JOOP! attaches great importance to the protection of your data and collects, processes and uses your personal data exclusively in compliance with the applicable data protection laws, e.g. the EU Regulation No. 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR), and in accordance with the principles described below.
The party responsible for the operation of this website (hereinafter "website") is Strellson AG, Sonnenwiesenstrasse 21, 8280 Kreuzlingen, Switzerland (hereinafter JOOP!). This company is also the operator of the online store (hereinafter "Online Shop"), whereby the contractual partner of the customer for purchases in the Online Shop is, however, Lenox AG, Sonnenwiesenstrasse 21, 8280 Kreuzlingen, Switzerland, a subsidiary.
Lenox AG is also the responsible party for the data required to execute the contract.
The data protection officer can be reached at: email@example.com.
The representative in the European Union can be reached at:
Kutzschbach Electronic GmbH & Co. KG
Mr. Manfred Schuster
WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS?
Personal data is any information that relates to an identified or identifiable natural person. This includes, for example, your name, your telephone number and your postal and e-mail address.
We collect, process and use your personal data in connection with the operation of the website, the creation and operation of a customer account and to provide the services offered in connection with the customer account.
Our subsidiary Lenox AG collects, processes and uses the data collected during an order process in the online store or released by you for this purpose via your user account to establish, execute and process the purchase contracts in the online store.
In addition, we (and also Lenox AG) only collect, process and use your personal data within the scope permitted by law, in particular if you have given your consent to do so. This may be the case, for example, if you have registered to receive newsletters.
PROVISION OF THE WEBSITE; COMMUNICATION
The provision of the website by JOOP! requires the handling of personal data (IP address) for the retrieval of the content displayed on the website.
You also have the option of contacting us via our contact form. We collect your name and e-mail address for this purpose.
The handling of your personal data for the provision of this website and for communication with JOOP! is based on our legitimate interest pursuant to Art. 6 (1) f) GDPR. For the provision of this website, it is technically necessary that we process certain personal data (e.g. the IP address). For your communication with JOOP! it is necessary that we handle the personal data mentioned above.
Within the framework of the necessary balancing of interests, we have weighed up your interest in the respective confidentiality of your personal data and our interests in the provision of this website and in contacting you. Your interest in confidentiality takes a back seat in both cases. Otherwise, we would not be able to provide you with this website or respond to your contact request.
The website offers you the possibility to create a personal customer account. In your customer account, which is managed by JOOP!, you can store personal information to conveniently store in the online store. JOOP! also offers access to your purchase history and the possibility to create a wish list, in which you can mark items for later purchase.
To set up the customer account, your first and last name, e-mail address, address and a password of your choice are required. The specification of further data (telephone number, date of birth) is of course voluntary. You can update this data or delete the account at any time.
The handling of your personal data in the context of the online service "customer account" is carried out for the initiation, implementation and processing of the corresponding user contract in accordance with Art. 6 para. 1 b) GDPR.
THE ONLINE STORE
The online store is operated by JOOP!, but the processing of transactions is the responsibility of our subsidiary Lenox AG, which is also your sole contractual partner for purchases made there.
If you are logged into your customer account, information required for order processing that is stored there is automatically filled in the order form. For this purpose, JOOP! provides Lenox AG with this information - but exclusively for this purpose of fulfilling the contract. It is of course also possible to place an order without using a customer account. In any case, Lenox AG will process and use the information only for the purpose of processing the order and, beyond that, only if you have given your consent to do so.
If you are logged in to the online store when you place an order, your wish list and the information about the purchases you have made (item, price and time of purchase) will be recorded in your customer account.
If, instead of a personal customer account, you only wish to shop with us as a guest, your data (the same data will be collected here as for the personal customer account) will only be stored for as long as is necessary to process the respective purchase and will then be deleted or blocked.
The handling of your personal data in the context of the online store is carried out for the initiation, implementation and execution of the corresponding contracts in accordance with Art. 6 para. 1 b) GDPR.
CONSENT AND REVOCATION
Insofar as you have given us consent to process personal data for specific, additional purposes (e.g. credit assessment, abuse and fraud prevention, newsletter, preference center), this data processing is based on this consent. JOOP! will provide details on the contents of a consent when the consent is requested. You can also find any data protection consents granted and further information on these here.
Consent is always voluntary. If the processing of personal data is based on your consent, you have the right to revoke this consent at any time. This also applies to consent given to us prior to the application of the GDPR, i.e. prior to May 25, 2018. You can also declare a revocation by email to firstname.lastname@example.org. The lawfulness of the data processing based on the consent until the revocation remains unaffected by your revocation. The legal basis for data processing based on consent is Art. 6 para. 1 a) GDPR and Art. 9 para. 2 a) GDPR.
DATA DISCLOSURE AND USE BY THIRD PARTIES
We do not pass on your data to third parties unless we are legally obliged to do so or you have given us your consent to do so.
However, in order to process orders, certain personal data must be made available to our service providers in the EU and Switzerland, e.g. logistics companies, but also for credit checks and payment processing. In this so-called order data processing, these service providers are also contractually obligated to process your personal data only in compliance with the provisions of data protection law and the necessary security measures.
AUTOMATED DECISION MAKING
Insofar as you have given your express consent, we obtain creditworthiness-related information on your previous payment history, information for assessing the risk of non-payment on the basis of mathematical-statistical procedures using address data (scoring) as well as data for verifying your address (check for deliverability) from or via infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany.
For this purpose, we transmit your data (name, address and, if applicable, date of birth) to the aforementioned company. This company uses this data for the purpose of address verification or identity checks for other companies and for corresponding scoring applications. Scoring calculates probability values for a certain future behavior based on mathematical-statistical methods and uses the corresponding data for this purpose. Detailed information on ICD in the sense of Art. 14 GDPR, i.e. information on the business purpose, the purposes of data storage, the data recipients, the right to self-disclosure, the right to deletion or correction, etc. can be found here.
In the context of the credit check, all available data is checked and determined which payment methods can be offered for an order and also whether an order can be carried out. If necessary, all previous orders in my customer account will also be checked.
If you have given your express consent, the above data will also be transmitted to the Device Transaction Pool (DTP) and stored there. The purpose of the DTP is to act as an industry-specific warning service to protect the member companies participating in the DTP from misuse and from bad debt losses due to fraud, which can arise in the provision of commercial, remunerated telecommunications services or telemedia services to contract partners who are unwilling or unable to pay, especially due to fraud. The transmitted data will only be stored, processed and used for these purposes. In the event of an inquiry by a member company at the DTP, only the results of the suspicion check on the inquiry will be transmitted to this member company. Positive data can also be used, i.e. end devices via which, for example, payments are made often and on time, are evaluated positively. Data storage of results data at individual member companies beyond the specific case of an individual use does not take place. The DTP is operated by infoscore Tracking Solutions (ITS), Zollhof 8, 40221 Düsseldorf, Germany, as an order data processor for the member companies.
You can also find more information here .
& You can use the link https://www.hotjar.com/opt-out to prevent the collection and use of your data by Hotjar.
WEB ANALYTICS AND COOKIES, SOCIAL PLUGINS
When visiting the website and online store, we use so-called „Cookies“.
Our website also uses functions of various social networks ("plugins"):
Plugins from YouTube
A button with the logo of YouTube white triangle on red or colored background, operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)
• Plugins from Facebook
Plugins with a white "f" on blue tile or "thumbs up" or "like" operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook")
• Plugins from Instagram
Plugins of the social network Instagram, Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA („Instagram“) are integrated on this website. You can recognize the Instagram plugin by the “Instagram - Button”.
• Plugins from Twitter
A button labeled "twitter," "retweet," or a small bird, operated by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA („Twitter“)
If you call up a website of our offer that uses such plugins, your browser connects to servers of the providers of the plugins, possibly in the USA. We have no influence on the scope of the data that the providers collect via the plugins. According to the providers' representations, personal data, including the IP address, is only collected and processed for logged-in members. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Instagram.
The purpose and scope of the collection, processing and use of the data by the providers, as well as your rights in this regard and setting options for your protection, can be found in the corresponding data protection information:
• YouTube: https://policies.google.com/privacy
• Facebook: http://www.facebook.com/about/privacy/
• Twitter: https://twitter.com/privacy
• Instagram: http://instagram.com/about/legal/privacy
If you are a member of the respective network, but do not want the provider to collect data relating to you via our website and possibly link it to other stored data, please always log out of the respective network completely before visiting other websites and possibly also delete the corresponding cookies.
On our site, we use videos from Vimeo to present content in a more visually appealing and dynamic way and to provide a smoother and more pleasant visual experience for the website visitor. Since it is not possible to host the videos locally on our server, we use the offer of Vimeo, a third-party provider (555 West 18th Street New York, NY 10011 United States). For technical reasons, the integration of Vimeo videos results in calls to the Vimeo servers. Data from your browser or end device is transmitted to the Vimeo server. It is also transmitted which of our Internet pages you have visited.
GOOGLE ADS & REMARKETING
Our website uses the Google Ads service. Google Ads is an online advertising program provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In addition, the remarketing function is used within the Google AdWords service. The remarketing function allows you to be presented with advertisements based on your interests on other websites within the Google advertising network. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This allows you to be provided with individualized advertising on the online search engine Google itself, so-called "Google Ads" and on other websites even after your visit to our website. As a prerequisite for this, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. Your visits are recorded via this cookie. The cookie is used to uniquely identify your web browser and not to identify you personally. The legal basis for this data processing is Art. 6 (1) a) GDPR (consent).
MICROSOFT BING ADS
On our website, we use technologies from Bing Ads, which are operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The so-called Microsoft Conversion Tracking is used, whereby Microsoft sets a cookie on your end device if you have reached our website via a Microsoft Bing ad or another way. In this way, Microsoft and we can recognize that you clicked on an ad, were redirected to the website and reached a previously determined target page ("conversion site") that was linked via the ad. Furthermore, Microsoft and we can see that you accessed the website via another route and made a purchase or performed a service that was defined as a conversion.
Furthermore, we use Microsoft retargeting technology, whereby information about your user behavior on our website is collected and stored. Cookies may be used for this purpose. The cookies allow Microsoft to collect, process and use information from the cookies to create usage profiles from the data using pseudonyms. These usage profiles are used to analyze visitor behavior, which enables us to display advertising and offers relevant to you, who have already shown interest in our website and our content/offers, via Bing Ads. No personal information about the identity of the user is processed.
Due to the marketing tool used, your browser automatically establishes a direct connection with the Microsoft server. We have no influence on the scope and further use of the data apart from the aforementioned purposes, which are collected by Microsoft through the use of this tool, and therefore inform you according to our state of knowledge: Through the integration of Microsoft, Microsoft receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Microsoft service, Microsoft can assign the visit to your account. Even if you are not registered with Microsoft or have not logged in, it is possible that the provider will learn and store your IP address.
When using our website, Microsoft processes in particular the UET tag ID, Microsoft cookie, browser information, device information, user behavior and contact to advertising material.
Your data will be stored on servers within the EU or the United States of America and may be transferred to service providers and their affiliates that provide technology or ancillary services to support, operate and maintain certain Microsoft Online Services. The transfer of your data to servers in the United States takes place on the basis of concluded EU standard contractual clauses.
Microsoft keeps your data from the UET tag for 180 days. The cookie lifetime of the Microsoft cookie is 13 months.
You can object to the collection and storage of data at any time with effect for the future. To object to data collection and storage of your data for the future, you can click on the following link: account.microsoft.com/privacy/ad-settings
We only use Google Analytics with IP anonymization enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area or Switzerland. Only in unavoidable exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the visitor's browser is not merged with other data from Google.
We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term relationships.
The data on user actions are stored for a period of 38 months and then automatically deleted. Thereby, the deletion of the data whose storage period has expired takes place automatically once a month.
The setting of cookies and the further processing of personal data described here only takes place with consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 (1) a) GDPR. Consent can be revoked at any time under the item “ Cookie settings ”.
The storage of cookies by Google Analytics can also be prevented via a corresponding setting of the respective browser. The collection of information generated by the cookie can also be prevented by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
Please note that we document any consent given by you in order to comply with our obligation to provide evidence under Art. 7 (1) GDPR. As we are obliged to do so, this storage is based on the legal basis of Art. 6 para. 1 lit. c) GDPR).
We use the retargeting technology of the social network Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website, which enables us, if you have already taken an interest in our website and our content/offers and are a Facebook member, to also display advertising and offers relevant to you on Facebook. For this purpose, a so-called conversion tracking pixel or retargeting pixel from Facebook is integrated on our pages, via which Facebook is informed when you visit our website that you have accessed our website and in which parts of our offer you were interested.
Due to the marketing tool used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data in addition to the aforementioned purposes that are collected through the use of this tool by Facebook and therefore inform you according to our state of knowledge: Through the integration of Facebook, Facebook receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with Facebook, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address.
When using our website, Facebook processes in particular the IP address, Facebook user ID, device information, browser information, location information, usage data, user behavior, marketing information, interaction with advertising materials, interaction with products, interactions with website services, viewed advertisements and online store content.
Your data will be stored on servers within the EU until it is no longer needed for processing purposes and will not be shared with third parties outside the Facebook network. A transfer to a third country according to the GDPR, such as the USA, may take place within the Facebook network. The transfer of your data to servers in the USA takes place on the basis of closed EU standard contractual clauses.
You can object to the collection and storage of data at any time with effect for the future. To object to data collection and storage of your data for the future, you can click on the following link: www.facebook.com/ads/preferences
AWIN AFFILIATE NETWORK
In some cases, Awin may maintain a limited profile that relates to you. However, it does not contain your identity, online behavior, or other personal characteristic. This profile is used only to track whether a referral is started on one device and completed on another.
In some cases, Awin and the potential customers' intermediary may receive and process your personal data for the purpose of conducting affiliate marketing campaigns. We also receive personal data from Awin and the potential customers' intermediary that can be categorized as follows:
Cookie Data: Data about the website, app, or other technology from which the potential customer was referred and technical information about your device.
As a German company we take GDPR topics very seriously and are closely working with the Privacy experts at HeyData (www.heydata.eu).
Please note that this assessment represents our view of the compliance with applicable data
protection legislation but in no way consists in legal advice. For conclusive legal advice regarding your GDPR compliance, please contact your data protection officer directly.
There is one to-do for you before the go-live with Sizekick - please add the following text to the
On this website users have the possibility to use the size recommendation solution of sizekick GmbH (Rosa-Bavarese-Str. 3, 80639 München) to get personal size advice. The usage of Sizekick's size
https://www.sizekick.io/privacy-policy-web-app An integration of Sizekick in the consent management system of your website (so called cookie manager) is not necessary, because the usage of the Sizekick size recommendation solution is optional and no user is forced to use it. Furthermore Sizekick is not tracking any personal information before the user actively starts the size recommendation process.
Our partner, Anchor Media GmbH, Budapester Straße 45 in 20359 Hamburg, Germany, enables us to display user-generated content on the website using the squarelovin tool. The software uses „cookies“, i.e. text files that are stored on your computer and enable an analysis of the use of the offer.
The content for this is collected by the social network "Instagram" and subsequently provided in a legally secure and GDPR-compliant manner for use in galleries on our website. Personal data is not evaluated in the process.
For more information, visit https://squarelovin.com/privacy/
RESERVATION/COLLECTION IN THE STORE
In order to be able to reserve the desired items for you or make them available for pickup in one of our stores, we need to collect and store the following data:
First and last name, e-mail address, address, order data, payment method.
The legal basis for this is, among others, Art. 6 para. 1 lit. b) and f) GDPR.
In order for us to let you know if your reservation request was successful or to contact you and identify you when you pick up the items, we need to share your information with the store you selected.
Our German Stores are operated by our subsidiary, Strellson GmbH , Max-Stromeyer-Strasse 172, 78467 Konstanz, Germany (Responsible Entity). Our Swiss Stores are operated by our subsidiary, Lenox AG, Sonnenwiesenstrasse 21, 8280 Kreuzlingen, Switzerland (Responsible Entity). Our Austrian Stores are operated by our subsidiary, HF Retail GmbH, Marktstrasse 30, 6850 Dornbirn, Austria (Responsible Entity) and our Polish Stores are operated by our subsidiary, Strellson Poland Sp. z o.o., ul. Grzybowska 2/78, PL-00-131 Warszawa (Responsible Entity).
The above data will be deleted by our stores or our subsidiaries no later than four weeks after the selected items have been collected from us.
STORAGE PERIOD AND DELETION
JOOP! stores and processes your personal data only as long as this is necessary for the respective purpose (see section "What data do we collect and for what purpose and on what legal basis"). In all other cases, we delete your personal data; the only exception is data that we must continue to store in order to fulfill legal obligations (e.g. tax or commercial law retention obligations).
YOUR RIGHTS AS A DATA SUBJECT
As a person affected by data processing, you have a right to information pursuant to Article 15 of the GDPR, a right to rectification pursuant to Article 16 of the GDPR, a right to data erasure pursuant to Article 17 of the GDPR, a right to restriction of processing pursuant to Article 18 of the GDPR and the right to data portability pursuant to Article 20 of the GDPR. For the rights to information and to data deletion, restrictions according to respective national Data Protection Laws apply.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If you are of the opinion that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with a data protection supervisory authority responsible for us (Art. 77 GDPR in conjunction with respective applicable national Data Protection Laws).
We are at your disposal for further questions regarding data protection and the processing of your personal data as well as for revocations or requests for information. You can reach us at email@example.com or also via the contact details provided in the imprint.
By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other cookie types, we need your permission.
If necessary, we use certain data in accordance with the legal requirements within the framework of pseudonymous user profiles for the purposes of advertising, market research or for the needs-based design of our offers.
Our „cookie bar“ is updated regularly and gives you the opportunity to voluntarily decide whether and, if so, which cookie types may be collected.
Some cookies are placed by third parties that appear on our pages.
You can change or revoke your consent at any time from the cookie statement on our website. To do this, delete the local data in your browser settings. The next time you visit our website, you can then specify your cookie preferences again in Usercentrics.