Privacy Policy

DATA PROTECTION

Privacy policy

The controller for data processing is:
Heinrich Dinkelacker GmbH
Wolfener Straße 32-34
12681 Berlin

E-mail: service@n91berlin.com

Telephone: 030 60983700

We are pleased about your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about how your data is handled.

1. ACCESS DATA AND HOSTING

You can visit our websites without providing any information about yourself. Each time a website is accessed, the web server automatically stores only a so-called server log file which contains, e.g., the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data), and documents the request. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in a correct presentation of our offering pursuant to Art. 6(1) sentence 1(f) of the Datenschutz-Grundverordnung (General Data Protection Regulation, GDPR). All access data is deleted no later than seven days after the end of your visit to the site.

1.1 HOSTING

The services for hosting and displaying the website are provided in part by our service providers as processing carried out on our behalf. Unless explained otherwise in this privacy policy, all access data and all data collected in the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: Canada

Our service providers are based and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: Canada

Our service providers are based and/or use servers in the USA and in other countries outside the EU and the EEA. For these countries there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

1.2 CONTENT DELIVERY NETWORK

In order to achieve shorter loading times, we use a so-called Content Delivery Network (“CDN”) for some of our offerings. With this service, content, e.g. large media files, is delivered via regionally distributed servers of external CDN service providers. Access data is therefore processed on the servers of the service providers. Our service providers act for us as processors. Our service providers are based and/or use servers in countries outside the EU and the EEA. For these countries there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.  If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. DATA PROCESSING FOR THE PERFORMANCE OF THE CONTRACT AND FOR CONTACTING US

2.1 DATA PROCESSING FOR THE PERFORMANCE OF THE CONTRACT

For the purpose of performing the contract (including enquiries about and handling of any existing claims for liability for defects and for performance disruptions as well as any statutory update obligations) pursuant to Art. 6(1) sentence 1(b) GDPR, we collect personal data if you provide it to us voluntarily in the course of your order. Mandatory fields are marked as such, since in these cases we absolutely need the data to perform the contract and we cannot dispatch the order without them. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on its disclosure to our service providers for the purpose of order, payment and shipping handling, can be found in the following sections of this privacy policy. After the contract has been fully performed, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law pursuant to Art. 6(1) sentence 1(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

Merchandise management system

For order and contract handling we use merchandise management systems of external service providers. Our service providers act for us as processors. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2.2 CUSTOMER ACCOUNT

Insofar as you have given your consent pursuant to Art. 6(1) sentence 1(a) GDPR by opting to open a customer account, we use your data for the purpose of opening the customer account and for storing your data for further future orders on our website. Your customer account can be deleted at any time, either by a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After your customer account has been deleted, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

2.3 CONTACTING US

In the context of customer communication, we collect personal data to process your enquiries pursuant to Art. 6(1) sentence 1(b) GDPR if you provide it to us voluntarily when contacting us (e.g. by contact form or e-mail). Mandatory fields are marked as such, since in these cases we absolutely need the data to process your contact request. Which data is collected can be seen from the respective input forms. After your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

3. DATA PROCESSING FOR THE PURPOSE OF SHIPPING HANDLING

For the performance of the contract pursuant to Art. 6(1) sentence 1(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

DISCLOSURE OF DATA TO SHIPPING SERVICE PROVIDERS FOR THE PURPOSE OF SHIPMENT NOTIFICATION

If you have given us your express consent to this during or after your order, we pass on your e-mail address and telephone number on the basis of this consent pursuant to Art. 6(1) sentence 1(a) GDPR to the selected shipping service provider so that it can contact you before delivery for the purpose of announcing or arranging the delivery.
The consent can be withdrawn at any time by a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After withdrawal, we delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

4. DATA PROCESSING FOR PAYMENT HANDLING

When handling payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.

4.1 DATA PROCESSING FOR TRANSACTION HANDLING

Depending on the payment method selected, we pass on the data necessary for handling the payment transaction to our technical service providers who act for us as processors, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for handling the payment. This serves the performance of the contract pursuant to Art. 6(1) sentence 1(b) GDPR. In part, the payment service providers collect the data required for handling the payment themselves, e.g. on their own website or via a technical integration in the order process. In this respect the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment handling and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4.2 DATA PROCESSING FOR THE PURPOSE OF FRAUD PREVENTION AND OPTIMISATION OF OUR PAYMENT PROCESSES

Where applicable, we pass on further data to our service providers, which they use together with the data necessary for handling the payment as our processors for the purpose of fraud prevention and optimisation of our payment processes (e.g. invoicing, handling of disputed payments, support of accounting). Pursuant to Art. 6(1) sentence 1(f) GDPR, this serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in protecting ourselves against fraud and in efficient payment management.

4.3 IDENTITY AND CREDIT CHECK WHEN KLARNA PAYMENT SERVICES ARE SELECTED

Purchase on invoice via Klarna
If you opt for the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we ask for your consent pursuant to Art. 6(1) sentence 1(a) GDPR for us to transmit to Klarna the data necessary for handling the payment and for an identity and credit check. In Germany, the credit reference agencies named in Klarna’s privacy policy may be used for the identity and credit check. Klarna uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. You can withdraw your consent at any time by a message to the contact option named in this privacy policy. This may mean that we can no longer offer you certain payment options. You can also withdraw your consent to this use of personal data at any time vis-à-vis Klarna.

5. ADVERTISING BY E-MAIL AND POST

5.1 E-MAIL NEWSLETTER WITH REGISTRATION AND NEWSLETTER TRACKING

If you register for our newsletter, we use the data required for this or separately provided by you in order to send you our e-mail newsletter regularly on the basis of your consent pursuant to Art. 6(1) sentence 1(a) GDPR. You can unsubscribe from the newsletter at any time, either by a message to the contact option described below or via a link provided for this purpose in the newsletter. After you unsubscribe, we delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

We point out that when sending the newsletter we evaluate your user behaviour. For this purpose we also analyse how you interact with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For this evaluation, the e-mails sent contain one-pixel technologies (e.g. so-called web beacons, tracking pixels) which are stored on our website. For the evaluations we link in particular the following “newsletter data”

  • the page from which the page was requested (so-called referrer URL),
  • the date and time of the request,
  • the description of the type of web browser used,
  • the IP address of the requesting computer,
  • the e-mail address,
  • the date and time of registration and confirmation

and the one-pixel technologies with your e-mail address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time, as described above.

The information is stored for as long as you have subscribed to the newsletter.

5.2 E-MAIL NEWSLETTER WITHOUT REGISTRATION AND YOUR RIGHT TO OBJECT

If we receive your e-mail address in connection with the sale of a good or service and you have not objected to this, we reserve the right to regularly send you offers by e-mail, on the basis of Section 7(3) Gesetz gegen den unlauteren Wettbewerb (German Act against Unfair Competition, UWG), for products from our range similar to those you have already purchased. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in addressing our customers for advertising purposes.
You can object to this use of your e-mail address at any time by a message to the contact option described in this privacy policy or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.
After you unsubscribe, we delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

5.3 NEWSLETTER DISPATCH

Where applicable, the newsletter is also sent by our service providers as processing carried out on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Where applicable, the newsletter and the newsletter tracking described above are also carried out by our service providers as processing carried out on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are based and/or use servers in these countries: USA, Australia. For this country/these countries there is no adequacy decision of the European Commission. Our cooperation with them is based on these safeguards: standard data protection clauses of the European Commission.

5.4 SENDING REQUESTS FOR REVIEWS BY E-MAIL

If you have given us your express consent to this pursuant to Art. 6(1) sentence 1(a) GDPR during or after your order, we use your e-mail address to ask you to submit a review of your order via the review system we use. This consent can be withdrawn at any time by a message to the contact option described in this privacy policy or via a link provided for this purpose in the review request.

Where applicable, the review requests are also sent by our service providers as processing carried out on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

5.5 POSTAL ADVERTISING AND YOUR RIGHT TO OBJECT

In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in addressing our customers for advertising purposes pursuant to Art. 6(1) sentence 1(f) GDPR. You can object to the storage and use of your data for these purposes at any time by a message to the contact option described in this privacy policy.

The advertising mailings are carried out by a service provider as processing on our behalf, to whom we pass on your data for this purpose.

6. COOKIES AND OTHER TECHNOLOGIES

6.1 GENERAL INFORMATION

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognise your browser on your next visit (persistent cookies).

Protection of privacy on terminal devices
When you use our online offering, we use technologies that are strictly necessary in order to be able to provide the telemedia service expressly requested by you. The storage of information in your terminal device or access to information already stored in your terminal device does not require consent in this respect.

In the case of functions that are not strictly necessary, the storage of information in your terminal device or access to information already stored in your terminal device requires your consent. We point out that if consent is not given, parts of the website may not be fully usable. Any consents you have given remain in place until you adjust or reset the respective settings in your terminal device.

Any downstream data processing by cookies and other technologies
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping basket function). Through these technologies, the IP address, time of the visit, device and browser information as well as information about your use of our website (e.g. information on the contents of the shopping basket) are collected and processed. This serves legitimate interests, which prevail in the context of a balancing of interests, in an optimised presentation of our offering pursuant to Art. 6(1) sentence 1(f) GDPR.

In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consents to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Insofar as you have consented to the use of the technologies pursuant to Art. 6(1) sentence 1(a) GDPR, you can withdraw your consent at any time by a message to the contact option described in the privacy policy. Alternatively, you can also call up the following link: https://www.shoepassion.de/datenschutz?cmpscreen. If cookies are not accepted, the functionality of our website may be restricted.

6.2 USE OF THE “CONSENTMANAGER” TOOL OF CONSENTMANAGER AB FOR THE MANAGEMENT OF CONSENTS

On our website we use “Consentmanager” to inform you about the cookies and the other technologies that we use on our website, and to obtain, manage and document your consent, where required, to the processing of your personal data by these technologies. Pursuant to Art. 6(1) sentence 1(c) GDPR, this is necessary to fulfil our legal obligation, to which we are subject, under Art. 7(1) GDPR to be able to prove your consent to the processing of your personal data. “Consentmanager” is an offering of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.

After you submit your cookie declaration on our website, the web server of Consentmanager stores your IP address, browser, language and the website accessed. The IP is also processed in order to determine the visitor’s country from it. In addition, cookies are used which contain information about your consent behaviour, in particular the status and date of consent.

The duration of data storage depends on your active user settings on our website, and the data is deleted after 2 years, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1(a) GDPR by means of a renewed prompt or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this policy.

7. USE OF COOKIES AND OTHER TECHNOLOGIES FOR WEB ANALYTICS AND ADVERTISING PURPOSES

Insofar as you have given your consent to this pursuant to Art. 6(1) sentence 1(a) GDPR, we use the following cookies and other technologies of third-party providers on our website. Once the purpose has ceased and we have ended our use of the respective technology, the data collected in this connection is deleted. You can withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

7.1 USE OF GOOGLE SERVICES FOR WEB ANALYTICS AND ADVERTISING PURPOSES

We use the technologies described below of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information about your use of our website automatically collected by the Google technologies is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.  Where your IP address is collected via the Google technologies, it is shortened before storage on Google’s servers by activating IP anonymisation. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. Unless stated otherwise for the individual technologies, the data processing takes place on the basis of an agreement between joint controllers concluded for the respective technology pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in the Google privacy notices.

GOOGLE ANALYTICS

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of the visit, device and browser information as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is in principle not merged with other data from Google. The data processing takes place on the basis of an agreement on processing by Google as a processor.

For the purpose of optimised marketing of our website, we have activated the data sharing settings for "Google products and services" . In this way, Google can access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The sharing of data with Google under these data sharing settings takes place on the basis of an additional agreement between controllers. We have no influence on the subsequent data processing by Google.

For web analytics, the extension function of Google Analytics, Google Signals, enables so-called “cross-device tracking”. Insofar as your internet-enabled devices are linked to your Google account and you have activated the “personalised advertising” setting in your Google account, Google can create reports on your usage behaviour (in particular cross-device user numbers), even if you change your terminal device. No processing of personal data by us takes place in this respect; we merely receive statistics created on the basis of Google Signals.

GOOGLE ADS

For advertising purposes in the Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website, which enables interest-based advertising automatically through the collection and processing of data (IP address, time of the visit, device and browser information as well as information about your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Further data processing takes place only if you have activated the “personalised advertising” setting in your Google account. If in this case you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have arrived at our website via an advertisement from Google Ads. For this purpose, cookies may be used and data (IP address, time of the visit, device and browser information as well as information about your use of our website on the basis of events specified by us such as, e.g., visiting a website or newsletter registration) may be recorded, from which usage profiles are created using pseudonyms.

GOOGLE MAPS

For the visual display of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google and it is then processed by Google. We have no influence on this subsequent data processing.

GOOGLE RECAPTCHA

For the purpose of protecting against misuse of our web forms and against spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of the visit, browser information as well as information about your use of our website) and, by means of so-called JavaScript and cookies, carries out an analysis of your use of our website. In addition, other cookies stored in your browser by Google services are evaluated. No personal data is read out or stored from the input fields of the respective form.

GOOGLE FONTS

For the uniform display of the content on our website, the script code “Google Fonts” collects data (IP address, time of the visit, device and browser information), transmits it to Google and it is then processed by Google. We have no influence on this subsequent data processing.

YOUTUBE VIDEO PLUGIN

For the integration of third-party content, the YouTube video plugin, in the extended data protection mode that we use, collects data (IP address, time of the visit, device and browser information), transmits it to Google and it is then processed by Google, only if you play a video.

7.2 USE OF MICROSOFT SERVICES FOR WEB ANALYTICS AND ADVERTISING PURPOSES

We use the technologies described below of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. The information about your use of our website automatically collected by the Microsoft technologies is generally transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.  Further information on data processing by Microsoft can be found in the Microsoft privacy notices.

MICROSOFT ADVERTISING

For advertising purposes in the Bing, Yahoo and MSN search results and on third-party websites, the so-called Microsoft Advertising Remarketing cookie is set when you visit our website, which enables interest-based advertising automatically through the collection and processing of data (IP address, time of the visit, device and browser information as well as information about your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages you have visited.

For website analysis and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behaviour if you have arrived at our website via an advertisement from Microsoft Advertising. For this purpose, cookies may be used and data (IP address, time of the visit, device and browser information as well as information about your use of our website on the basis of events specified by us such as, e.g., visiting a website or newsletter registration) may be recorded, from which usage profiles are created using pseudonyms. Insofar as your internet-enabled devices are linked to your Microsoft account and you have not deactivated the “interest-based advertising” setting in your Microsoft account, Microsoft can create reports on usage behaviour (in particular cross-device user numbers), even if you change your terminal device, so-called “cross-device tracking”. No processing of personal data takes place by us in this respect; we merely receive statistics created on the basis of Microsoft UET.

7.3 USE OF FACEBOOK SERVICES FOR WEB ANALYTICS AND ADVERTISING PURPOSES

USE OF FACEBOOK PIXEL

We use the Facebook Pixel as part of the technologies described below of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). With the Facebook Pixel, data (IP address, time of the visit, device and browser information as well as information about your use of our website on the basis of events specified by us such as, e.g., visiting a website or newsletter registration) is automatically collected and stored, from which usage profiles are created using pseudonyms. For this purpose, when you visit our website, the Facebook Pixel automatically sets a cookie, which by means of a pseudonymous cookie ID automatically enables your browser to be recognised when you visit other websites. Facebook (by Meta) will merge this information with further data from your Facebook account and use it to compile reports on website activities and to provide further services connected with website use, in particular personalised and group-based advertising.
The information about your use of our website automatically collected by the Facebook (by Meta) technologies is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. For the USA there is no adequacy decision of the European Commission. Insofar as the data transfer to the USA falls within our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the privacy notices of Facebook (by Meta).

FACEBOOK ADS (AD MANAGER)

Via Facebook Ads we advertise for this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, in particular the decision on the placement of the advertisements for individual users. Unless stated otherwise for the individual technologies, the data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

On the basis of the statistics on visitor activities on our website created via Facebook Pixel, we run group-based advertising on Facebook (by Meta) via Facebook Custom Audience by determining the characteristics of the respective target group.

On the basis of the pseudonymous cookie ID set by the Facebook Pixel and the collected data about your usage behaviour on our website, we run personalised advertising via Facebook Pixel Remarketing. 

Via Facebook Pixel Conversions we measure, for web analytics and event tracking, your subsequent usage behaviour if you have arrived at our website via an advertisement from Facebook Ads. The data processing takes place on the basis of an agreement on processing by Facebook (by Meta) as a processor.

7.4 OTHER PROVIDERS OF WEB ANALYTICS AND ONLINE MARKETING SERVICES

USE OF HOTJAR FOR WEB ANALYTICS

For the purpose of website analysis, technologies of Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta (“Hotjar”) automatically collect and store data (IP address, time of the visit, device and browser information as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised usage profiles are not merged with personal data about the bearer of the pseudonym without separately given, express consent. Hotjar acts for us on our behalf.

USE OF CRITEO FOR ONLINE MARKETING

Via the advertising partner Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”) we advertise for this website in search results and on third-party websites. When you visit our website, a retargeting cookie of Criteo or its partners is automatically set, which enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. We determine the parameters of the respective advertising campaign. Criteo is responsible for the exact implementation (e.g. the decision on the placement of the individual advertisements). The data automatically collected by Criteo (IP address, time of the visit, device and browser information as well as information about your use of our website) is, where applicable, merged by Criteo with information from other sources and transmitted to Criteo advertising partners.

 USE OF AWIN FOR ONLINE MARKETING

Via the advertising partner AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany (“AWIN”) we market space for advertisements of third-party providers. These advertisements are displayed to you at various places on this website. By means of cookies, AWIN can track the course of the respective order and in particular understand that you clicked on the respective advertisement and then ordered the product. For this purpose, data (IP address, time of the visit, device and browser information as well as information about your use of our website) is collected, transmitted to AWIN and processed by AWIN. We have no influence on this data processing. The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.

USE OF VIMEO VIDEO PLUGIN FOR THE INTEGRATION OF THIRD-PARTY CONTENT

For the integration of third-party content, the video plugin of Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”) collects data (IP address, time of the visit, device and browser information), transmits it to Vimeo and it is then processed by Vimeo. The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Google Analytics is automatically integrated in the Vimeo video plugin. For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of the visit, device and browser information as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information about your use of our website automatically collected by Google is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Your IP address is shortened before storage on Google’s servers by activating IP anonymisation. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. We have no influence on or access to the data processing by Vimeo, including the settings and the results of Google Analytics. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.

7.5 KLAR ATTRIBUTION

On our website we use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 München, Germany). On our behalf, Klar collects, processes and stores data on this website and its subpages for reach measurement and statistical analysis. This collection takes place on the following legal basis:

If the user has given consent pursuant to Article 6(1) sentence 1(a) GDPR and Section 25(1) sentence 1 Telekommunikation-Telemedien-Datenschutz-Gesetz (German Telecommunications Telemedia Data Protection Act, TTDSG), the data to be processed is collected on a user-related basis.

For the aforementioned different types of recording, different cookies are used in order to ensure the respective type of recording.

Cookie - Objection

To object to the use of Klar in general, please use this link. This sets a cookie named “do_not_track” from the domain “n91berlin.com”. Please do not delete it, as otherwise it cannot be guaranteed that you are not tracked by Klar.

Information on data protection and data use by Klar can be found on the following website: https://www.getklar.com/data-protection.

8. PERSONALISED ADVERTISING AND DATA MATCHING

We use these Customer Match lists in the context of our advertising measures for customer matching. For this purpose, lists with encrypted ("hashed") user data (e-mail address, telephone number, postal address, customer-specific identifiers) are sent to the provider. The provider then compares whether the transmitted user data matches existing customers of the provider. This only happens if we have received your consent for this. You can withdraw this measure at any time, without any formalities. To do so, simply send an e-mail to service@n91berlin.com with the keyword “Withdrawal Marketing”. Your data will then be removed from the providers’ customer match list. Please make sure that, when withdrawing, you use the e-mail address for which the withdrawal is to apply. Otherwise, unfortunately, we are not able to assign your withdrawal to your customer data accordingly.

We use the following technologies for the matching:

8.1 Facebook Custom Audience with e-mail addresses

Facebook Custom Audiences is a remarketing campaign in which the advertiser encrypts the e-mail addresses of its customers, collected and gathered for this purpose, by means of an algorithm and uploads this non-personal checksum (hash values) to the Facebook server. Facebook can compare this transmitted data with its inventory list of encrypted user IDs and store the matches in the advertiser’s customer account as “Customer Audiences” (= user-defined target group) and advertise to them in a targeted manner. At the end of the matching, all uploaded hash values are deleted again.

Further information on the scope of the collection and the further processing and use of the data by Facebook Custom Audiences can be found in Facebook’s privacy policies, which are listed, among other places, at https://www.facebook.com/ads/website_custom_audiences/ and at https://www.facebook.com/privacy/explanation . The terms for Custom Audiences can be found at https://www.facebook.com/ads/manage/customaudiences/tos.php. Via the following link you can opt out of the collection and use of information for online advertising directed at specific target groups: https://www.facebook.com/ads/website_custom_audiences/.

8.2 Google Custom Match with e-mail addresses

With Google Customer Match, advertisers import into their Google AdWords account their own lists of customer e-mail addresses, which are encrypted by means of an algorithm. Customer Match compares the anonymised e-mail lists in AdWords with its own database of registered users and can thus create targeted advertisements within Google Search, YouTube and Gmail and optimise campaigns independently. In addition, on the basis of the uploaded user lists, Google can also find similar customers with similar interests.

With the “customer matching” function, Google creates a central source of information for the retargeting of customers (i.e. visitors are recorded on one website and addressed again with targeted advertising on other websites). The policies on the “customer matching” function apply to the data made available by the advertiser.

For further information, please refer to the Google privacy policy at: https://www.google.com/intl/de/policies/privacy/. You can edit the settings for personal data and privacy under Google “My Account”.

8.3 Google Remarketing / Google Ads

This website uses Google Remarketing, software that serves to present interest-based advertisements to users of our websites. Google Remarketing uses cookies for this purpose (see above). The data processing in this connection takes place on the basis of Art. 6(1)(f) GDPR. This function can be technically prevented by the user of the websites by deactivating JavaScript and cookies in their web browser.

Details on the settings necessary for this can be found in the product descriptions and instructions of the various browser providers. Data processing by Google can also be prevented by the user using a browser add-on for deactivating Google. Further information on the terms of use and data protection of Google Remarketing/AdWords can be found at https://policies.google.com/technologies/ads?hl=de.

9. SOCIAL MEDIA

OUR ONLINE PRESENCE ON FACEBOOK (BY META), TWITTER, INSTAGRAM (BY META), YOUTUBE, PINTEREST, LINKEDIN

Insofar as you have given your consent to this vis-à-vis the respective social media operator pursuant to Art. 6(1) sentence 1(a) GDPR, when you visit our online presences on the social media named above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used, e.g., to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights and setting options in this regard for the protection of your privacy, please refer to the providers’ privacy notices linked below. Should you nevertheless need help in this regard, you can contact us.

Facebook (by Meta) is an offering of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information about your use of our online presence on Facebook (by Meta) automatically collected by Meta Platforms Ireland is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.  The data processing in the context of a visit to a Facebook (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

Twitter is an offering of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). The information about your use of our online presence on Twitter automatically collected by Twitter is generally transferred to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”) The information about your use of our online presence on Instagram automatically collected by Meta Platforms Ireland is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.  The data processing in the context of a visit to an Instagram (by Meta) fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here.

YouTube is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information about your use of our online presence on YouTube automatically collected by Google is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

Pinterest is an offering of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information about your use of our online presence on Pinterest automatically collected by Pinterest is generally transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

LinkedIn is an offering of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information about your use of our online presence on LinkedIn automatically collected by LinkedIn is generally transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission. 

10. CONTACT OPTIONS AND YOUR RIGHTS

10.1 YOUR RIGHTS

As a data subject you have the following rights:

  • pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified there;
  • pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless the further processing is necessary
    • for exercising the right of freedom of expression and information;
    • for compliance with a legal obligation;
    • for reasons of public interest or
    • for the establishment, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
    • the accuracy of the data is contested by you;
    • the processing is unlawful, but you refuse its erasure;
    • we no longer need the data, but you need it for the establishment, exercise or defence of legal claims or
    • you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual place of residence or workplace or of our registered office for this purpose.

 

Right to object

Insofar as we process personal data as explained above to safeguard our legitimate interests, which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing takes place for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing takes place for other purposes, you only have a right to object where there are grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

This does not apply if the processing takes place for direct marketing purposes. In that case we will no longer process your personal data for this purpose.


10.2 CONTACT OPTIONS

If you have any questions about the collection, processing or use of your personal data, about information, rectification, restriction or erasure of data as well as withdrawal of any consents given or objection to a particular use of data, please contact our company data protection officer.

Data protection officer:

Wolfener Straße 32-34
12681 Berlin
Germany

service@n91berlin.com