10.2 Advertising tools
For detailed information about what information is collected via the third-party advertising tools, how it is used and shared, please refer to their respective privacy policies, which are linked below.
We use marketing and remarketing-functions of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”) on the Website. These functions allow us to display relevant content based on what pages you have visited on this Website and other websites.
The information collected by Google about your use of this Website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
(A) Google Adwords Conversion Tracking
As part of our Google AdWords’ conversion tracking, Google places a cookie on your computer (“Conversion cookie”) when you click on our ads placed in Google Search or on selected Google Display Network sites. This allows Google and us to determine the total number of users who clicked on our Google ads and later visited this Website. Google only makes data collected about you available to us anonymously and in statistical form, so we cannot draw any conclusions about your identity from such data. The information is used to generate conversion statistics and to optimize our ads on Google. Conversion cookies are not used by Google for personalized ad targeting and persist for a limited time only.
(B) Google Dynamic-Remarketing
In addition we use Google’s remarketing technology which helps us to address our users also on other websites (within the Google Display Network) specifically with targeted advertising, which is based on their prior visits to this Website.
(C) Google Adsense
We use Google AdSense Advertising on our website, in order to serve ads to our users based on previous visits to our site and other sites on the Internet. The ads served will be targeted based on your previous browsing history.
(D) Google DoubleClick for Publishers
We use DoubleClick for Publishers on this Website for our Personalized Coupons (please see section 7.1). Google DoubleClick enables us and the respective retailers to provide you with vouchers based on the content of your shopping basket on the retailers website. If you have created a shopping basket but have not checked-out yet, and subsequently call this Website, information regarding your open shopping basket will be shared with Google (for example purchase value and product category). We can then offer you suitable vouchers. This service is carried out completely automatically. We do not get access to any personal identifiable information, but can only define general criteria of segmentation (such as purchase value, product category) on the basis of which certain vouchers are issued to our users.
If you have a Google Account, you may disable ad personalization through Google’s advertising settings: https://myaccount.google.com/intro/privacy#ads. You need to be signed in to Google services to do so and the settings only apply while you are signed in. Alternatively you can also disable ads personalization by installing the browser plugin available under this link: https://www.google.com/settings/ads/plugin?hl=en or by using the browser tool provided on the site of Digital Advertising Alliance: http://optout.aboutads.info/?c=2#!/.
We use pixels on this Website, which are provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ltd”).
(A) Custom Audiences from Website (USER-DEFINED TARGET GROUP)
With the help of these pixels, Facebook Ltd. is able to determine a target group for the display of ads for this Website within the social network (“Re-Targeting”). Accordingly, we use these pixels to address our users with targeted advertising based on their prior visits to this Website while they are logged in to Facebook.
(B) Conversion Tracking
The pixel also helps us to measure and evaluate the effectiveness of our Facebook ads for statistical and market research purposes. For example, with the help of the pixels Facebook may determine how many users clicked on an ad placed on our behalf and were subsequently redirected to this Website.
(C) Facebook Impressions
In addition we receive a report from Facebook with information about user interactions with our ads placed on Facebook (e.g. number of “views”, “likes” or “comments”).
Any data collected by Facebook Ltd. is transmitted directly to one of their servers and stored there. If you are logged in to Facebook or log in to Facebook after visiting this Website, Facebook Ltd. may correlate your visit to this Website directly with your Facebook profile and use this data for its own advertising purposes. If you visit other websites that also use Facebook Pixel, this information may also be linked to your Facebook profile.
For detailed information about what information Facebook collects and how it is used and shared, please refer to Facebook’s data policy: https://www.facebook.com/policy.php.
If you have a Facebook account, you may disable personalized advertising from Facebook through the advertising settings in your Facebook account: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be signed in to your Facebook account to do so. Alternatively, you may disable personalized advertising from Facebook following the instructions on the website of the European Interactive Digital Advertising Alliance http://www.youronlinechoices.com/uk/your-ad-choices.
11 DISCLOSURE OF YOUR PERSONAL DATA
We only disclose your personal data to third parties, if this is necessary for the purpose of providing this Website and services, we are obligated or entitled here to by contract or law or you have granted your explicit consent.
11.1 Business partners
When you click on a promotional offer we may assign a unique identifier to this click (“Clickout-ID”), and provide this Clickout-ID to the respective business partner, on whose behalf the promotional offer is displayed. If you subsequently register or purchase something on the website of our business partner (e.g. in an online-shop), our business partner will be able to identify you as having come from our Website and we will earn our commission. We also work with several Affiliate Networks, which connect us with merchants and offer to take over the technical and billing process. In these cases we pass on the Clickout-ID to such Affiliate Networks. These Affiliate Networks may set their own tracking cookies when you visit our Website and click on an offer (e.g. on a voucher).
11.2 Local group company
In order to provide a good and efficient customer service, the customer relationship with you will be managed directly at local level by the Local Group Company. For example, the Local Group Company answers to requests that you may submit through this Website or where otherwise necessary to handle the customer relationship with you. It also helps us managing the Newsletter and its content. For these purposes, the Local Group Company may get access to your personal data controlled by us and may process personal data by itself.
11.3 Service providers
We also work with technical service providers, who may have access to your personal data, but only to the extent necessary to perform their respective services. For instance we engage technical service providers to manage our Newsletter or to host or surveys. These service providers may not disclose your personal data to third parties or use these for any other purposes than instructed.
We use Amazon Web Services (“AWS”) for hosting this website. AWS is a service of Amazon Web Service Inc, P.O. Box 81226 Seattle, WA 98108-1226, USA (“Amazon”). The data is stored exclusively in a German data center (Frankfurt am Main), which is certified according to ISO 27001, 27017 and 2018 as well as PCI DSS Level 1. All data stored by us on Amazon’s system is under our sole control and is automatically encrypted. Amazon is not allowed to access or use our data for any purpose whatsoever. For more information on AWS and data protection, please visit https://aws.amazon.com/compliance/gdpr-center/ and https://aws.amazon.com/privacy/.
11.4 Data transfer outside of the EU
Some of these service providers are based in a country outside the EU/EEA. However, we exclusively work with companies that offer an appropriate data protection level in line with the stipulations of the GDPR. We also have appropriate agreements in place to ensure that the service providers will take all necessary measures to protect your personal data in accordance with applicable requirements.
The data transmission to service providers in the USA is carried out on the basis of the so-called “EU-US Privacy Shield” or on so-called “standard contractual clauses” of the EU-Commission. The EU-US Privacy-Shield is an agreement between the European Union and the USA that guarantees the compliance with European data protection standards in the USA. The standard contract clauses of the EU-Commission concerns a contract, in which the service provider is obligated to protect personal data, in line with the contractual regulations to process these at our order and in particular not to forward these to third parties. A free copy of the standard contract clauses will be provided to you upon request. For this purpose please contact us and send a stamped envelope for a reply to the address stated under Section 13.
12 YOUR RIGHTS
In respect to our processing of personal data related to you, you are entitled to the following rights free of charge.
12.1 Right to withdraw consent pursuant to art. 7 GDPR
If you have given us your consent to process your data but change your mind later, you have the right to withdraw your consent at any time by sending an email or written letter to our contact address as stated below. We will stop processing your data accordingly.
12.2 Right of access pursuant to Art. 15 GDPR
You have the right to obtain confirmation from us as to whether or not any personal data concerning your person is being processed by us and, if this is the case, you shall have the right to access your information pursuant to Art. 15 GDPR. However with regard to pseudonymised usage profiles created by us we are not able to allocate these to individual persons. Accordingly, we cannot provide any information relating to these data, unless you provide us with information, which enables us to allocate such data to your person. We will point this out to you in case of an inquiry.
12.3 Right to rectification pursuant to Art. 16
You have the right to request us to rectify any inaccurate or incomplete personal data we hold about you.
12.4 Right to erasure pursuant to Art. 17 GDPR
You have the right to obtain the erasure of your personal data we hold about you, if we do not have a legal reason to continue to process and hold it.
12.5 Right to restrict processing pursuant to Art. 18 GDPR
You have the right to ask us to restrict how we process your data subject to Art. 18 GDPR. In this case we will be permitted to store the data but not further process it.
12.6 Right to data portability pursuant to Art. 20 GDPR
You are entitled to receive personal data that you have provided to us with your consent in a structured, commonly used and machine-readable format or – if technically feasible – to demand that we transfer those data to a third party.
12.7 Right to object to data processing pursuant to Art. 21 GDPR
12.8 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the competent supervisory authority if you feel that the processing of your data is carried out by us by breaching applicable law. You can in particular reach out to the supervisory authority which is responsible at your place of residence or to the supervisory authority responsible for us.
The lead supervisory authority that is responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
[Bavarian Data Protection Authority]
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
13 CONTACT DATA AND PROTECTION OFFICER
If you have questions relating to this privacy statement, if you wish to exercise any of your rights or if you have any other concerns regarding the processing of your personal data by us, please contact us by email at email@example.com and provide the details of the request that you are making, for example by specifying personal data you want access to. You can also contact us under the following contact details:
Phone: +49 (0) 89 96058699
You can also contact our group commissioner for data protection (Michael Mayer) at these contact details.