1. Name and contact data of the data controller and also the company data protection officer
This Data Protection Policy covers data processing by:
Data controller: Reich Online Services GmbH (hereinafter Reich Online) Högeringer Str. 27, D-83071 Stephanskirchen, DeutschlandEmail: firstname.lastname@example.org
The data protection officer of Reich Online can be reached under the aforemen-tioned address, attn. Data Protection Department (Abteilung Datenschutz), or un-der email@example.com.
2. Collection and storage of personal data and also nature and purpose and their use
a) When visiting the website
When you access our website www.calida.com , the browser on your end device automatically sends information to our website server. This information is temporarily saved in a log file. The following infor-mation is collected without any action on your part and saved until automated deletion:
We process these data for the following purposes:
The legal foundation for the data processing is Art. 6 Subs. 1 Sentence 1 lit. f General Data Protection Regulation (GDPR). Our justified interest follows from the above purposes for the data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
b) When ordering as a guest
If you would like to order products as a guest via our website, we collect the following information:
These data are collected
The data are processed upon your query and under Art. 6 Subs. 1 Sentence 1 lit. b GDPR are required for the stated purposes of fulfilling the contract and precontractual measures.
To ensure smooth and simple processing of your order and for faster clarification of queries, you can also provide other data:
Provision of these data is voluntarily.
Your personal data which we collect for the order are saved until the end of the statutory warranty period and then automatically deleted, unless we are obliged to longer storage under Article 6 Subs. 1 Sentence 1 lit. c GDPR due to tax- and commercial-law retention and documentation duties or you have consented to a prolonged period under Art. 6 Subs. 1 Sentence 1 lit. a GDPR.
c) When setting up a user account
You can set up a password-protected user account with us in which we save your personal data. The purpose of this is to provide you with the greatest possible comfort through easier, faster and more personal purchasing in the processing of your orders.
If you would like to set up a password-protected user account with us, we need the following information from you:
In addition, to open a user account you have to enter a password of your choice. Together with your email address this provides access to your user account. In your user account you can view and change the data saved about you at any time.
For faster clarification of queries, you can also provide your telephone number. This is voluntarily and not required for opening the user account.
In addition, you can state your date of birth so that we can surprise you with a present (e.g. a discount or a special offer) if you subscribe for the newsletter.
We only save your personal data in a user account, if you have voluntarily given your consent to us under Art. 6 Subs. 1 Sentence 1 lit. a GDPR.
Creating a user account is not required for using our website or for orders you would like to place with us. We also offer you the possibility of placing your order as a guest (see section 2. b)). In that case however, you have to enter all your data again for every order.
After your user account is deleted, your personal data are automatically deleted, unless we are obliged to longer storage under Article 6 Subs. 1 Sentence 1 lit. c GDPR due to tax- and commercial-law retention and documentation duties or you have consented to a prolonged period under Art. 6 Subs. 1 Sentence 1 lit. a GDPR.
d) When registering for our newsletter
In so far as you have expressly consented under Art. 6 Subs. 1 Sentence 1 lit. a GDPR, we will use your email address to regularly send you our personalised newsletter. Providing an email address is sufficient for receiving the newsletter.
Cancellation is possible at any time, e.g. via a link at the end of every newsletter. Alternatively, you can cancel at any time by sending an email to firstname.lastname@example.org.
e) When registering with "CALIDA friends+forever"
The information on data protection when registering for the "CALIDA friends+forever" loyalty program can be found here www.calida.com/Our-World/Friends-Forever/Data-Privacy/.
f) When using our contact form
If you have questions of any nature, you can get in touch with us via a form available in the website contact information. This requires the stating of a valid email address and also your given name and surname so that we know who sent the query and how we can answer it. The telephone number can be provided voluntarily.
The data for the purpose of contacting us are processed under Art. 6 Subs. 1 Sentence 1 lit. a GDPR on the basis of your voluntarily given consent.
The personal data we collected for using the contact form will be automatically de-leted after your query has been dealt with.
3. Transfer of data to third parties
Your personal data will not be transferred to third parties for purposes other than those given below.
a) Transfer to CALIDA AG
Your personal data will also be transferred to CALIDA AG, Industrie Münigen, Bahnhofstrasse CH-6208 Oberkirch, Schweiz.
The data will be transferred under the joint responsibility for data protection for internal administrative purposes and for ensuring central customer management. The data will be transferred on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR, whereby the stated purposes are to be considered as justified interests within the meaning of this regulation.
b) For contract processing
In so far as this is legally permissible and under Art. 6 Subs. 1 Sentence 1 lit. b GDPR required for the processing of contractual relationships with you, your personal data will be transferred to third parties. This includes in particular transfer to shipping companies for the purpose of delivering the goods you ordered and the transfer of payment data to payment service providers and/or banks to carry out a payment transaction. The transferred data may be used by the third parties solely for the stated purposes.
c) For identity and creditworthiness checks
If we make advance outlays for your purchase, for example for a purchase on account, we may obtain a credit check on the basis of mathematical-statistical methods pursuant to Art. 6 Subs. 1 Sentence 1 lit. a and b GDPR on the basis of your express consent and if it is required for concluding or fulfilling the contract.
To that end, we transfer your personal data required for the creditworthiness checks (given name and surname, street, number, postal code, town, date of birth, telephone number and in the case of purchase per direct debit the given bank de-tails) to an external service provider. For identity and creditworthiness checks we work together with creditpass GmbH.
On the basis of your personal data, creditpass GmbH gives us information about the statistical probability of payment default. We use this information for a balanced decision on creating, performing or ending the contractual relationship.
The credit check can contain probabilities (score values), which are calculated on the basis of scientifically recognised mathematical-statistical methods and which include inter alia address data in their computation.
Further information on this can be found in the creditpass GmbH data protection policy https://creditpass.eu/service/privacy-statement/.
The cookie stores information which arises in conjunction with the specifically used end device. This does not mean, however, that this gives us direct knowledge of your identity.
Cookies are used on the one hand so that we can make the use of our offerings more pleasant for you. Therefore, we use session cookies to recognise that you have already visited individual pages our website, you have already logged on in your user account or for displaying the shopping cart. These are automatically deleted after you leave our website.
In addition, we use temporary cookies saved on your end device for a certain defined period to optimise user friendliness. If you visit our website again to use our services, it is automatically recognised that you were already here before and which entries and settings you made so that you do not have to repeat them.
The data processed by cookies are required for the stated purposes to protect our justified interests and also of third parties under Art. 6 Subs. 1 Sentence 1 lit. f GDPR.
Most browsers accept cookies automatically. You can configure your browser, however, so that no cookies are saved on your computer or a message always ap-pears before a new cookie is created. Complete deactivation of cookies can, however, lead to you not being able to use all the functions of our website.
5. Analytical tools
The following tracking and targeting measures which we use are carried out on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR.
With the deployed tracking measures we want to ensure an appropriate design and continuous optimisation of our website. On the other hand, we use tracking measures to compile statistics on the use of our website and to evaluate the optimisation of our offerings for you.
Via the deployed targeting measures we want to ensure that you only see advertising tailored to your actual or presumed interests on your end devices.
These interests are to be considered as justified within the meaning of the aforementioned regulation.
The pertinent data processing purposes and data categories can be found in the corresponding tracking and targeting tools.
This website uses technologies from Criteo GmbH to collect and save information on the surfing behaviour of website visitors in anonymised form for marketing purposes. This is done by means of cookies (see section 4). Criteo uses an algorithm to analyse surfing behaviour and can then display targeted personalised advertising banners adverts on other websites (publisher). Under no circumstances can the collected data be used to personally identify visitors of this website. The collected data will be used solely to improve our offerings. There will be no other use or transfer to third parties.
You can object to the anonymised analysis of your surfing behaviour on this web-site by clicking on this link: https://www.criteo.com/privacy/.
If you have opted out (opt-out cookie) and you would like to see personalised Criteo banners again, please click here: https://www.criteo.com/privacy/. Further information about the Criteo technology can be found in the Criteo data protection policy: https://www.criteo.com/privacy/.
b) intelliAd and econda
This website uses technologies from econda GmbH and also intelliAd Media GmbH (hereinafter "econda" and "intelliAd") to collect and save anonymised data from which use profiles are created with the use of pseudonyms. These use profiles are used to analyse visitor behaviour and to improve and tailor the design of our offerings. Cookies may be used for this (see section 4). Without your separately granted express consent, the pseudonymised use profiles will not be merged with personal data on the bearer of the pseudonym. In particular, IP addresses are made unreadable immediately upon entry, so that an allocation of user profiles and IP addresses is not possible. You can object to data collection and storage at any time with effect for the future by clicking on these links:
Revocation intelliAd https://login.intelliad.com/optout.php Revocation econda https://www.econda.de/en/data-storage-opt-out/.
After your revocation an opt-out cookie will be saved on your end device. If you delete your cookies, you have to click on the link again.
Further information about data protection in conjunction with intelliAd and econda can be found here:
Data protection policy intelliAd http://www.intelliad.com/data-protection-provisions/
Data protection policy econda https://www.econda.de/en/.
c) New Relic
We use the "New Relic" web analysis service from New Relic Inc., 188 Spear Street, Suite 1200, San Francisco, CA 94105, USA, for reachability and performance monitoring of our server. Cookies may be used for this (see section 4). Pseudonymised use profiles are used to measure and analyse the technical performance data (for example response and loading times) which help to improve server performance.
Further information about data protection in conjunction with New Relic can be found here https://newrelic.com/privacy.
We transfer your IP address to the service provider MaxMind, Inc. (14 Spring Street, 3rd Floor Waltham, MA 02451, hereinafter "MaxMind"), to determine your approximate location (e.g. country, town, district) and offer you individual store locator services based on your current location (e.g. the location of the nearest store). The IP address will be sent to and saved on a MaxMind server in the USA. MaxMind is subject to the EU-US Privacy Shield, so that an adequate data level is guaranteed. We use your location data processed in that manner solely for this function. The data are deleted once you finish using it.
Further information about data protection in conjunction with MaxMind can be found here https://www.maxmind.com/en/privacy_policy?pkit_lang=en.
When opening the store finder you will also be asked by your browser whether you want to send your exact location to us. In so far as you give your consent to the browser operator pursuant to Art. 6 Subs. 1 Sentence 1 lit. a GDPR, your browser will send your exact location to us, so that as part of the store locator function we can offer you individual services (e.g. the location of the nearest store) based on your exact location (address). We use your location data processed in that manner solely for this function. The data are deleted once you finish using it.
In your browser you can make a corresponding setting to the browser software to block geo-localisation; we must point out that in this case you may not be able to use all the functions (e.g. Storefinder) on this website.
These technologies enable us to provide you with targeted advertising reflecting your personal interests. The cookies used collect information, for example, about which of our products you are interested in. From this information we can also show you offers on third-party websites that are geared especially to your inter-ests as reflected in your past user behaviour. Your user behaviour is captured and analysed solely pseudonymised and it does not enable us to identify you. In par-ticular, the information is not merged with your personal data.
The cookie is automatically deleted after 30 days.
You can also make settings for displaying interest-based advertising via the Google advertising settings manager.
6. Social media plug-ins
We use social plug-ins on our website on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR in order to make our company more well known. The underlying promo-tional purpose is to be considered as a justified interest within the meaning of the GDPR. The responsibility for the data protection compliant operation is to be ensured by the pertinent provider. We integrate these plug-ins using the two-click method so as to give visitors to our website the best possible protection.
Our website uses plug-ins from the Facebook social network which is offered by Facebook Inc.. The Facebook plug-ins are marked by a Facebook logo or the label "Like" or "Share". An overview of the Facebook plug-ins and their appearance can be found under https://developers.facebook.com/docs/plugins.
If you open a page of our website that contains such a plug-in, your browser opens a direct connection to Facebook’s servers. Facebook will send the content of the plug-ins directly to your browser and integrate it in the website.
This integration will give Facebook the information that your browser has opened the corresponding page of our website, even if you do not have a Facebook profile or not currently logged in with Facebook. This information (including your IP ad-dress) will be sent by your browser directly to a Facebook server in the USA and saved there.
If you are logged in with Facebook, Facebook can directly associate the visit to our website with your Facebook profile. If you interact with the plug-ins, for example click the "Like" button, this information will also be directly sent to a Facebook server and saved there. The information is also published on your Facebook profile and displayed to your Facebook friends.
The purpose and scale of the data collection and the further processing and use of the data by Facebook and also your pertinent rights and settings possibilities to protect your private sphere can be found in the Facebook data protection information: http://www.facebook.com/policy.php.
If you do not want Facebook to associate the information collected about your visit to our website directly to your Facebook profile, you have to log out from Facebook before visiting our website. You can also completely block the loading of the Facebook plug-ins with add-ons for your browser, e.g. with the "Facebook Blocker" http://webgraph.com/resources/facebookblocker/.
Plug-ins from the social network Twitter Inc. are also integrated in our website. You can recognise the Twitter plug-ins ("Twitter" button) by the Twitter logo (a white bird on a blue background) and the label "Twitter". If you open a page of our website that contains such a plug-in a direct connection between your browser and the Twitter server will be opened. This will give Twitter the information that you have visited our website with your IP address. If you click on the Twitter button while you are logged in with your Twitter account, you can link the contents of our pages to your Twitter profile. This enables Twitter to associate the visit to our pages to your user account.
We must point out that as provider of the pages we receive no knowledge about the content of the transferred data or their use by Twitter. Further information about this can be found here https://twitter.com/privacy.
If you do not want Twitter to be able to associate the visit to our pages, please log out from your Twitter user account.
Our website uses plug-ins from the Google Plus social network offered by Google Inc.. The plug-ins can be recognised, for example, by buttons or the label "+1" on a white or coloured background. An overview of the Google plug-ins and their appearance can be found here: https://developers.google.com/+/plugins.
If you open a page of our website that contains such a plug-in, your browser opens a direct connection to Google’s servers. Google will send the content of the plug-ins directly to your browser and integrate it in the website. This integration will give Google the information that your browser has opened the corresponding page of our website, even if you do not have a Google Plus profile or not currently logged in with Google Plus. This information (including your IP address) will be sent by your browser directly to a Google server in the USA and saved there. If you are logged in with Google Plus, Google can directly associate the visit to our website with your Google Plus profile.
If you interact with the plug-ins, for example click the "+1ike" button, this infor-mation will also be directly sent to a Google server and saved there. The information is also published on Google Plus and displayed there to your contacts.
The purpose and scale of the data collection and the further processing and use of the data by Google and also your pertinent rights and settings possibilities to protect your private sphere can be found in the Google data protection information https://developers.google.com/+/web/buttons-policy.
If you do not want Google to associate the information collected about your visit to our website directly to your Google Plus profile, you have to log out from Google Plus before visiting our website. You can also completely block the loading of the Google plug-ins with add-ons for your browser, e.g. with the "NoScript" script blocker http://noscript.net/.
7. Transferring the email address to Trusted Shops
In so far as you have given us your consent under Art. 6 Subs. 1 Sentence 1 lit. a GDPR during or after of your order, by setting the corresponding checkbox with the envisaged button ("Rate later"), we will transfer your email address for a reminder to submit an evaluation of your order later to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, so that this reminds you by email to submit an evaluation. This consent can be withdrawn at any time by sending a message to the contact possibilities given below or directly to Trusted Shops.
8. SOVENDUS vouchers
After a purchase at www.calida.com we offer you the possibility to obtain vouchers for online portals via the Sovendus GmbH network.
If you click on a Sovendus GmbH banner after your purchase, we only transfer your personal data (given name and surname, address and email address) to Sovendus GmbH, if you have confirmed your data on the Sovendus GmbH website which then appears, thus giving your consent under Art. 6 Subs. 1 Sentence 1 lit. a GDPR.
The purpose of this data processing is to steer marketing and advertising measures and the sales optimisation.
Further information about data protection in conjunction with Sovendus GmbH can be found here https://www.sovendus.de/en/privacy_policy/.
9. Data subject rights
You have the right:
10. Right to object
In so far as your personal data are processed on the basis of justified interests pursuant to Art. 6 Subs. 1 Sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, in so far as there are grounds arising from your particular situation or it relates to objection to direct advertising. In the latter case, you have a general right to object which we shall heed without the stating of a particular situation.
If you want to exercise your right to object, simply send an email to email@example.com.
11. Data Security
All the data you personally transfer will be sent encrypted with the customary and secure TLS standard (Transport Layer Security). TLS is a secure and proven standard, which is also used for online banking, for example. You can recognise a secure TLS connection inter alia by the "s" appended to the http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continually monitored and improved to reflect technological developments.
12. Actuality of and changes to this Data Protection Policy
This Data Protection Policy is the latest version and was last amended as of 21.03.2018.
The further development of our website and offers on it or changes in statutory or public-authority requirements many render it necessary to amend this Data Protection Policy. The latest version of Data Protection Policy can be downloaded and printed out at any time from the website under www.calida.com/Privacypolicy/.