymised use profiles. These allow us to provide you with the same level of advice online as you would expect if you were to visit an s.Oliver store personally. By means of these profiles, we can guarantee that other products which may be of interest to you are displayed, and those which are not are hidden. The use profiles also make navigating our online shop easier, for example by displaying recently viewed products or products from your wish list.
In order to create the pseudonymised user profile, we gather various data during your visit to the online shop. This includes:
- Information concerning the products which you are interested in (products viewed, products on your wish list)
- Information concerning shopping behaviour (products in the shopping cart, products which have been purchased)
- Information concerning the ordering process (order number, gender, date of birth, type of delivery and payment)
These data are not assigned to a profile until we have received consent to create a profile or following registration as an existing s.Oliver card customer in the online shop or app in accordance with Article 6(1) lit.a EU GDPR. Once the consent is issued, we create an ID which identifies you as a returning visitor. In addition, we associate the browser or device used for registration for purposes such as authentication, security and individualisation of your account. In accordance with your settings, we can assign information from various visitors with various devices in order to display consistent and relevant information. The data are gathered using the technology of econda GmbH Zimmerstraße 6, 76137 Karlsruhe (www.econda.de) and are combined to make a profile within the econda Audience Relationship platform. The data are not passed on to third parties or transferred to third countries during this process.
Furthermore, data are only processed and saved for the amount of time necessary to achieve the particular processing purpose or if there is a legal retention period (in particular for commercial or taxation purposes). Once this purpose has been achieved or the retention requirement has expired, the respective data will be routinely erased. The data will not be saved for more than 5 years.
The tracking service Cquotient is a service of the shop system we use, Salesforce Commerce, Salesforce.com Inc, 5 Wall St. Burlington, MA 01803 USA. The recipient of the data is Salesforce.com EMEA Limited, Village 9 Floor 26 Salesforce Tower 110, Bishopsgate London, UK EC2N 4AY.
With the assistance of this service, we provide you with suitable product recommendations which may be of interest to you. As a result, you save time when searching for the right product and you also receive incentives for additional combination options. In order to provide you with these product recommendations, Salesforce uses a cookie in your browser following your consent, which tracks your interest in possible products, so that the right recommendations can then be provided. The following data are gathered once you have given your consent:
- IP address
- Email address (in case of users who are logged in)
By activating the respective cluster, you are granting your consent in accordance with Article 6(1) lit. a EU GDPR to the processing of data. Of course, you can also withdraw your consent at any time by altering your privacy settings. The data is saved for 1 year. No transfer of data to third countries takes place. Further information concerning Cquotient services can be found at: https://www.demandware.com/de/datenschutz
If, as part of our consent process, you have opted in to one or more of the clusters named above (search engines, display, portals, affiliates, re-targeting, social networks), the event tracking of Exactag GmbH Wanheimer Straße 68, 40468 Düsseldorf will also start at the same time as the respective tracking. Exactag GmbH collects and saves data on this website and its subpages for marketing and optimisation purposes. Pseudonymised use profiles can be created from these data. For this, cookies can be used, as well as a technology called fingerprints. Cookies are small text files which are saved locally on the browser cache of the person visiting the website. Fingerprint technology saves the browser’s environment variables in a database without saving data which clearly relates to the user, such as an IP address. The cookies and/or fingerprint enable the recognition of the browser. The data compiled with the Exactag technology will not be used to personally identify the visitor to this website without the explicit consent of the data subject.
General information concerning the function of cookies
With these cookies, we are able to analyse how users use our website. This allows us to design our website content to suit the needs of the user. Additionally, cookies allow us to measure the effectiveness of a certain advertisement and place it depending on the topical interests of the user, for instance.
The cookies that are used have a unique user ID. Certain interfaces allow us to allocate the various user IDs to a unique client (e.g. when logging in to our online shop from your smartphone and computer) and thus optimise our website across your devices.
The cookies we use have a long lifespan due to the purpose of the processing and – provided that you do not object to or delete the cookies – are automatically deleted after 6 months.
Of course, you can also disable, restrict or even delete cookies manually on your terminal device via the settings in your browser or with the aid of software.
Please note: If you disable cookies, then you may not be able to use all functions completely.
Data processing in the newsletter (Article 6(1) lit. a EU GDPR)
You can sign up to receive our free newsletter on our website. If you have agreed to receiving the s.Oliver newsletter, we will use your e-mail address to send information (personalised where possible) about products, campaigns, competitions and news from the fashion industry as well as surveys on general customer satisfaction. We store and process this data for the purpose of sending the newsletter. After completing an order, we also make it possible for you to submit product and seller reviews with the independent review service eKomi. You will receive an e-mail prompting you to do so.
Multi device user profile for personal and individual communication and product recommendations
Furthermore, if you have consented to receiving a newsletter tailored to your individual interests, then in addition to processing your e-mail address, we will also process your name and profile information for the purpose of sending the newsletter. With your consent, we will record your user behaviour on this website, our mobile fashion apps and newsletters from us.
The evaluation of user behaviour includes, in particular, contract processing data and creates personal profiles or uses existing data that can be used to draw conclusions about your interest in products or campaigns from s.Oliver. Such data may come from sales contracts. Our promotions are primarily events in our retail areas, but also include sales. Contract processing data are all types of data that arise in connection with the purchases you make at s.Oliver. If you have exchanged or returned an item, or if you were interested in an item that could not be delivered, this information is also included in the data. In addition to this, the contact information you provided to s.Oliver, such as your title, first name and surname, e-mail address and date of birth, is also included. Your response to the advertising activities from s.Oliver (e.g. the newsletters sent to and opened by you) and your visitor behaviour on the s.Oliver website or in the app (e.g. date of your last visit and products viewed) may also be stored.
The processing takes place pursuant to Article 6(1) lit. a EU GDPR and you can exercise your rights as a data subject at any time. If you have any questions, please contact us at email@example.com. You can withdraw your consent regarding receipt of the newsletters or the creation of personalised use profiles at any time with future effect, for example by unsubscribing from the newsletter on our website. You can also find the link for unsubscribing at the end of every newsletter.
Contact form (Legal framework Article 6(1) lit. a EU GDPR)
There is a contact form on our website that can be used to initiate contact electronically. If you use the contact form to write us, we will process your data provided on the contact form in order to initiate contact and to answer your questions and requests. During this process, the principle of data economy and data avoidance is observed, as you need only enter the data which we absolutely require in order to get in touch with you. That is your first name and surname, your e-mail address, the selected topic and the message field itself. In addition, your IP address will be processed out of technical necessity and as a legal safeguard. All other data come under voluntary fields and can be provided if you wish to do so (for example for a more personalised response to your queries).
We maintain a “social media” presence. Where we have control over the processing of your data, we ensure compliance with the applicable data protection provisions.
Below you can find the most important information pertaining to data protection laws in connection with our social media presence.
Name and address of the body responsible for the operation
Alongside s.Oliver Bernd Freier GmbH & Co. KG, the following are responsible for the social media presence in accordance with the EU GDPR and other provisions under data protection legislation:
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
- Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
- Youtube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland)
However, you are yourself responsible for using these platforms and their functions. This applies in particular to the use of the interactive functions (e.g. comment, share, rate).
We also wish to inform you that during this process, your data may be processed outside of the territory of the European Union. In relation to the US providers which are certified under the “Privacy Shield”, we wish to point out that these providers have undertaken to observe the data protection standards which apply in the EU.
Purpose and legal basis
We ourselves maintain the fan pages in order to communicate with the visitors to these sites and to inform them in this way about our products and services.
We also collect data for statistical purposes, in order to be able to further develop and optimise the content and to make our service more attractive. The necessary data for this purpose (e.g. total number of site accesses, site activities, data provided by the visitors, interactions) are prepared by the social networks and made available. We have no control over the creation and display.
In addition, your personal data are processed by the providers of the social media, but also by s.Oliver Bernd Freier GmbH & Co. KG for market research purposes, communication and for advertising purposes. Therefore, it is possible that use profiles can be created in accordance with your use behaviour and the resulting interests. As a result, it is possible, among other things, to display adverts inside and outside of the platform which are considered to be of interest to you. For this purpose, cookies are generally saved on your computer. Regardless of this, data which were not collected from your end devices directly can be saved in your use profiles. The saving and analysis also takes place across multiple platforms. This applies particularly (but not exclusively) in cases where you are registered as a member and are logged in to the respective platforms.
Otherwise, we do not gather and process any personal data.
The processing of your personal data by s.Oliver Bernd Freier GmbH & Co. KG takes place in accordance with our legitimate interest in effective information and communication pursuant to Article 6(1) Sentence 1 lit. f EU GDPR.
Should you be requested to provide your consent to the data processing, i.e. should you agree by confirming via a button or similar opt in, the legal basis for the processing is Article 6(1) Sentence 1 lit. a and Article 7 EU GDPR.
Your rights/option to raise an objection
If you are a member of a social network and do not wish for the network to collect data relating to you via our internet presence and to connect your saved membership data with the respective network, you must do the following:
- log out of the respective network before visiting our fan site
- delete the cookies on the device
- close your browser and relaunch it.
Once you sign in again, however, you can be recognised once again by the network as a specific user.
We wish to refer to the following linked information for a detailed explanation of the respective processing and the opt out options:
Data protection policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Data protection policy: https://help.instagram.com/519522125107875
Opt-Out: http://www.networkadvertising.org/managing/opt_out.asp und
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Data protection policy: https://policies.google.com/privacy
Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=de und
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Once we do not have full access to your personal data, you should contact the providers of the social media platforms directly in order to claim your rights, as these have access to the personal data of their users and can take relevant measures and provide the necessary information.
Note concerning copyright and authorship rights
Should you wish to publish pictures, texts, plans, videos, music etc on our internet presence, you should be aware that you may be assigning all rights of use to the network, which could lead to legal consequences on your part, should you not be the author or owner of the rights yourself.
Making purchases in the online shop (Article 6(1) lit. b EU GDPR)
Ordering as a guest:
You do not need to create a customer account in our shop if you decide to order from our online shop as a guest. If you order again, you will need to provide your data once again to process the order.
In addition, the data processing procedures which are described in the “tracking measures and cookie setting” rubric apply. Of course, you will have access to the contact options and the rights as a data subject described therein.
Payment systems (Article 6(1) lit. b and f EU GDPR)
You can select from different payment methods in our online shop. To that end, the respective data relevant to payment are collected so that your order and payment can be processed. In addition, your IP address will be processed out of technical necessity and as a legal safeguard.
Certain personal data are required in order to fulfil the contract, see mandatory fields. Unfortunately, without these data, we must refuse to enter into this contract, as we will not be able to perform it. The data will be transferred accordingly to our payment service provider to be processed.
Our payment system uses SSL encryption so that your data are protected when transferred.
The payment options available to you depend on the results from our credit check.
Note concerning credit card payments: As is standard for credit card payments, credit card information will be verified and authorised by Concardis GmbH, Helfmann-Park 7, Echborn 65760, Germany.
Note concerning SOFORT Online Bank Transfer: If you decide to pay via SOFORT Online Bank Transfer, you will be redirected to the website of Sofort GmbH, Theresienhöhe 12, Munich 80339, Germany immediately after selecting this method for the authorisation of your payment.
Note concerning PayPal: PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as a payment option when ordering, then data of the data subject will automatically be transferred to PayPal. By selecting this payment option, the data subject consents to the required transferring of personal data to process the payment. The personal data that will be transferred to PayPal generally includes first name, surname, address, e-mail address, IP address, telephone number, mobile number or other data that are necessary for processing the payment. Personal data necessary for concluding the sales contract also include data related to the respective order. You can access details concerning data protection at PayPal here.
Data processing in the Order Management System
In order to provide you with the best possible product availability, our online shop does not just have products which are in stock in our main warehouse available, but also items which are available in one of our s.Oliver stores. You benefit from a much larger product range and can order items via store delivery that would otherwise be sold out in the online shop. In such a case, you select your requested item on our website as usual and can then see from the shopping basket if individual items are dispatched from a store. Our order management system automatically decides the location from which the item you have ordered will be dispatched and takes place in accordance with various factors, such as availability of the goods and efficiency. In this way, we can ensure that you receive all of your requested items as quickly as possible and that we keep the number of individual consignments as low as possible. In order to do so, it is necessary for your order to be transferred to the order management system, which is provided by Manhattan Associates Europe B.V. (Buizerdlaan 2, 3435 SB Nieuwegein, Netherlands), operated by s.Oliver and whose servicer is located in Germany. Therefore s.Oliver saves and processes your data in the order management system in accordance with the GDPR based on the legitimate interest in allocating and processing all orders efficiently.
Use of location-based services
We offer you a wide range of services on our website that provide you with, among other things, even better product availability and simplified parcel delivery. To carry out these services, we require your location in order to determine, for example, the nearest s.Oliver branch.
Determining the nearest s.Oliver branch
We provide the s.Oliver storefinder on our website. The storefinder displays the nearest s.Oliver stores and the nearest partner stores in your area when you enter in your current location or by using the Google Maps locator (see use of Google Maps). The s.Oliver storefinder also gives you the opportunity to find exactly the s.Oliver retail space that best suits your needs via various filters such as women’s or men’s collections, specific s.Oliver brands or services.
We base our activities on our legitimate interest in accordance with Article 6(1) lit. f of the EU GDPR. You can exercise your rights as a data subject at any time. If you have any questions on the process or want to talk to us about the results, please contact us at firstname.lastname@example.org.
We use Google Maps (AIP) on our website, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google”). Google Maps is a web service that depicts interactive maps in order to display information visually. Using this service will show you our location and make it easier for you to find us.
As soon as you retrieve the subpage that is connected to the map from Google Maps, information regarding your use of our website (e.g. your IP address) is transferred to Google’s server in the USA and stored there. This shall occur regardless of whether Google provides a user account that you have logged in to or if there is no user account at all. If you are logged in to Google, your data will be allocated directly to your account. If you do not want your data to be allocated with your Google profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as a user profile and analyses them. This kind of analysis occurs pursuant to Article 6(1) lit. f GDPR based on the legitimate interests of Google in displaying personalised advertisements, market research and/or demand-driven design of its website. You have the right to object to the creation of these user profiles, and should contact Google if you wish to claim this right.
Google LLC., headquartered in the USA, is certified for the US-European Data Protection Privacy Shield Frameworks, which guarantees that the level of data protection is kept at the valid level required in the EU.
Web shop protection against attacks (Cloudflare)
This page uses SSL encoding for security reasons and to protect the transfer of confidential content such as the requests that you send to us as a website operator. You can recognise an encrypted connection when the address bar in your browser changes from “http://” to “https://”and by the padlock icon in your browser. When the SSL encryption is activated, the data you send us cannot be read by third parties. We use the service from Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107 USA so that we can offer you secure data transfer using SSL encryption on our website, protect ourselves against attacks and optimise our loading times. Cloudflare is a certified participant in the EU-US Privacy Shield Frameworks. Cloudflare has undertaken to handle all personal data from all European Union (EU) member states pursuant to the Privacy Shield framework according to these valid principles. You can find more information about the Privacy Shield Framework on the Privacy Shield List by the US Department of Commerce at [https://www.privacyshield.gov]. Cloudflare collects statistical data about your visit to this website. The following is included in the access data: Name of the accessed website, file, date and time of access, data volume transferred, confirmation of successful retrieval of data, browser type and version, user’s operating system, referrer URL (webpage that sent user to the site), IP address and the requesting provider. Cloudflare uses protocol data for statistical evaluation for operating, security and offer optimisation purposes. Please also read the data protection provisions of Cloudfare, which can be accessed here: https://www.cloudflare.com/privacypolicy/.
We base our activities on our legitimate interest in accordance with Article 6(1) lit. f of the EU GDPR. You can exercise your rights as a data subject at any time. If you have any questions, please contact us at email@example.com.
As at 15/08/2019