shopping24 Gesellschaft für multimediale Anwendungen mbH - Data protection notice for shopping24 GmbH, date: [20/06/2021]

Since 25 May 2018, the uniform provisions of the EU Data General Data Protection Regulation (GDPR) have applied throughout Europe in the area of data protection. In the following data protection notice, we will inform you about the processing of personal data carried out by shopping24 GmbH (‘shopping24’ and/or ‘we’ and/or ‘controller’) in accordance with the GDPR and the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG 2018).

Please read our data protection notice carefully. If you have any questions or comments about our data protection notice, please contact us at datenschutz@s24.com

Content

Name and contact details of the controller responsible for processing
Contact details of the data protection officer
Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party, and categories of recipients
Website and website optimisation
Contacting us
Recipients outside the EU
Your rights

1. Name and contact details of the controller responsible for processing

This data protection notice applies to data processing by

shopping24 Gesellschaft für multimediale Anwendungen mbH
An der Alster 45
20099 Hamburg
[Germany]

Represented by the managing director(s): David Reed (CEO) and Nils Grabbert
+49 (0) 40 2285 251 - 0
info@s24.com

www.s24.com

for the following websites: www.shoparound.ro

2. Contact details of the data protection officer

The controller’s operational data protection officer(s) can be contacted at

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21
20354 Hamburg
[Germany]

datenschutz@s24.com

3 Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party, and categories of recipients

3.1 Accessing our websites/applications

3.1.1 Log-Files

Each time you access websites/applications, information is sent to our website/application server by your end device’s web browser and is temporarily stored in ‘log files’. The stored data records contain the following data, which is stored until automatic erasure: date and time of access, name of the page accessed, IP address of the requesting device, referrer URL (URL from which you came to our website), amount of data transferred, loading time, product and version information of the browser used as well as the name of your access provider.

The legal basis for processing the IP address is Article 6 (1) (f) of the GDPR. Our legitimate interest is based on

ensuring a smooth connection is established;
ensuring the convenient use of our website/application;
evaluating system security and stability; and
Fraud prevention (see 3.2.2)

This data does not provide any direct indication of your identity and we do not make any assumptions in this regard.

The data will be stored and automatically erased once the aforementioned purposes have been achieved. The standard periods for erasure depend on the criterion of necessity.

3.2. Establishment, execution and/or termination of a contract

3.2.1 Data processing on contract conclusion

If you register with one of our websites/applications and conclude a contract with us, we process the data required for the conclusion, execution or termination of a contract with you. This includes:

First name, surname
E-mail address

The legal basis for this is Article 6 (1) (b) of the GDPR, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. management of your customer account, processing of a purchase agreement) between you and us. In order to process your e-mail address in the event of a purchase via our websites/applications, we are also obliged to send an electronic order confirmation (Article 6 [1] [c] of the GDPR) on the basis of legal requirements in the German Civil Code (Bundesgesetzbuch, BGB).

If we do not use your data for advertising purposes (see 3.3. below), we store the data collected for contract processing until the statutory or possibly contractual warranty and guarantee rights expire. After this period, we shall retain the information concerning the contractual relationship required under commercial and tax law for the periods specified by law. For this period, the data will only be processed again in the event of verification by tax authorities.

3.2.2 Use of data for fraud prevention purposes

The data you provide when placing an order can be used to check whether an atypical order process has occurred (e.g. artificially generated traffic for our shop partners). We fundamentally have a legitimate interest in carrying out such a check. The legal basis for processing is Art. 6 Paragraph 1 Letter f) GDPR.

3.2.3 Categories of recipients

3.2.3.1 Processor

We use contract processors to process your data. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible for data processing. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the person responsible.

3.2.3.2 Other third party partners

In addition, we use other third-party partners who are necessary for the provision of services and the achievement of various purposes. We transmit personal data to these third party partners if this is necessary in the context of the provision of services (for example to affiliate networks for pure billing purposes).

The legal basis for this data transfer is Article 6 Paragraph 1 Letter b), f) GDPR.

3.3 Data processing for advertising purposes

3.3.1 Newsletter

We give you the option of subscribing to our newsletter on our websites/applications. To ensure that no errors occurred when entering the e-mail address, we use the ‘double opt-in procedure’ (DOI procedure): after you have entered your e-mail address in the registration field, we will send you a confirmation link to the address provided. Only when you click on this confirmation link will your e-mail address be added to our newsletter mailing list. The legal basis for this data processing is Article 6 (1) (a) of the GDPR.

Reference to the right of withdrawal

You can revoke your consent at any time with effect for the future using the unsubscribe option at the end of each newsletter.

3.3.2. Competitions

If you register for competitions organised by us, we will use the data you provide at the time of registration for the purpose of executing the participation contract, particularly notifying you of your winnings and, if applicable, advertising our offers and/or those of our competition partners. Detailed information can be found in the conditions of participation for each competition. The legal bases for this data processing are Article 6 (1) (a) of the GDPR, Article 6 (1) (b) of the GDPR and Article 6 (1) (f) of the GDPR.

4 Website and website optimisation

Brief summary

As the operator of the www.shoparound.ro website, shopping24 collects data on the behavior of users on the website mentioned (tracking data). This includes, among other things, which individual sub-pages (item detail pages) were accessed. For this purpose, shopping24 and / or partners of shopping24 can set cookies in the browser used by the respective user. The collection of tracking data is generally only permitted if you have given your prior consent. You can give such consent by clicking the "OK" button in the "cookie banner" displayed on www.shoparound.ro. The granting of consent is not necessary for the processing of such tracking data, which is required for the offer on the www.shoparound.ro website. This includes e.g. the setting of cookies for the purpose of displaying the shopping cart. Among other things, shopping24 can use the information about your usage behavior to show you interesting offers on www.shoparound.ro or to advertise you on other websites using personalized content (e.g. retargeting). Insofar as personal data about your usage behavior on www.shoparound.ro are also provided by other providers, e.g. can be used for the purpose of "enriching your own information", such use will only take place in these cases if you have given your prior consent. In these cases, the further processing of the data collected on www.shoparound.ro takes place under the sole responsibility of the provider. The providers can transfer the data to the USA as part of this further processing. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy against this. Tracking data that shopping24 collects and stores itself is processed by shopping24 exclusively in a pseudonymized manner. This prevents the data from being assigned to you personally. If you want to delete individual cookies set in your browser or want to find out which service providers / providers have set cookies in your browser, you can do this via a preference manager". Such is e.g. available at www.youronlinechoices.com. You also have the option of setting your browser in such a way that it prevents the setting of cookies or only allows certain types of cookies to be set. Details on the possibility of changing the settings of the common browser types (including Google Chrome, Firefox) can be found under section 4.2. this information on data protection.

4.1 Cookies – general information

Cookies are used on this website. Cookies are small text files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Through this we can e.g. Offer the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart and how high your current purchase value is. Other cookies remain on your computer and enable us to recognize your computer the next time you visit (so-called permanent or cross-session cookies). These cookies in particular serve, among other things, to make our offer more attractive to you. Thanks to these files, it is possible, for example, to display information that is specifically tailored to your interests on the www.shoparound.ro website.

According to the legal requirements, the storage of information on end devices (desktops, cell phones, tablets, etc.) - e.g. by setting cookies and retrieving information from end devices (tracking) only if you have given your prior consent. However, consent does not have to be given if such storage / retrieval is necessary for the offer on the website (including technically necessary cookies). A requirement is e.g. with regard to ensuring the following functionalities / achievement of the following purposes:

Wishlist,
Enabling and maintaining log-in,
Prevention of click fraud,
Ensuring system security.

With regard to the data processing that is necessary for the operation of the website, you have no right of objection. Therefore, within the consent preferences in the consent tool, the selection “technically necessary cookies” is always activated and cannot be deselected.

You can use the www.shoparound.ro website without data being retrieved from or stored on your device for purposes that are not required for the offerings of the www.shoparound.ro website. For this reason, when you use the www.shoparound.ro website - unless you have given any further consent - only "basic tracking" is activated.

4.2 Intervention options / browser settings

Of course, you can set up your browser so that it does not save our cookies on your hard drive. The help function in the menu bar of most web browsers will explain how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie or how you can delete all cookies you have already received and block future cookies.

Please follow the steps below:

In Internet Explorer

Select ‘Internet options’ from the ‘Tools’ menu.
Click on the ‘Privacy’ tab.
Now you can change the security settings for the Internet zone. Here, you set whether cookies should be accepted or rejected and which cookies should be accepted or rejected.
Confirm your settings by clicking ‘OK’.

In Firefox:

Select ‘Settings’ from the ‘Extras’ menu.
Click on ‘Privacy’.
Select ‘Create according to user-defined settings’ from the drop-down menu.
Now you can set whether cookies should be accepted and how long you want to keep these cookies for, and add exceptions to which websites you always or never want to allow cookies for.
Confirm your settings by clicking ‘OK’.

In Google Chrome:

Click the Chrome menu on the browser toolbar.
Now select ‘Settings’.
Click on ‘Show Advanced Settings’.
Under ‘Privacy’, click on ‘Content settings’.
Under ‘Cookies’, you can change the following settings for cookies:
- Delete cookies
- Block cookies by default
- Delete cookies and website data by default after closing the browser
- Allow exceptions for cookies from specific websites or domains

However, please note that in this case, you may be unable to use all of the functions of this website to their full extent.

If these cookies and/or the information they contain relates to personal data, the legal basis for data processing is Article 6 (1) (f) of the GDPR. Our interest in optimising our website shall be deemed to be legitimate within the meaning of the aforementioned provision.

4.3 Piwik Consent Manager

We use a consent tool (“Piwik Consent Manager”) from the provider Piwik Pro GmbH to manage your settings and document the consent of users of our services, LLC (German headquarter: Kurfürstendamm 21, 10719 Berlin). Piwik will i.a. used to save the cookie settings for the entire website. Piwik Consent Manager stores information about the categories of cookies used by the website and whether users have given or revoked their consent to the use of each category. This enables us to prevent cookies from being set in each category in the user's browser if consent is not given for individual categories. Piwik Consent Manager uses cookies for information storage, which have a normal lifespan of one year, so that the settings of returning visitors are saved.

4.4 Consent to the use of individual online services / the collection of tracking data

As in section 4.1. In this information on data protection, shopping24 collects and processes some tracking data. on the basis of consent. You give this consent by clicking on the button "Ok" on the website www.shoparound.ro that is linked to this consent text. By clicking the "OK" button, you give your consent for shopping24 to store data on your device (e.g. by setting cookies) or to retrieve data from your device. Furthermore, by clicking on the "OK" button, you give your consent to the use of certain advertising functions, the use of which requires consent. You also have the option of clicking "Settings" in the banner and managing your consent preferences there. A distinction is made there between "Absolutely necessary cookies", cookies for marketing purposes ", as well as" Google Adsense and Google Adexchange". The data processing that takes place in connection with these advertising functionalities is described below (section 4.4.1. To section 4.4.5 of this data protection declaration).

4.4.1 Absolutely necessary cookies

4.4.1.1 Piwik Pro Basic Tracking

For the purpose of the needs-based design and continuous optimization of www.shoparound.ro, data collected on the basis of the basic tracking of Piwik Pro on the legal basis in Article 6 Paragraph 1 Letter f) GDPR (legitimate interest). The basic version of Piwik Pro is a web analysis service from Piwik Pro GmbH. Piwik Pro uses so-called "cookies" (text files) that are stored on your computer and that enable your use of the website to be analyzed. On behalf of shopping24, Piwik Pro will use this information to evaluate your use of the website and to compile reports on website activity. Piwik Pro GmbH processes the data collected through the use of the "basic tracking" of Piwik Pro exclusively on the instructions of shopping24 and for the purposes of shopping24.

4.4.1.2 AWIN

For the correct recording of sales and / or leads, AWIN AG, Eichhornstrasse 3, 10785 Berlin (hereinafter “AWIN”) places a cookie on a visitor's device. The cookies used by AWIN are accepted in the standard setting of the Internet browser. If you do not want these cookies to be stored, please deactivate the acceptance of cookies for the relevant domains in your Internet browser. AWIN cookies only save the ID of the intermediary partner and the serial number of the advertising material clicked on by the visitor (banner, text link, etc.), which are required for payment processing. When concluding a transaction, the partner ID is used to assign the commission to be paid to the mediating partner. The legal basis for this data processing is Article 6 Paragraph 1 Letter f) GDPR.

Details on data protection can be found at: www.awin.com/de/rechtliches/

4.4.2 Consents for cookies for marketing purposes

4.4.2.1 Consent for Google-Remarketing / Customer Match

This website uses the Google remarketing service. Google Remarketing is an online advertising program from Google Ireland Limited (“Google”). We use the remarketing function within the Google AdWords service. With the remarketing function, we can present you with advertisements based on your interests on other websites within the Google advertising network. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This enables us to display so-called "Google ads" and individualized advertising on other websites even after you have visited our website. For this purpose, Google saves a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to record your visits. The cookie is used to uniquely identify your web browser and not to identify you personally. It is possible that Google uses the data collected via the www.shoparound.ro website about your usage behavior for its own purposes or for the purposes of other Google customers (e.g. to display individualized third-party advertisements). Such further processing of the data as well as the processing of the data after it has been transmitted by www.shoparound.ro to Google is carried out by Google as the sole data protection officer. In this context, Google, as the sole data protection controller, can store data about you in the USA. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy. The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent). We also use the Customer Match service. A pixel is integrated in your browser. As a result, Google assigns you as a visitor to this website an identification number and can thus recognize you when you visit other websites in order to enable the operator of this website to target you with individualized advertising or to decide that such advertising does not take place.

You can find more information about Google remarketing and Google's data protection declaration at: www.google.com/privacy/ads/. Here you can also assert your rights as a data subject (e.g. right to deletion) with regard to the data that Google, as the person responsible for data protection, processes. You can revoke the consent you have given for the use of Google remarketing here or refuse to give your consent and use Google remarketing.

4.4.2.2 Consent for Microsoft Advertising

Our website uses the Microsoft Advertising service. Microsoft Advertising is an online advertising program operated by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521). ("Microsoft"). We use so-called Universal Event Tracking (UET) within the Microsoft Advertising service with which data is collected and stored on this website for marketing and optimization purposes. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. Microsoft saves a cookie in your browser for this purpose. Your visits are recorded via this cookie. The cookie is used to uniquely identify your web browser and not to identify you personally. Microsoft continues to process the data collected about you on this website as the sole responsible party under data protection law. In this context, it is possible that your data will be transmitted from Microsoft to the USA. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy against this. The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent). You can find more information on Microsoft's data protection declaration at: https://privacy.microsoft.com/de-DE/privacystatement Here you can also assert your rights as a data subject against Microsoft (e.g. right to deletion). The legal basis for the data processing described above is that in Article 6 Paragraph 1 Letter a) GDPR (consent).

You can deactivate the use of cookies by Microsoft and thus revoke the consent you gave us to use the Microsoft Advertising service or refuse your consent to the use of Microsoft retargeting by following the link below: http://choice.microsoft.com/de-DE /opt-out

4.4.2.3 Consent for Criteo Retargeting-Technology

The retargeting technology of Criteo SA, 32 Rue Blanche, 75009 Paris, is integrated into this website. By using this technology, it is possible to show you advertisements for products that you have viewed on this website on third-party sites (publisher sites). For this purpose, Criteo collects information about your usage behavior on this website by using tracking cookies and similar technologies that are placed in your browser or by using advertising IDs in environments that do not support cookies - for example apps. With the help of these technologies, Criteo can analyze trends and identify the interests of individual users with regard to websites and apps. Criteo uses these technologies to identify visitors to their partners' websites and apps. Users identified by Criteo receive a technical ID. At no point does Criteo collect personal data that could be used for identification, such as names or addresses. Criteo only analyzes the products viewed or the search behavior and the pages visited on the website of the partner for whom Criteo delivers advertising. In order to deliver personalized advertising to you and to offer you a seamless online experience, Criteo may synchronize the IDs of the various browsers you use. ("ID synchronization") Thanks to its ID synchronization technology, Criteo is able to always offer you the most relevant advertisements - regardless of your browser or device - without Criteo having to collect and process personal data such as names or addresses For this purpose, Criteo uses exact linking methods based on the technical data collected by means of the Criteo technologies used - such as the IDs of our advertising partners or encrypted e-mail addresses that the partners pass on to Criteo. Further information on data protection at Criteo can You can see it at https://www.criteo.com/de/privacy/.

The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent).

You can revoke your consent to the use of Criteo technology here.

4.4.2.4 Consent for RTB Retargeting-Technology

The retargeting technology of RTB House GmbH, Kurfürstendamm 226, 10719 Berlin, is integrated into this website. By using this technology, it is possible to show you advertisements for products that you have viewed on this website on third-party sites (publisher sites). For this purpose, RTB House collects information about your usage behavior on this website using tracking cookies and similar technologies that are placed in your browser. Further information on data protection at RTB House can be found at https://www.rtbhouse.com/de/optout-page/.

You can revoke your consent to the use of RTB-House here.

4.4.3 Consent for Google Adsense & Google Adexchange

4.4.3.1 Consent for Google Adsense

We use Google AdSense on our website. Google AdSense is a service from the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, which is used to integrate advertisements. Google AdSense uses ‘cookies’, which are text files that are saved on your computer and allow the use of our website to be analysed. Google AdSense also uses ‘web beacons’. These web beacons allow Google to evaluate information, such as the flow of visitors to our site. In addition to your IP address and the collection of the ad formats displayed, this information is sent to Google in the USA, where it is stored and can be shared by Google with contractual partners. However, Google does not merge your IP address with any other data held about you. You can prevent cookies from being installed by changing your browser settings; please note that in this case, you may be unable to use all of our website’s functions properly. You can object to the use of your information at any time here.

More information can be found at: https://policies.google.com/privacy?hl=de

4.4.3.2 Consent for Google Adexchange // Doubleclick

Doubleclick by Google is a service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Doubleclick by Google uses cookies to show you advertisements that are relevant to you. Here, a pseudonym identification number (ID) is assigned to your browser in order to check which ads have been displayed in your browser and which ads have been accessed. The cookies do not contain any personal information. The use of DoubleClick cookies only allows Google and its partner sites to use ads based on previous visits to our website or other websites on the Internet. Google sends the information generated by the cookies to a server in the USA for evaluation and the information is stored there. Any transmission of the data by Google to third parties only takes place on the basis of legal provisions or within the context of contract data processing. Under no circumstances will Google merge your data with other data collected by Google.

You can prevent Google from collecting the data generated by the cookies that relates to your use of the websites and you can prevent Google from processing this data by downloading and installing the browser plugin available via the following link under ‘DoubleClick deactivation extension’.

You can also prevent the use of interest-based advertisements from our advertising partners by saving an corresponding cookie in your browser or by clicking here.

The legal bases for data processing are Article 6 (1) (a) and (f) of the GDPR.

4.4.4 Revocation of all consents

You can completely adapt/revoke the consent you have given for the data processing described above (sections 4.4) in the Consent-Manager.

5 Contacting us

You have the opportunity to get in touch with us in several ways. By e-mail, by phone, by chat or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context for the sole purpose of being able to contact you and process your request.

The legal basis for this data processing is Art. 6 Paragraph 1 Letter a), Art. 6 Paragraph 1 Letter b), Art. 6 Paragraph 1 Letter c) GDPR and Art. 6 Paragraph 1 Letter f) GDPR.

6 Recipients outside the EU

With the exception of the processing operations described above, we do not share your data with recipients based outside the European Union or the European Economic Area. The processing operations outlined in [xxx] mean that we transmit data to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. Data transmission is based on ‘standard contractual clauses’ of the EU Commission.

7 Your rights

7.1 Overview

In addition to the right to withdraw your consent, which you have given to us, you are entitled to the following additional rights if the respective legal conditions have been met:

the right of access to your personal data stored by us (Article 15 of the GDPR), in particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom the data has been or is being disclosed, the intended storage period, the origin of your data if it was not collected directly from you;
the right to rectify inaccurate data or to complete correct data (Article 16 of the GDPR);
the right to erase your data which is stored by us (Article 17 of the GDPR), provided that we are not obliged to comply with any legal or contractual retention periods or other legal obligations or rights for further storage;
the right to restrict processing of your date (Article 18 of the GDPR), if the accuracy of the data is disputed by you or processing is unlawful, but you have objected to such data being erased and the controller no longer requires the data, but you require it to establish, exercise or defend legal claims, or you have objected to processing pursuant to Article 21 of the GDPR;
the right to data portability in accordance with Article 20 of the GDPR, i.e. the right to have selected data concerning you that is stored by us transmitted in a commonly used, machine-readable format, or to request that it is transmitted to another controller; and
the right to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority where you have your usual place of residence or place of work or where our company headquarters are based.

You can assert the aforementioned rights to which you are entitled at datenschutz‚24.com. You can assert your right to data portability at info@s24.com.

7.2 Right to object

Under the conditions of Article 21 (1) of the GDPR, data processing may be objected to on grounds relating to the data subject’s particular situation.

The aforementioned general right of objection applies to all processing purposes described in this data protection notice, which are processed on the basis of Article 6 (1) (f) of the GDPR. In contrast to the right to object especially designed for data processing for advertising purposes (see above 3.3), we are only obliged to act on such a general right to object under the GDPR if you specify grounds of overriding importance (e.g. potential danger to life or health).

7.3 Right of withdrawal

If we process data on the basis of consent given by you, you have the right to withdraw consent given at any time. The withdrawal of the consent does not make data processing previously carried out on the basis of consent up to the time of withdrawal invalid.