LANGUAGE

Maybe you will find something here:

BVB-Account

Sign up now or register to secure all BVB benefits:

  • Your central hub for BVB’s digital services.
  • Stay in control: Easily manage your data.
  • Get exclusive perks: Free access to promotions and birthday discounts.

MY PROFILE

Are you sure you want to log out of your BVB account?
Tickets Fanshop BVB-TV Membership Service
Montag 03.06.2019, 1. Fussball - Bundesliga Saison 18/19 - in Dortmund Borussia Dortmund Stadion, SIP, Copyright: Borussia Dortmund GmbH & Co. KGaA Rheinlanddamm 207-209 44137 Dortmund
Samstag 28.02.2015, 1. Fussball - Bundesliga Saison 14/15 - 23. Spieltag in Borussia, BV Borussia Dortmund - FC Schalke 04, BVB Fans Signal Iduna Park , Schals Copyright: Borussia Dortmund GmbH & Co. KGaA Rheinlanddamm 207-209 44137 Dortmund
Tickets Fanshop BVB-TV Membership Service

Privacy Policy | BVB Online Shop

The following provides information about the processing of your personal data when using our online shop at https://shop.bvb.de, as well as in connection with orders, customer accounts, contact requests, and marketing activities.

I. General Information on Data Processing

We process personal data only to the extent necessary for the provision of our online shop, the initiation and execution of contracts, the handling of your enquiries, the fulfilment of legal obligations, the security of our services, and the further purposes described in this Privacy Policy. Where we require your consent, processing will only take place after you have given it. You may withdraw your consent at any time with effect for the future.

This Privacy Policy applies to the BVB Online Shop. For other services of the Borussia Dortmund Group – in particular bvb.de, BVB TV, BVB Ticketing, and other independent services – the respective privacy notices published therein apply.

II. Controller and Data Protection Officer

The controller responsible for the processing of personal data in connection with the operation of the BVB Online Shop is:

BVB Merchandising GmbH
Rheinlanddamm 207–209
44137 Dortmund
Germany
Phone: +49 231 90200
Email: [email protected]

You can reach our Data Protection Officer at:

Rechtsanwalt Ulf Haumann, LL.M.
c/o Borussia Dortmund GmbH & Co. KGaA
Rheinlanddamm 207–209
44137 Dortmund
Email: [email protected]

III. Your Data in the Online Shop

1. Visiting the Online Shop and Server Log Files

When you access our online shop, our system processes technically necessary data that your browser transmits to our server or to technical service providers engaged by us. This includes in particular: IP address, date and time of access, requested page or file, volume of data transferred, HTTP status code, referrer URL, browser type and version, operating system, and language settings.

The processing serves the purpose of providing the online shop, ensuring the stability and security of our systems, preventing misuse, and analysing errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of the online shop. Log data is generally anonymised after seven days, unless longer retention is required to investigate specific security incidents or to establish, exercise, or defend legal claims.

2. Technically Necessary Technologies

We use cookies and similar technologies only to the extent strictly necessary to provide the functions of the online shop that you have explicitly requested. This may include, in particular, the storage of your privacy settings, maintaining a login session, providing and storing the shopping basket, fraud prevention, and technical security. Where access to or storage of information on your terminal device is strictly necessary for these functions, this takes place on the basis of Section 25(2)(2) TDDDG. The subsequent processing of personal data is based, where applicable, on Art. 6(1)(b) GDPR for the initiation or performance of a contract, and otherwise on Art. 6(1)(f) GDPR.

3. Consent Management

We use "consentmanager" (https://www.consentmanager.net/de/datenschutz/) by consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, [email protected]) to obtain, manage, and document your consent for optional technologies. In doing so, we process your selection decision, timestamps, a consent identifier, technical information about your terminal device and browser, and, where applicable, the truncated IP address. The legal basis is Art. 6(1)(c) GDPR where processing serves as proof of your consent, and Art. 6(1)(f) GDPR for the storage and management of your selection decision. You may change your settings at any time via https://shop.bvb.de/de/?cmpscreencustom=. We store your selection decision for 12 months, unless you delete or change it earlier via your browser settings or the consent management tool.

4. Customer Account

You may create a customer account to manage orders, save your details for future orders, and use additional shop functions where applicable. In doing so, we process the data requested in the registration form, in particular name, email address, postal address, password (in encrypted form), customer ID, time of registration, and log data. The legal basis is Art. 6(1)(b) GDPR. The data is required to provide the customer account. You may request the deletion of your customer account at any time via Account Details > Account Settings, or by contacting [email protected]. Data that we require for the processing of existing contracts or on the basis of statutory retention obligations will only be deleted once those purposes no longer apply.

4a. Guest Order

You may also place an order in the BVB Online Shop as a guest, without creating a customer account. In this case, we process only the data you provide during the ordering process and that is required for the execution of the purchase contract, delivery, and payment processing. This includes in particular salutation, first and last name, billing and delivery address, email address, and chosen payment method. Your data will not be stored permanently in a user profile; following completion of the order and expiry of the statutory retention periods, the data will be deleted. The legal basis is Art. 6(1)(b) GDPR.

5. Order and Contract Processing

When you order goods via the online shop, we process the data required for the order, delivery, payment, communication, and the handling of warranty, return, or complaint cases. This includes in particular salutation, first and last name, billing and delivery address, email address, telephone number, items ordered, order number, payment method, payment status, shipping information, communication relating to the order, and, where applicable, personalisation details for a product. The legal basis is Art. 6(1)(b) GDPR. Mandatory information is indicated in the respective order form. Without the details required for the processing of the contract, we are unable to process your order or dispatch the goods. Details that are not required for contract processing are marked as voluntary.

We store contract and invoice data for the duration of the contract processing. Thereafter, we retain it only to the extent and for as long as statutory retention obligations or legitimate interests – in particular the establishment, exercise, or defence of legal claims – require this. Commercial and tax-related documents are generally retained for the periods prescribed by law.

6. Payment

For payment processing, we pass on the required order, contact, and payment data to the payment service provider you have selected. Data processing is carried out to execute the payment process on the basis of Art. 6(1)(b) GDPR. Payment service providers generally process data as independent controllers in accordance with their own privacy notices. Depending on the payment method offered, the following data may be processed in particular: name, billing address, email address, order number, order amount, currency, payment status, payment identifiers, and the payment data required for the chosen payment method.

The following payment methods are available in the BVB Online Shop, for which the service providers listed below are used:

a) PayPal and PayPal Express

We offer payment via PayPal and PayPal Express. The provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). The payment account is held by BVB Merchandising GmbH with PayPal. When selecting a PayPal payment method, the data required for payment processing (in particular name, billing address, email address, order number, order amount, and, where applicable, delivery address and telephone number) is transmitted to PayPal. PayPal may obtain a credit report to decide on payment processing; further information is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full. PayPal Express also enables an accelerated checkout directly via the PayPal account without prior entry of a delivery address in the shop. The legal basis for the data transfer is Art. 6(1)(b) GDPR.

b) Shopify Payments (Credit Cards, Apple Pay, Google Pay, Klarna)

For the processing of card payments and other payment methods, we use Shopify Payments, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify Payments"). The following payment methods are available via Shopify Payments: Visa, Mastercard, Maestro, American Express (AMEX), UnionPay, Apple Pay, Google Pay, and Klarna.

When selecting a payment method offered via Shopify Payments, the data required for the respective payment processing (in particular name, billing address, card or payment data, order number, and order amount) is transmitted to Shopify Payments and processed there. For card payments as well as Apple Pay and Google Pay, authorisation is carried out via the respective card schemes or wallet providers (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which process the data as independent controllers in accordance with their own privacy notices. For Klarna payments, processing is carried out by Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden; Klarna may obtain a credit report to decide on payment terms. Further information on Klarna can be found at https://www.klarna.com/de/datenschutz/. The legal basis for each data transfer is Art. 6(1)(b) GDPR.

7. Shipping and Delivery Status

To deliver the ordered goods, we transmit the required data to the shipping service provider engaged by us. This regularly concerns name, delivery address, and, where applicable, email address and telephone number, as well as shipment and order information. The legal basis is Art. 6(1)(b) GDPR. Where we notify you of the shipment status, this also serves the purpose of contract performance. The following shipping service providers are used for the delivery of ordered goods:

a) DHL Parcel / DHL Express

For domestic and international shipping, we use DHL Parcel (standard shipping) and DHL Express (express shipping). The provider is DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (for DHL Parcel), and DHL Express (Germany) GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany (for DHL Express), both part of Deutsche Post DHL Group. To carry out the delivery, we transmit the required data to DHL, in particular first and last name, delivery address, email address, and, where applicable, telephone number as well as the tracking number. Where you have consented to the transfer of your email address or telephone number, or where we are authorised to do so in the context of contract processing, DHL will use these contact details to notify you of the shipment status (e.g. notification of delivery or availability at a parcel locker). The legal basis for the data transfer is Art. 6(1)(b) GDPR. Where DHL independently processes personal data in the context of shipment tracking, DHL acts as an independent controller in that regard. Further information on data protection at DHL can be found at https://www.dhl.de/de/privatkunden/hilfe-kundenservice/datenschutz.html.

b) GLS (General Logistics Systems)

For selected shipments, we additionally use GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Straße 1–7, 36286 Neuenstein, Germany) as a shipping service provider. To carry out the delivery, we transmit the required data to GLS, in particular first and last name, delivery address, email address, and, where applicable, telephone number as well as the tracking number. GLS uses these contact details, where necessary, to notify you of the shipment status and to coordinate delivery (e.g. advance notification of delivery or placement at a GLS ParcelShop). The legal basis for the data transfer is Art. 6(1)(b) GDPR. Where GLS independently processes personal data in the context of shipment tracking, GLS acts as an independent controller in that regard. Further information on data protection at GLS can be found at https://gls-group.com/DE/de/datenschutz.

8. Contact

When you contact us by email, contact form, chat, or other means, we process the data you have submitted in order to handle your enquiry. This regularly includes name, contact details, the content of your message, order reference, and technical data required for the prevention of misuse and for security purposes. Where your enquiry concerns the initiation or performance of a contract, Art. 6(1)(b) GDPR applies as the legal basis. Otherwise, we process your data on the basis of Art. 6(1)(f) GDPR. Our legitimate interest consists in the proper handling of your enquiry. We delete the data after the matter has been fully resolved, unless statutory retention obligations or legitimate interests preclude this.

9. Newsletter and Other Marketing Communications

If you subscribe to our newsletter or consent to marketing communications by other means, we process your email address and, where applicable, additional voluntarily provided data for the personalisation of communications. We also store the registration, the confirmation via the double opt-in procedure, and the timestamp and technical evidence of consent. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in each newsletter or by contacting [email protected]. Where we use newsletter tracking – in particular capturing opens, clicks, or comparable interactions – we will explain this separately and obtain your consent where required.

IV. Web Analytics, Marketing and Social Media

1. General Principle

We use optional technologies for reach measurement, analysis, personalisation, performance measurement, and the delivery of interest-based advertising only if you have previously consented via our consent management tool. Consent covers, where required, access to or storage of information on your terminal device pursuant to Section 25(1) TDDDG, as well as the processing of personal data pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time at https://shop.bvb.de/de/?cmpscreencustom= with effect for the future. Withdrawal does not affect the lawfulness of processing prior to withdrawal. Without consent, the core functions of the online shop remain available to you, unless certain optional content technically depends on the respective technology.

Note: The following list must contain only services whose use has been confirmed in the technical audit. Services not in use must be removed prior to publication.

2. Analysis and Conversion Optimisation

We use Google Analytics 4 to analyse the use of our online shop. In particular, usage data, page views, interactions, technical information about the terminal device and browser, approximate location data, online identifiers, and event data may be processed. We only use Google Analytics with your consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Information on recipients, third-country transfers, retention periods, and enabled or disabled functions – in particular User ID, Google Signals, data import, and Google Ads integration – can be found in the consent management tool and at https://shop.bvb.de/de/?cmpscreencustom=.

We use the technology of easy Marketing for the attribution of advertising contacts, the measurement of campaign performance, and, where applicable, billing with affiliate and advertising partners. Online identifiers, referrer information, technical browser and device data, timestamps, and transaction-related event data may be processed. Where cookies, comparable identifiers, or pixels are used, this takes place only with your consent on the basis of Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The provider is easy Marketing GmbH, Asselner Hellweg 124, 44319 Dortmund. Further information, retention periods, and opt-out options can be found at https://trck.easy-m.de/privacy-optout.do or https://trck.easy-m.de/privacy-mydata.do.

We use Microsoft Clarity to analyse the use of our online shop, in particular through behavioural metrics, heatmaps, and, where applicable, session recordings. Usage, interaction, browser, and device information may be processed. Use takes place exclusively with your consent on the basis of Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. Prior to activation, technical safeguards – in particular masking of input fields and exclusion of sensitive areas – must be verified.

We use ABlyft to conduct A/B tests and to optimise user navigation. Where information is stored on or read from your terminal device, or where users are assigned to a variant, use takes place only with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Provider, data categories, retention period, and opt-out link: https://shop.bvb.de/?ablyft_opt_out=true.

3. Advertising, Remarketing, and Affiliate Marketing

Where we use technologies for conversion measurement, remarketing, interest-based advertising, or affiliate marketing, access to your terminal device and further data processing takes place exclusively on the basis of your prior consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Depending on the service, the following data may be processed in particular: cookie and comparable identifiers, IP address, browser and device information, pages visited, referrer, interactions, timestamps, campaign and conversion events, and, where applicable, pseudonymous transaction data. The respective retention periods, data categories, third-country transfers, and opt-out options are set out in the consent management tool and in the individual sections below.

3.1.1 Google Ads

We use Google AdWords on our website, an online advertising tool by Google that enables "remarketing". This allows tailored advertising based on your browsing behaviour on other websites in the Google Display Network. Your browsing behaviour on our website is analysed so that relevant advertising matched to your interests can be displayed to you on other websites. For this purpose, Google sets cookies which allow your browser on a specific computer – but not a specific person or user – to be identified. No personal identity data is stored. We use Google AdWords only with IP anonymisation enabled. This means your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser is not merged with other Google data.

Google Consent Mode v2 is a significant update designed to improve user privacy and data compliance. It is an interface that informs Google of the consent given by users of the website for the use of cookies. This interface is only activated when users have declined cookies on your website. If they consent, Google uses its cookies for tracking as usual.

You may prevent the storage of cookies by adjusting your browser settings accordingly. You may also prevent the collection and processing by Google of the data generated by cookies and relating to your use of the online service by downloading and installing the browser plug-in available at the following link: https://policies.google.com/technologies/ads?hl=de

We also use "conversion tracking", which is likewise part of Google AdWords. When you click on an advertisement placed by Google, a corresponding cookie is stored on your system. No personal identity data or other data that would allow a specific user or person to be identified is processed. The cookie is used to generate statistics on "conversion rates" – which, in simple terms, reflects the ratio between page visits and successful purchases. Cookies for conversion tracking by Google AdWords become inactive after 30 days. Information on how to deactivate personalised advertising and conversion tracking by Google can be found here: https://support.google.com/google-ads/answer/9606827?hl=de

3.1.2 Facebook

We use an additional conversion tracking and "remarketing" tool for the evaluation of our advertising on Facebook: the Facebook Pixel, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The service enables both us and Facebook to track actions taken by users after they have clicked on a Facebook advertisement. This allows us to record and evaluate the effectiveness of advertisements for statistical and market research purposes in order to optimise future advertising activities. The data collected is anonymous to us and therefore does not allow us to draw conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible, and Facebook may use the data for its own advertising purposes in accordance with Facebook's Data Policy (https://www.facebook.com/about/privacy/). You may allow Facebook and its partners to display advertisements on and outside of Facebook. A cookie may also be stored on your device for these purposes.

We only use the Facebook Pixel where and to the extent that you have given us your explicit consent. Consent to the use of the visitor action pixel may only be given by users who are over 13 years of age. If you are younger, please ask your parent or legal guardian for permission. If you give your consent, the data processing is carried out on the basis of Art. 6(1)(a) GDPR. You have the right to withdraw any consent you have given at any time with effect for the future.

3.1.3 Microsoft Bing Ads

On our website, data is collected and stored using Bing Ads technology, from which usage profiles are created using pseudonyms. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website who have arrived via Bing Ads advertisements. If you arrive at our website via such an advertisement, a cookie is placed on your computer. A Bing UET Tag is integrated on our website. This is a code that, in conjunction with the cookie, stores certain non-personal data about the use of the website, including time spent on the website, which areas of the website were accessed, and which advertisement brought users to the website. Information about your identity is not collected. The collected information is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days in general.

You may prevent the collection of data generated by the cookie and relating to your use of the website, as well as the processing of this data, by deactivating the setting of cookies. This may, under certain circumstances, restrict the functionality of the website. Furthermore, Microsoft may, through so-called cross-device tracking, track your usage behaviour across multiple electronic devices and thereby display personalised advertising on or in Microsoft websites and apps. You can deactivate this behaviour at http://choice.microsoft.com/de-de/opt-out. Further information on Bing's analytics services can be found on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Further information on data protection at Microsoft and Bing can be found in Microsoft's Privacy Statement (https://privacy.microsoft.com/de-de/privacystatement).

3.1.4 TikTok Ads

We use an additional conversion tracking and "remarketing" tool for the evaluation of our advertising on TikTok: the TikTok Pixel. The service provider is the Chinese company TikTok. The company responsible for the European region is TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland). The service enables both us and TikTok to track actions taken by users after they have clicked on a TikTok advertisement. This allows us to record and evaluate the effectiveness of advertisements for statistical and market research purposes in order to optimise future advertising activities. The data collected is processed by TikTok, including in the USA. We would like to point out that, in the opinion of the Court of Justice of the European Union, there is currently no adequate level of protection for data transfers to the USA. You may prevent the collection of data generated by the cookie and relating to your use of the website, as well as the processing of this data, by deactivating the setting of cookies. This may, under certain circumstances, restrict the functionality of the website.

As the basis for data processing with recipients established in third countries (outside the European Union, Iceland, Liechtenstein, Norway – in particular the USA) or data transfers thereto, TikTok uses standard contractual clauses (Art. 46(2) and (3) GDPR). Standard contractual clauses are model templates provided by the EU Commission and are intended to ensure that your data meets European data protection standards even when transferred to and stored in third countries (such as the USA). By means of these clauses, TikTok undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. Further information on the standard contractual clauses and the data processed through the use of TikTok Pixel can be found in the Privacy Policy at https://www.tiktok.com/legal/privacy-policy-eea?lang=de or https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

3.1.5 Easy Marketing – Affiliate Marketing

We process your data using Awin in the context of affiliate marketing. This allows us to track which third-party website, app, or other technology referred potential customers to our websites and apps ("referrer") and to pay a commission in return for such referrals. Our legitimate interest in this regard is to run an online advertising campaign based on performance-related remuneration. We work with Awin, which supports us in implementing this affiliate marketing campaign. Awin's privacy policy can be found at: https://easy-m.de/datenschutzerklarung and https://www.awin.com/de/rechtliches/privacy-policy-DACH. It contains information about your rights in relation to data processing by Awin. In some cases, Awin may maintain a limited profile relating to you. However, this will not reveal your identity, your online behaviour, or any other personal characteristics. This profile serves solely the purpose of tracking whether a referral was initiated on one device and completed on another. In some cases, Awin and the referrer of the potential customer may receive and process your personal data in order to jointly implement the affiliate marketing campaign with us. Similarly, we receive personal data of potential customers from Awin and referrers, which can be categorised as follows: cookie data, data relating to the website, app, or technology from which a potential customer was referred to us, and technical information about the device you are using.

3.1.6 Pinterest Tracking

Our website uses the conversion tracking technology of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), which enables us to display relevant advertising and offers on Pinterest to website visitors who have already shown an interest in our website and content/offers and who are Pinterest members. For this purpose, a conversion tracking pixel from Pinterest is integrated on our pages, through which Pinterest is informed when you visit our website and which parts of our offering you have shown interest in. If, for example, you have shown interest in our subscriptions on our website, you may be shown an advertisement for our subscriptions on Pinterest.

You may opt out of the collection of data for the display of interest-based advertising on Pinterest at any time in your Pinterest account settings at https://www.pinterest.de/settings (under "Personalisation", deactivate the button "Use information from our partners to tailor recommendations and ads on Pinterest") or at https://help.pinterest.com/de/article/personalization-and-data#info-ad (deactivate the checkbox under "Deactivate personalisation").

The legal basis for data processing is Art. 6(1)(a) GDPR and Art. 6(1)(f) GDPR.

3.1.7 Outbrain Inc.

This website uses the technology of Outbrain Inc. ("Outbrain"). Outbrain provides recommendations within its publisher network that may be paid for by an advertiser. If you give your consent, Outbrain provides recommendations based on how you interact with content on which Outbrain is installed. These recommendations and advertisements only appear on Outbrain advertising spaces, either on Outbrain Engage advertising spaces or in the Outbrain Extended Network. If you wish to find out what information Outbrain holds about your interests, you can view your interest profile and edit your choices (such as withdrawing your consent). You can also visit the Network Advertising Alliance or YourOnlineChoices to learn about other organisations that track your online interactions, and to opt out or withdraw your consent to such tracking. Outbrain's privacy policy also describes how Outbrain collects, uses, and shares your personal information. Outbrain may pass on some of your personal information to third-party companies in order to serve advertisements that are more likely to match your interests. Visit your interest profile to withdraw your consent to behavioural advertising and/or to prevent Outbrain from forwarding your personal information to third-party providers.

3.1.8 Bounce Commerce GmbH

This website uses the plugin of the professional bounce management service provider Bounce Commerce GmbH, Lindenallee 39, 47608 Geldern. No personal or personally identifiable data is transmitted to the technical service provider. Technically necessary cookies are used, which contain purely technical information but no personal data. Further information on data protection at Bounce Commerce GmbH can be found at https://www.bounce-commerce.de/datenschutz.

3.1.9 Adition

We use Adition conversion tracking on our website. The service provider is Virtual Minds GmbH, Ellen-Gottlieb-Straße 16, D-79106 Freiburg im Breisgau. Adition processes data such as IP addresses and other behavioural data for the purpose of measuring campaign performance. Further information on the data processed through the use of Adition conversion tracking can also be found in the privacy policy at https://www.adition.com/datenschutz-plattform/. You can opt out of tracking via the following link: Opt-Out.

3.1.10 LinkedIn Ads

We use the LinkedIn Insight Tag conversion tracking tool on our website. The service provider is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For data protection-relevant aspects in the European Economic Area (EEA), the EU, and Switzerland, the company LinkedIn Ireland Unlimited (Wilton Place, Dublin 2, Ireland) is responsible. LinkedIn also processes your data in the USA, among other locations. We would like to point out that, in the opinion of the Court of Justice of the European Union, there is currently no adequate level of protection for data transfers to the USA. This may involve various risks to the lawfulness and security of data processing.

As the basis for data processing with recipients established in third countries (outside the European Union, Iceland, Liechtenstein, Norway – in particular the USA) or data transfers thereto, LinkedIn uses Standard Contractual Clauses (SCCs). These are model templates provided by the EU Commission and are intended to ensure that your data meets European data protection standards even when transferred to and stored in third countries (such as the USA). By means of these clauses, LinkedIn undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. The decision and the corresponding standard contractual clauses can be found, among other places, at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. Further information on the standard contractual clauses at LinkedIn can be found at https://de.linkedin.com/legal/l/dpa or https://www.linkedin.com/legal/l/eu-sccs.

Further details are available at https://www.linkedin.com/help/linkedin/answer/a427660. More information on the data processed through the use of LinkedIn Insight Tag can also be found in the Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

3.1.11 Snapchat

When visiting this website, personal data is processed. Data categories processed: data on the use of the website and logging of clicks on individual elements. Purpose of processing: analysis of user behaviour, evaluation of the impact of online marketing measures, and selection of online advertising on other platforms, which is automatically selected by means of real-time bidding based on user behaviour. Legal basis for processing: your consent pursuant to Art. 6(1)(a) GDPR. Data is transferred to the independent controller Snap Inc., 3000 31st Street, Santa Monica, CA 90405, USA. The legal basis for the data transfer to Snap Inc. is your consent pursuant to Art. 6(1)(a) GDPR. This may also involve a transfer of personal data to a country outside the European Union. By giving your consent, you accept the risk that US authorities may access your data without you being entitled to EU-law legal remedies. The transfer of data is based on your consent pursuant to Art. 6(1)(a) in conjunction with Art. 49(1)(a) GDPR. Snap Inc.'s privacy policy: https://www.snap.com/de-DE/privacy/privacy-policy.

3.1.12 Reddit Ads

We use a conversion tracking and "remarketing" tool for the evaluation of our advertising on Reddit: the Reddit Conversion Pixel. The service provider is the American company Reddit Inc. (548 Market St. #16093, San Francisco, California 94104). The company responsible for the European region is Reddit Ireland Limited (Reddit EU Data Inquiries, 70 Sir John Rogerson's Quay, Dublin 2, Ireland).

Using the Reddit Pixel, it is possible for Reddit to identify you as a target group for the display of advertisements ("Reddit Ads") based on your visit to our online service. To enable this, we use the Reddit Pixel to show the Reddit Ads placed by us only to Reddit users who have also shown an interest in our online service or who exhibit certain characteristics. A specific characteristic could be, for example, an interest in a particular product that was identified through a visit to the website. The collected information is transmitted to Reddit ("Customer Audiences"). The data collected is anonymous to us and therefore does not allow us to draw conclusions about the identity of users.

Using the Reddit Pixel, both we and Reddit can track actions taken by users after they have clicked on a Reddit advertisement. This allows us to record and evaluate the effectiveness of advertisements for statistical and market research purposes in order to optimise future advertising activities. The Reddit Pixel is only used and "conversion cookies" are only stored if you have given your consent to the use of cookies and similar procedures when visiting our website. The legal basis is Art. 6(1)(a) and Art. 49(1)(a) GDPR. You may withdraw your consent using the general opt-out options. Further information on the use of cookies by Reddit Ads can also be found at: https://www.redditinc.com/policies/cookies. Reddit is responsible for data processing in connection with the delivery of our advertisements within the social network. Further information on data processing by Reddit can be found at: https://www.redditinc.com/policies/privacy-policy.

4. Links to Social Networks

Our online shop may contain links to presences on social networks. If you click on such a link, you will leave our online shop. Only at that point do the privacy terms of the respective provider apply. Where we merely provide a link, no personal data is transmitted by us to the respective platform provider before you click on the link.

V. Recipients and Data Transfers

1. Service Providers

We engage carefully selected service providers for individual processing activities, in particular for hosting, technical operation, shop software, IT security, customer service, shipping, payment processing, newsletter delivery, and analysis. Where these service providers process personal data on our behalf, we conclude the required data processing agreements pursuant to Art. 28 GDPR and monitor compliance with the agreed technical and organisational measures.

2. Independent Controllers and Joint Controllership

Where we transfer personal data to recipients who independently determine the purposes and means of processing, those recipients process the data as independent controllers. This may be the case in particular with payment service providers, shipping service providers, credit reference agencies, advertising platforms, and social networks. Where we jointly determine the purposes and means of individual processing steps with a partner, we conclude an agreement pursuant to Art. 26 GDPR and inform you of its essential content.

3. Third-Country Transfers

Where we transfer personal data to recipients outside the European Economic Area, we will inform you, in the context of the respective processing, about the recipient, the recipient country, and the applicable legal basis for the transfer. Where no adequacy decision exists, we base the transfer on appropriate safeguards pursuant to Art. 46 GDPR – in particular the standard contractual clauses of the European Commission – and, where necessary, take additional protective measures. A copy of the relevant safeguards will be provided to you upon request, to the extent that no statutory confidentiality obligations prevent this.

VI. Retention Periods

We delete personal data as soon as it is no longer required for the purposes for which it was collected or processed. Longer retention takes place only to the extent and for as long as statutory retention obligations – in particular under commercial and tax law – or legitimate interests – in particular the establishment, exercise, or defence of legal claims – require this. The specific retention periods for cookies and comparable technologies can be viewed in the consent management tool. Information on service-specific retention periods is contained in the respective sections of this Privacy Policy.

VII. Your Rights

Subject to the applicable statutory requirements, you have the following rights:

  • Right of access to the processing of your personal data pursuant to Art. 15 GDPR
  • Right to rectification of inaccurate or completion of incomplete personal data pursuant to Art. 16 GDPR
  • Right to erasure of your personal data pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object to processing based on Art. 6(1)(e) or (f) GDPR pursuant to Art. 21 GDPR. You may object to processing for direct marketing purposes at any time without giving reasons.
  • Right to withdraw consent granted with effect for the future pursuant to Art. 7(3) GDPR

To exercise your rights, please contact [email protected] or our Data Protection Officer. You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is generally the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de/.