Data protection

We take data protection seriously

It is very important to us to protect your privacy when processing your personal data. When you visit our website, it is standard practice for our web server to store the IP of your Internet service provider, the website that you are visiting us from, the pages on our site that you visit, and the date and duration of your visit. This information is essential for the technical transmission of the websites and secure operation of the server. No personalised analysis of this data will be carried out.

If you send us data using a contact form, this data will be stored on our servers in the course of data backup. We will use your data exclusively to process your request. Your data is treated as strictly confidential and is not passed on to third parties.

Controller

Hirmer GROSSE GRÖSSEN Online GmbH

Kaufingerstraße 28

80331 Munich, Germany

Telephone: +44 122 3976344

E-Mail: [email protected]

Personal data

Personal data is data that relates to you personally. This includes your name, your address and your e-mail address. You are not required to disclose any personal data to visit our website. In some cases, we require your name and address as well as further information to provide you with the service you have requested.

This also applies if we provide you with information upon request or if we respond to your queries. In such cases, we will always notify you of this. In addition, we only store the data that you have submitted to us automatically or voluntarily.

If you use one of our services, we generally only collect the data that is necessary to provide you with our service. We may ask you for further information; however, the provision is voluntary. Whenever we process personal data, we do so in order to offer you our services or pursue our commercial goals.

Automatically saved data

Server log files

The website provider automatically collects and saves information in server log files that your browser automatically transmits to us. This information includes:

• Date and time of request
• Name of requested file
• Page from which the file was requested
• Access status (file transmitted, file not found, etc.)
• Internet browser and operating system used
• Complete IP address of the requesting device
• Quantity of data transmitted

This data will not be aggregated with other data sources. Processing is carried out on the basis of Art. 6 (1)(f) GDPR due to our legitimate interest in improving the stability and functional operation of our website.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we temporarily store this data. We are not able to draw conclusions about the personal identity of individuals using this data.

After seven days at the latest, the data will be made anonymous by truncating the IP address at the domain level so that it is no longer possible to identify individual users. The data will also be processed for statistical purposes in anonymised form; this data will not be compared with other databases or passed on to third parties, even partially. The number of page visits will be presented exclusively as part of our server statistics that we publish every two years in our activity report.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are transmitted from an Internet server to your browser and stored on its hard disk. In this process, only the Internet Protocol address is stored; no personal data is stored.

The information that is stored in the cookies makes it possible to automatically identify you the next time you visit our website, making it easier for you to use. The legal basis for the use of cookies is our legitimate interest pursuant to Art. 6 (1)(f) GDPR.

Of course, you can also visit our website without accepting cookies. If you do not wish for your computer to be identified on your next visit, you can reject the use of cookies by changing the settings in your browser to "Block cookies". You can find information on how to do this in your browser’s operating instructions. However, rejecting the use of cookies may lead to restrictions in the use of some sections of our website.

Google Analytics with anonymisation function

On our website, we use Google Analytics, a web analysis service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google". Google Analytics uses cookies, i.e. text files that are stored on your computer and make it possible to analyse your website use. The information generated by these cookies, such as the time, location and frequency of your website visit, including your IP address, is transmitted to Google in the USA and stored there. On our website we use Google Analytics with the “_gat._anonymizeIp” add-on. In this case, your IP address will first be truncated and anonymised by Google within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area.

Google will use this information to evaluate your use of our website in order to compile reports about website activity on our behalf and to render other services connected to website and Internet use. In some cases, Google may also pass on this information to third parties, provided this is required by law or if third parties are processing this data on behalf of Google.

Google states that it will not under any circumstances link your IP address to other Google data. You can prevent the installation of cookies by changing your browser settings accordingly. However, we inform you that in this case it may not be possible to use all features of our website to their full extent.

Furthermore, Google provides an opt-out add-on for the most common browsers that gives you more control over which data Google records about the websites you have visited. The add-on informs the Google Analytics JavaScript (ga.js) that no information about the website visit is to be shared with Google Analytics. However, the Google Analytics opt-out add-on for browsers does not prevent information from being passed on to us or to other web analytics services that we may use. You can find more information about installing the browser add-on in the following link: tools.google.com/dlpage/gaoptout?hl=en.

If you visit our website on a mobile device (smartphone or tablet), you must click on this link in order to prevent tracking by Google Analytics on this website in the future. This is also possible as an alternative to the browser add-on mentioned above. By clicking on the link, an opt-out cookie will be set on your browser that is only valid for this browser and this domain. If you delete the cookies in this browser, this will also delete the opt-out cookie and you will have to click the link again.

If you have agreed that Google may link your web and app browser history with your Google account and that information from your Google account may be used to generate personalised advertisements, Google will use your data, together with Google Analytics data, to create target group lists for cross-device remarketing. On our website, Google Analytics will initially record your Google-authenticated ID that is linked to your Google account (i.e. personal data). Your ID is then temporarily linked to your Google Analytics data by Google Analytics in order to optimise our target groups.

If you do not agree to this, you can change the relevant settings in the "My Account" section of your Google account.

Econda

To ensure the tailored design and optimal performance of this website, data that has been anonymised using the solutions and technologies of econda GmbH will be collected and stored and user profiles will be compiled from this data using pseudonyms. Cookies that facilitate the recognition of an Internet browser may be used for this purpose.

However, user profiles will not be combined with personal data concerning the bearer of the pseudonym without the visitor’s express consent. IP addresses in particular are made unreadable immediately upon receipt, making it impossible to attribute user profiles to IP addresses.

Visitors to this website can withdraw their consent to the collection and storage of data with effect for the future at any time: https://www.econda.de/en/data-protection/revocation-for-data-storage/.

Kenshoo

Our website uses the web analysis service with bid management provided by Kenshoo Ltd. To ensure tailored design and to optimise our website, anonymised usage data is collected and stored in aggregated form. This web analysis service also uses cookies (see 4.2). You can object to the collection, storage and use of your (anonymously collected) visitor data at any time. To do so, please use the opt-out function provided by Kenshoo (http://match.xg4ken.com/services/fb/optout).

Hotjar web analysis

This website uses Hotjar, an analytics tool provided by Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. This makes it possible to measure and evaluate usage behaviour (clicks, mouse movements, scroll depth etc.) on our website. The information generated about your visit to our website by the "tracking code" and "cookie" is transmitted to the Hotjar server in Ireland and stored there.

The tracking code is used to collect information, including the following: The IP address of your device (aggregated and stored in an anonymised format), your e-mail address including your first and last name if you provided them to us via our website, geographical location (only country) as well as log data such as the referring domain, pages visited, etc. Hotjar users this information to analyse your use of our website, create usage reports and other services relating to website use and website analysis.

To provide its services, Hotjar also uses services offered by third-party companies such as Google Analytics and Optimizely. These third-party companies may save information that your browser sends during the website visit such as cookies or IP requests. For more information about how Google Analytics and Optimizely save and use data, please consult their respective privacy policies. You can find the Hotjar privacy policy here: https://www.hotjar.com/privacy. You can prevent Hotjar from collecting data by clicking on the following Link and following the instructions there.

ProductsUp

We use ProductsUp to measure the success of our offers through price comparisons etc. In this process and without personal reference, a cookie from the price comparison page records whether sales are completed on our website and to what amount. The provider is Products Up GmbH, Bahnhofstr. 5, 91245 Simmelsdorf, Germany (https://www.productsup.com/privacy-policy/).

Google Optimize

We use the Google Optimize service to increase the appeal, content and functional operation of our website by offering new features and content to a percentage of our users and statistically analysing the change in usage. Google Optimize uses cookies that enable optimisation and analysis of your use of our website. Google will use this information to evaluate your use of our website in order to compile reports about the optimisation test and associated website activity and to render other services connected to website and Internet use on our behalf. The IP address that is transmitted by your browser will not be combined with other Google data.

The Terms of Use for Google Analytics and information about data protection can be found at the following links: https://www.google.com/analytics/terms/us.html and https://www.google.de/intl/us/policies.

Google AdSense

We use Google AdSense on our website. Google AdSense is a service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements. Google AdSense uses cookies - text files that are stored on your computer allowing us to analyse the use of our website. Google AdSense also uses web beacons.

Web beacons enable Google to analyse information such as the flow of visitors on our website. Along with your IP address and a record of the advertising format displayed, this information is transmitted to Google in the USA, saved there and may be forwarded by Google to its contracting parties. However, Google does not link your IP address to other data saved about you.

You can prevent the installation of cookies by changing your browser settings accordingly. However, we inform you that in this case it may not be possible to use all features of our website to their full extent. By using our website, you agree to the processing of your personal data collected by Google in the manner described above and for the purpose indicated above.

Google Remarketing

This website uses the remarketing function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of this function is to display interest-related advertisements to website visitors within the Google marketing network. This technology allows us to display automatically-generated promotional offers oriented at specific target groups after you visit our website. The ads are based on the products and services that you clicked on during your last visit to our website. For this purpose, a cookie will be stored in the website visitor's browser that makes it possible to recognise visitors when they access websites within the Google marketing network. Cookies are small text files that are stored in your browser when you visit our website. Google typically uses them to save.

Information such as your web request, IP address, browser type, browser language, date and time of your request. This information is used to attribute the web browser to a specific computer. On websites within the Google marketing network, visitors will then be shown advertisements relating to content that the visitor previously accessed on websites that use Google's remarketing function.

If you have agreed at https://www.google.com/settings/u/0/ads/authenticated that Google may link your browser history with your Google account and that information from your Google account may be used to generate personalised ads, the remarketing function will be used across your different devices. In this process, Google will record and use your Google ID for cross-device recognition. Google states that it does not generally collect any personal data in this process. Nevertheless, if you do not wish to use the Google remarketing function, you can deactivate this by clicking on Opt-Out here.

You can also prevent the storage of cookies by changing your browser settings accordingly. However, we inform you that in this case it may not be possible to use all features of this website to their full extent. You can read more information about the use of cookies by Google in the Google privacy policy.

Facebook Custom Audiences Pixels

In order to present visitors to our website with interest-based advertisements on Facebook during their visit, we use Custom Audiences Pixels provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). To this end, we have installed a Facebook pixel on our website that generates a direct link to Facebook servers when our website is visited.

This then communicates to the Facebook server that you have visited our website and Facebook attributes this information to your personal Facebook user account. You can find more information about the collection and use of data by Facebook and learn about your rights and options for protecting your privacy in this regard in Facebook’s privacy policy at https://www.facebook.com/about/privacy.

You can object to this connection with Facebook by clicking on this link: Opt-Out.

Facebook "Sign in with Facebook"

We use components from the provider facebook.com on our website. Facebook is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

We make use of the "Facebook Connect" function offered by Facebook.

If you wish to use this function, you will first be redirected to Facebook. There you are requested to log in with your username and password. Of course, we do not obtain any knowledge of your login information. If you are already logged in to Facebook, this step is skipped.

After that, Facebook tells you which data will be transmitted to us (public profile, friends list, e-mail address and current place of residence). You can confirm this by pressing the "OK" button. We use the transmitted data to create your customer account, though your friends list is obviously not saved as part of this process. Beyond this data, no permanent connection is established between your customer account and your Facebook account.

For the purpose and scope of data collection, further processing and use of this data by Facebook, and your rights and options for privacy settings, please see the Facebook privacy policy.

Instagram

Plugins and API interfaces from the social network Instagram are integrated on our website. You can recognise the Instagram plugin from the "Instagram button" on our website. If you click the Instagram button while you are logged in to your Instagram account, content from our website can be linked on your Instagram profile. This allows Instagram to associate your visit to our website with your user account. We hereby expressly inform you that, as the website operator, we have no knowledge concerning the content of the data transmitted or how it is used by Instagram.

More information about the Instagram privacy policy can be found here: http://instagram.com/about/legal/privacy.

Criteo (Personalised advertising)

This website also uses the Criteo service provided by Criteo SA, Rue Blanche, 75009 Paris, France. With the help of this service, targeted advertising is displayed to users who have already visited our website and expressed interest in our services on this website or on websites that also use the Criteo service. This advertising is displayed based on information about each website visit that is saved in cookies on the user’s device among other locations. These text files are selected for targeted product recommendations during subsequent website visits.

For this purpose, a randomly generated identification number is stored in the cookies. Neither this number nor the information about your visits to the website can be traced back to you personally. Under no circumstances is this data used to personally identify you as a visitor to our website.

You can prevent the storage and use of information by the Criteo service by clicking on the following link (http://www.criteo.com/privacy/) and sliding the "Opt-out" bar to "ON". If you select "ON", a new cookie (opt-out cookie) will be set in your browser. This cookie indicates to the Criteo service that Criteo may no longer collect or process any data about your user behaviour.

You have the option of reactivating this function by sliding the bar to "OFF". Please note that you need to activate this setting for each browser you use. If all cookies are deleted in your browser, this also applies to the opt-out cookie.

Awin

The controller for data processing has integrated components from Awin on this website. Awin is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based form of sales that allows commercial website operators, known as merchants or advertisers, to display promotional offers that are generally remunerated through click or sale commissions on the websites of third parties, that is, sales partners, also known as affiliates or publishers. Using the affiliate network, the merchant provides advertising material, i.e. an ad banner or other suitable means of internet advertising, which are then integrated by affiliates on their own websites or promoted through other channels such as keyword advertising or e-mail marketing.

The operator of Awin is Awin AG, Eichhornstraße 3, 10785 Berlin, Germany.

Awin sets a cookie on the data subject's IT system. The Awin tracking cookie does not save personal data of any kind. The only information that is stored is the identification number of the affiliate, i.e. the partner that refers potential clients, along with the reference number of a website visitor and the advertising material that was clicked on. The purpose of storing this data is to process commission payments between a merchant and affiliate that are settled using the affiliate network, i.e. Awin.

The data subject can object to the placement of cookies by our website or permanently object to cookies using this Opt-Out link. Configuring the internet browser in this way would also prevent Awin from setting a cookie on the data subject's IT system. Cookies set by Awin can also be deleted using an internet browser or other software programme at any time.

The current privacy policy for Awin can be found at https://www.awin.com/gb/privacy abgerufen werden.

Taboola

This website uses Taboola's content discovery technology to recommend to you other online content that you may be interested in. To make these recommendations, Taboola collects information about your device and your behaviour on this website (and other partnering websites) using cookies and similar technologies. To learn more, see Taboola’s privacy policy or click here to Opt-Out.

Outbrain

This website uses Outbrain, a web advertising platform that recommends other online content that may be of interest to you. To drive these recommendations, Outbrain collects information about your device and behaviour on this website (and other partner sites) through cookies and similar technologies. To find out more information, please see Oubrain's Privacy Policy.

Impact

We work with the affiliate platform impact.com. As part of this collaboration, information about the use of our website and the transactions you have made is transmitted to impact.com. This data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.

The following technical measures are implemented to ensure the data protection rights of our users:

• Cookie management: Users have the option to reject cookies. Our platform supports cookie-free tracking methods to accommodate users who do not allow cookies.
• Data anonymisation: Data is anonymised wherever possible to protect the privacy of users.
• Secure data transmission: All data is transmitted securely using encryption protocols.
• Compliance with regulations: We comply with data protection regulations such as the GDPR and ensure that our technical measures are compliant.

Data collected When you access our website via an affiliate link and complete a transaction, certain information is transmitted to impact.com. This includes:

• Information about the affiliate link you used to access our website
• Details of the transactions made (e.g. purchase amount, time)
• Information about your browser and device (e.g. IP address, device type)

Purpose of data processing The data transmitted is used by impact.com to enable billing with our affiliate partners and to provide us with valuable insights into the performance of our affiliate programme. This information helps us to better manage our marketing activities and to improve our offering.

Data transfer and storage period The data is transferred to impact.com for processing and may also be processed in countries outside the European Union. However, impact.com undertakes to ensure an adequate level of data protection in accordance with the requirements of the GDPR. The data will be stored for as long as is necessary to achieve the above-mentioned purposes or as long as there are legal obligations to retain data.

The applicable data protection provisions of impact can be accessed at https://impact.com/privacy-policy/. here.

Dognet

This is an affiliate network. Company which processes the data is Quality Unit, s.r.o., Polus Tower 1, Vajnorská 100/A, 831 04 Nové Mesto, Bratislava, Slovakia This represents the legal basis which is required for all processing purposes by the GDPR. Common legal grounds are Art. 1 (6) (a) GDPR, if a user has given their consent and Art. 1 (6) (f), if the processing of personal data is essential for providing the services. Affiliate Marketing & Tracking. Technologies Used: Cookies. This list represents all (personal) data that is collected by or through the use of this service. E-shop order information (order id, total cost, product id, currency and some more optional data without personal data about the customer) Visitor ID Affiliate ID Merchant account id IP address of the customer Details of the affiliate whose link/banner was clicked Banner id, Campaign id Date of visit Time validity of the particular PAPVisitorId Referrer URL User agent

Legal Basis: In the following the required legal basis for the processing of data is listed. Art. 6 para. 1 s. 1 lit. a GDPR. Location of Processing European Union The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes. Data Recipients: Lead Media s.r.o., Karpatská 6, 811 05 Bratislava, Slovensko

Below you can find the email address of the data protection officer of the processing company: [email protected].

Click here to read the privacy policy of the data processor. https://www.postaffiliatepro.com/privacy-policy/.

Bing Ads

We use conversion tracking provided by the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our website. This means that a cookie is set on your computer by Microsoft Bing Ads if you are redirected to our website from a Microsoft Bing advertisement. In this way, we and Microsoft Bing are able to identify that someone clicked on an advertisement and was redirected to our website, accessing a pre-determined target page (conversion page). This lets us know the total number of users who clicked on a Bing advertisement and were then redirected to a conversion page. No personal information is communicated about the identity of the user.

If you do not wish for Microsoft to use the information about your activity in the manner described above, you can reject the cookies required to do this – for instance, by changing your browser settings to deactivate automatic cookies as a rule. Additionally, you can prevent the collection of data generated by the cookie concerning your use of the website as well as the processing of this data by Microsoft by clicking on the following link: http://choice.microsoft.com/en-US/opt-out. You can find further information about data protection and the cookies used by Microsoft and Bing Ads on the Microsoft website at https://privacy.microsoft.com/en-US/privacystatement.

Google Tag Manager

This website uses Google Tag Manager. Tag Manager does not record any personal data. The tool triggers other tags that may record data. Google Tag Manager cannot access this data. If deactivation is specified at the domain or cookie level, this remains in force for all tracking tags that are implemented using Google Tag Manager. You can find the Google privacy policy for this tool: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy.

Fitanalytics

In order to provide fitting advice, we offer an online size guide that assists you in selecting the right clothing size during the order process. The size guide can be opened by pressing the "Size Guide" button on the detailed product page; this guide is operated by Fit Analytics GmbH, Sanderstraße 28, 12047 Berlin, Germany. When using the size guide, you can choose to provide the subsequent data to Fit Analytics in order to receive a size recommendation. Fit Analytics collects this usage data exclusively in anonymous form and only processes this data in order to calculate the correct clothing size for each individual customer and for continual optimisation of the methods used for recommendation. You can prevent the storage of session cookies by configuring your web browser accordingly. You may request access to information that is stored concerning you or the erasure of this data by contacting Fit Analytics and indicating the session ID that is saved in your session cookie ([email protected]). Since Fit Analytics does not store any information that can be used to personally identify you, information or erasure can only be requested by indicating the relevant session ID. You can find more information and contact details for further queries in the privacy policy of Fit Analytics.

Zyseme

If you use the ZyseMe tool, your anonymised data will be transmitted to the company beonD GmbH, Kulturbrauerei Haus 4.H, Schönhauser Allee 36-38, Berlin, Germany. ZyseMe processes this data on our behalf. We have concluded a suitable processing agreement to ensure that your data is processed by ZyseMe in accordance with the applicable data protection laws.

ZyseMe transmits your anonymised data to the shirt manufacturer of your choice. The legal basis for transmission to the respective manufacturer is your consent (Article 6 [1] Sentence 1 [a] GDPR) and the initiation or performance of a contract (Article 6 [1] Sentence 1 [b] GDPR). As part of order processing, ZyseMe uses the subcontractor Heroku, based in the USA.

Heroku is part of salesforce.com inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. Salesforce is certified under the EU-US Privacy Shield and therefore provides sufficient guarantees for an adequate level of data privacy.

Behamics

This website uses technologies provided by behamics AG to customise website content, to issue incentives and to conduct anonymous tests to improve website usability.

The provider, behamics AG, collects pseudonymised information about your use and purchasing behaviour in our online shop in order to offer you a customised user experience.

For more information and an opt-out option, click here to read the data processor privacy policy.

Dynamic Yield

We use the services of Dynamic Yield to optimise our offer for you. This involves using the page content you have called up to recommend equivalent or thematically related products or other content relevant to you. Cookies are used for this purpose. The legal basis for this data processing is Art. 6 para. 1 lit. a GDPR. The storage period of these cookies is limited to a maximum of 365 days. You can find more information at: https://www.dynamicyield.com/de/gdpr-and-privacy/.

Picalike

We use services provided by picalike GmbH, Rothenbaumchaussee 7, 20148 Hamburg, Germany, to display personalised product recommendations and optimise our content for customers accordingly. Cookies are also used in this context. Data is collected exclusively in anonymised form. You can find further details in the picalike privacy policy.

Usercentrics

This website uses the Usercentrics cookie consent technology to acquire your consent for the storage of certain cookies on your end device and to document your consent in accordance with the relevant data protection regulations. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, (hereinafter referred to as “Usercentrics”).

When you access our website, the following data is transferred to Usercentrics:

• Your consent or revocation of your consent
• Your IP address
• Information about your browser
• Information about your end device
• Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to allocate the consent or revocation of consent that you have provided. Data collected in this way will be stored until you ask us to delete it, until you delete the Usercentrics cookie yourself or until the purpose of data storage no longer applies. Statutory data retention obligations remain unaffected.

Usercentrics is used to acquire the legally required permissions for the use of cookies. The legal basis for this is Art. 6 (1) Sentence 1 (c) GDPR.

Userlike Live-Chat

This website uses Userlike, a live chat software provided by the company Userlike UG (haftungsbeschränkt), Deisterweg 7, 51109, Cologne, Germany. Userlike uses “cookies," text files that are stored on your computer to enable personal communication with you in the form of a real-time chat on the website.

The Userlike cookie is set by the live chat plugin to enable live chat and to keep the chat open and assigned to the same operator as you browse. Information about your usage and the associated live chat data will be collected, stored and processed on Userlike servers in Germany. You can find further details in the privacy policy of Userlike UG.

AppCenter

Our app uses the error diagnostics service "AppCenter Analytics", which is operated by Microsoft Privacy, Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. (hereinafter referred to as "Microsoft").(nachfolgend „Microsoft“ genannt) betrieben wird.

If the app crashes during use or unexpected errors occur, specific information will be sent to Microsoft, in particular the device type, operating system version, date and time of the error, country from which the request originated and the language set on the operating system.

"AppCenter" is exclusively used without recording your IP address or any other personal information. Further information on data protection can be found here: https://docs.microsoft.com/en-us/appcenter/sdk/data-collected.

Newsletter

To mail our newsletter, we use the so-called double opt-in process, meaning that we will send you a newsletter by e-mail only after you have explicitly confirmed beforehand that we should activate the newsletter service. We will then send you a notification e-mail asking you to confirm that you would like to receive our newsletter by clicking on one of the links contained in this e-mail. When you subscribe to our newsletter, we store your IP address and the registration date. This data is only stored as evidence in the event that a third party is misusing your e-mail address to sign you up to receive the newsletter without your knowledge or permission.

If you no longer wish to receive our newsletter in the future, you can withdraw at any time without incurring more than the transmission costs at the basic rates. You can unsubscribe from the newsletter by sending an e-mail to [email protected].

Customer account

For every customer who has registered, we set up password-protected direct access to their user data (customer account) stored with us. Here you can view data about your completed, outstanding and recently shipped orders and manage your address, bank details and the newsletter.

You are obliged to keep your personal access data confidential and not grant access to any unauthorised third parties. We cannot accept any liability for misused passwords unless we were responsible for this misuse.

Credit check

In order to offer you the best possible options for your preferred payment method, we must protect you and ourselves against misuse. For this reason, we transfer the personal data required for a credit check, including your address data, to the company creditPass, c/o TeleGo GmbH, Mehlbeerenstraße 4, 82024 Taufkirchen, Germany, which carries out a corresponding assessment using mathematical and statistical methods. Your address data is also used to calculate the probability value. In this context, Hirmer GROSSE GRÖSSEN Online GmbH is authorised to obtain data via creditPass relating to your credit rating from HIT Hanseatische Inkasso-Treuhand GmbH, Eiffestraße 76, 20537 Hamburg, Germany, from infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany, from CEG Creditreform Consumer GmbH, Hellersbergstr. 11, 41460 Neuss, Germany, as well as from Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, 22761 Hamburg, Germany, and to obtain and store data from Deutsche Post Direkt, Sträßchensweg 10, 53113 Bonn, Germany, for the purposes of address validation and deliverability verification. We use the information we obtain about the statistical probability of a default ("probability value") to make a balanced decision concerning the payment options available to you.

If you do not agree with the payment method(s) offered to you on the basis of this automated procedure, you can inform us in writing by post or by email at [email protected]. We will then review the decision again, taking your position into account. You may revoke your consent to the transmission of your data to third parties at any time. Notification in writing (e.g. email, fax, letter) is sufficient. We hereby inform you, however, that payment in advance will be the only payment method available in this case.

YouTube with enhanced privacy mode

We use YouTube as a provider to embed videos. These videos are embedded with enhanced privacy mode. Like most websites, YouTube also uses cookies to collect information about its website visitors. YouTube uses cookies to collect video statistics, prevent fraud and improve usability among other services.

They are also used to establish a connection with the Google DoubleClick network. Once the video starts playing, additional data processing operations may be triggered. We have no influence on these operations. You can find further details about data protection in connection with YouTube in the privacy policy at: https://support.google.com/youtube/answer/7671399.

Google Doubleclick

Doubleclick by Google is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Doubleclick by Google uses cookies to display ads that are relevant for you. In this process, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads are displayed in your browser and which ads are accessed. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to display ads based on previous visits to our websites or other websites on the Internet.

The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there. Google observes the data protection provisions of the "Privacy Shield" agreement and is registered with the "Privacy Shield" programme of the US Department of Commerce. Google will only transfer data to third parties based on statutory requirements or within the context of contract data processing. Google will not, under any circumstances, connect your data with other data collected by Google.

By using our website, you agree to the processing of your personal data collected by Google in the manner described above and for the purpose indicated above. You can prevent the storage of cookies by changing your browser settings accordingly. However, we inform you that in this case it may not be possible to use all features of our website to their full extent. You can also prevent the collection of the data generated by the cookie concerning your use of this website by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link https://adssettings.google.com/authenticated?hl=en under the item DoubleClick opt-out browser add-on. Alternatively, you can deactivate DoubleClick cookies using this Opt-Out.

Google reCAPTCHA

To protect your orders sent using online forms, we use the reCAPTCHA service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This query is used to differentiate between human data entry and fraudulent entry through automated machine processing. As part of the query, the IP address will be sent to Google along with other data required by Google for the reCAPTCHA service.

To this end, your entry will be transmitted to Google for further use. By using reCAPTCHA, you agree that your detection entries may be used for the digitalisation of old texts. If IP anonymisation is activated on this website, your IP address will first be truncated by Google within the member states of the European Union or by other signatories to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to analyse your use of the website on behalf of the website operator. The IP address transmitted through reCaptcha will not be combined with other Google data. This data is subject to the deviating data protection provisions of Google. For more information about Google's privacy policy, please visit: https://www.google.com/intl/de/policies/privacy.

Google Maps

This website uses Google Maps to display maps and to create route maps.

Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By using Google Maps on this website, you agree that Google, one of its representatives or a third-party provider may collect, process and use data that is automatically collected or submitted by you. The terms of use for Google Maps can be found here.

You can view the privacy policy of Google Maps here.

Sizolution

This tool enables us to provide our customers with size recommendations. For this purpose, our customers fill out a questionnaire or submit a picture of their body. Using the tool, we can then inform our customers of our approximate size recommendations and provide a size forecast. The following types of personal data are collected: Body/physique data (e.g. height, weight), which is not considered health data within the meaning of Art. 9 (1) GDPR; photos of customers; the customer's online activity, sales history and returns history. Sizolution GmbH uses Yandex and Hotjar to track widget use. They are used to further improve the widgets and do not impact their core functionality. Sizolution GmbH does not use any other external tracking solutions.

Security

We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers who represent us are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before transmission. This means that your data cannot be misused by third parties. Our security precautions are subject to an ongoing process of improvement and our privacy policy is constantly being revised. Please ensure that you have the most recent version at your disposal.

Rights of the data subject

You have the right to information, rectification, erasure or restriction of processing of your stored data, the right to object to processing as well as a right to data portability and the right to lodge a complaint in accordance with the requirements of data protection law.

Right to information:

You may request information from us as to whether and to what extent we process your data.

Right to rectification:

If any of your data is incomplete or incorrect, you may ask us to rectify or complete such data at any time.

Right to erasure:

You may request erasure of your data from us if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons opposing an immediate erasure, e.g. in the case of legally regulated retention requirements. Regardless of your right to erasure, we will immediately and completely erase your data unless there is a contractual or legal duty to retain such information.

Right to restriction of processing:

You may request that we restrict the processing of your data if

• You dispute the accuracy of the data, for a period of time that allows us to verify the accuracy of the data,
• The processing of the data is unlawful, but you oppose erasure and instead request a restriction of data usage,
• We no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
• You have lodged an objection to the processing of the data.

Right to data portability:

You may request that we provide you with the information you have provided to us in a structured, commonly used and machine-readable format and that we transmit that information to another controller without hindrance, provided that

• We process such data on the basis of your consent, which may be withdrawn, or for the performance of a contract between us, and
• This processing is carried out using automated methods.

If technically feasible, you may require us to transfer your data directly to another controller.

Right to object:

If we process your data to pursue our legitimate interests, you can object to this data processing at any time; this would also apply for profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless the processing is for the purpose of establishing, pursuing or defending legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without stating reasons.

Right to lodge a complaint:

If you believe that we have violated German or European data protection laws when processing your data, please contact us to clarify your concerns. Of course, you also have the right to contact the supervisory authority responsible for you, the relevant State Office for Data Protection Supervision. If you would like to make a claim against us in regard to one of the aforementioned rights, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this Privacy Policy

We reserve the right to change our privacy policies if this becomes necessary due to new technologies. Please ensure that you have the most recent version at your disposal. If fundamental changes are made to this data protection regulation, we will announce this on our website.

For any questions concerning data protection, interested parties and visitors to our website can reach us at:

Matthias Hassler LL.M.

Projekt 29 GmbH & Co. KG

Ostengasse 14

93047 Regensburg, Germany

Phone: 0941 2986930

Fax: 0941 29869316

E-Mail: [email protected]

Internet: www.projekt29.de

If our data protection officer does not deal with your concerns to your satisfaction, you have the right to make a complaint to the data protection authorities responsible for your federal state.