shopping24 Gesellschaft für multimediale Anwendungen mbH - Data protection notice for shopping24 GmbH, date: [20/06/2021]
Since 25 May 2018, the uniform provisions of the EU Data General Data Protection Regulation (GDPR) have applied throughout Europe in the area of data protection. In the following data protection notice, we will inform you about the processing of personal data carried out by shopping24 GmbH (‘shopping24’ and/or ‘we’ and/or ‘controller’) in accordance with the GDPR and the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG 2018).
Please read our data protection notice carefully. If you have any questions or comments about our data protection notice, please contact us at email@example.com
- Name and contact details of the controller responsible for processing
- Contact details of the data protection officer
Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party, and categories of recipients
- Accessing our websites/applications
- Establishment, execution and/or termination of a contract
- Data processing for advertising purposes
Website and website optimisation
- Cookies – general information
- Cookies – general information
- Consent management OneTrust
Consent to the use of individual online services / the collection of tracking data
- Absolutely necessary cookies
- Consents for cookies for marketing purposes
- Consent for Google Adsense & Google Adexchange
- Revocation of all consents
- Contacting us
- Recipients outside the EU
- Your rights
1. Name and contact details of the controller responsible for processing
This data protection notice applies to data processing by
shopping24 Gesellschaft für multimediale Anwendungen mbH
Represented by the managing director(s): Dennis Kallerhoff
040 / 6461 - 6001
for the following websites: www.e-shopping24.com
2. Contact details of the data protection officer
The controller’s operational data protection officer(s) can be contacted at
shopping24 Gesellschaft für multimediale Anwendungen mbH
3 Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party, and categories of recipients
3.1 Accessing our websites/applications
Each time you access websites/applications, information is sent to our website/application server by your end device’s web browser and is temporarily stored in ‘log files’. The stored data records contain the following data, which is stored until automatic erasure: date and time of access, name of the page accessed, IP address of the requesting device, referrer URL (URL from which you came to our website), amount of data transferred, loading time, product and version information of the browser used as well as the name of your access provider.
The legal basis for processing the IP address is Article 6 (1) (f) of the GDPR. Our legitimate interest is based on
- ensuring a smooth connection is established;
- ensuring the convenient use of our website/application;
- evaluating system security and stability; and
- Fraud prevention (see 3.2.2)
This data does not provide any direct indication of your identity and we do not make any assumptions in this regard.
The data will be stored and automatically erased once the aforementioned purposes have been achieved. The standard periods for erasure depend on the criterion of necessity.
3.2. Establishment, execution and/or termination of a contract
3.2.1 Data processing on contract conclusion
If you register with one of our websites/applications and conclude a contract with us, we process the data required for the conclusion, execution or termination of a contract with you. This includes:
- First name, surname
- E-mail address
The legal basis for this is Article 6 (1) (b) of the GDPR, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. management of your customer account, processing of a purchase agreement) between you and us. In order to process your e-mail address in the event of a purchase via our websites/applications, we are also obliged to send an electronic order confirmation (Article 6  [c] of the GDPR) on the basis of legal requirements in the German Civil Code (Bundesgesetzbuch, BGB).
If we do not use your data for advertising purposes (see 3.3. below), we store the data collected for contract processing until the statutory or possibly contractual warranty and guarantee rights expire. After this period, we shall retain the information concerning the contractual relationship required under commercial and tax law for the periods specified by law. For this period, the data will only be processed again in the event of verification by tax authorities.
3.2.2 Use of data for fraud prevention purposes
The data you provide when placing an order can be used to check whether an atypical order process has occurred (e.g. artificially generated traffic for our shop partners). We fundamentally have a legitimate interest in carrying out such a check. The legal basis for processing is Art. 6 Paragraph 1 Letter f) GDPR.
3.2.3 Categories of recipients
We use contract processors to process your data. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible for data processing. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the person responsible.
184.108.40.206 Other third party partners
In addition, we use other third-party partners who are necessary for the provision of services and the achievement of various purposes. We transmit personal data to these third party partners if this is necessary in the context of the provision of services (for example to affiliate networks for pure billing purposes).
The legal basis for this data transfer is Article 6 Paragraph 1 Letter b), f) GDPR.
3.3 Data processing for advertising purposes
We give you the option of subscribing to our newsletter on our websites/applications. To ensure that no errors occurred when entering the e-mail address, we use the ‘double opt-in procedure’ (DOI procedure): after you have entered your e-mail address in the registration field, we will send you a confirmation link to the address provided. Only when you click on this confirmation link will your e-mail address be added to our newsletter mailing list. The legal basis for this data processing is Article 6 (1) (a) of the GDPR.
Reference to the right of withdrawal
You can revoke your consent at any time with effect for the future using the unsubscribe option at the end of each newsletter.
If you register for competitions organised by us, we will use the data you provide at the time of registration for the purpose of executing the participation contract, particularly notifying you of your winnings and, if applicable, advertising our offers and/or those of our competition partners. Detailed information can be found in the conditions of participation for each competition. The legal bases for this data processing are Article 6 (1) (a) of the GDPR, Article 6 (1) (b) of the GDPR and Article 6 (1) (f) of the GDPR.
4 Website and website optimisation
As the operator of the www.e-shopping24.com website, shopping24 collects data on the behavior of users on the website mentioned (tracking data). This includes, among other things, which individual sub-pages (item detail pages) were accessed. For this purpose, shopping24 and / or partners of shopping24 can set cookies in the browser used by the respective user. The collection of tracking data is generally only permitted if you have given your prior consent. You can give such consent by clicking the "OK" button in the "cookie banner" displayed on www.e-shopping24.com. The granting of consent is not necessary for the processing of such tracking data, which is required for the offer on the www.e-shopping24.com website. This includes e.g. the setting of cookies for the purpose of displaying the shopping cart. Among other things, shopping24 can use the information about your usage behavior to show you interesting offers on www.e-shopping24.com or to advertise you on other websites using personalized content (e.g. retargeting). Insofar as personal data about your usage behavior on www.e-shopping24.com are also provided by other providers, e.g. can be used for the purpose of "enriching your own information", such use will only take place in these cases if you have given your prior consent. In these cases, the further processing of the data collected on www.e-shopping24.com takes place under the sole responsibility of the provider. The providers can transfer the data to the USA as part of this further processing. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy against this. Tracking data that shopping24 collects and stores itself is processed by shopping24 exclusively in a pseudonymized manner. This prevents the data from being assigned to you personally. If you want to delete individual cookies set in your browser or want to find out which service providers / providers have set cookies in your browser, you can do this via a preference manager". Such is e.g. available at www.youronlinechoices.com. You also have the option of setting your browser in such a way that it prevents the setting of cookies or only allows certain types of cookies to be set. Details on the possibility of changing the settings of the common browser types (including Google Chrome, Firefox) can be found under section 4.2. this information on data protection.
4.1 Cookies – general information
Cookies are used on this website. Cookies are small text files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Through this we can e.g. Offer the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart and how high your current purchase value is. Other cookies remain on your computer and enable us to recognize your computer the next time you visit (so-called permanent or cross-session cookies). These cookies in particular serve, among other things, to make our offer more attractive to you. Thanks to these files, it is possible, for example, to display information that is specifically tailored to your interests on the www.e-shopping24.com website.
According to the legal requirements, the storage of information on end devices (desktops, cell phones, tablets, etc.) - e.g. by setting cookies and retrieving information from end devices (tracking) only if you have given your prior consent. However, consent does not have to be given if such storage / retrieval is necessary for the offer on the website (including technically necessary cookies). A requirement is e.g. with regard to ensuring the following functionalities / achievement of the following purposes:
- Enabling and maintaining log-in,
- Prevention of click fraud,
- Ensuring system security.
With regard to the data processing that is necessary for the operation of the website, you have no right of objection. Therefore, within the consent preferences in the consent tool, the selection “technically necessary cookies” is always activated and cannot be deselected.
You can use the www.e-shopping24.com website without data being retrieved from or stored on your device for purposes that are not required for the offerings of the www.e-shopping24.com website. For this reason, when you use the www.e-shopping24.com website - unless you have given any further consent - only "basic tracking" is activated.
4.2 Intervention options / browser settings
Of course, you can set up your browser so that it does not save our cookies on your hard drive. The help function in the menu bar of most web browsers will explain how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie or how you can delete all cookies you have already received and block future cookies.
Please follow the steps below:
In Internet Explorer
Select ‘Internet options’ from the ‘Tools’ menu.
Click on the ‘Privacy’ tab.
Now you can change the security settings for the Internet zone. Here, you set whether cookies should be accepted or rejected and which cookies should be accepted or rejected.
Confirm your settings by clicking ‘OK’.
Select ‘Settings’ from the ‘Extras’ menu.
Click on ‘Privacy’.
Select ‘Create according to user-defined settings’ from the drop-down menu.
Now you can set whether cookies should be accepted and how long you want to keep these cookies for, and add exceptions to which websites you always or never want to allow cookies for.
Confirm your settings by clicking ‘OK’.
In Google Chrome:
Click the Chrome menu on the browser toolbar.
Now select ‘Settings’.
Click on ‘Show Advanced Settings’.
Under ‘Privacy’, click on ‘Content settings’.
Under ‘Cookies’, you can change the following settings for cookies:
Block cookies by default
Delete cookies and website data by default after closing the browser
Allow exceptions for cookies from specific websites or domains
However, please note that in this case, you may be unable to use all of the functions of this website to their full extent.
If these cookies and/or the information they contain relates to personal data, the legal basis for data processing is Article 6 (1) (f) of the GDPR. Our interest in optimising our website shall be deemed to be legitimate within the meaning of the aforementioned provision.
4.3 Consent management OneTrust
4.4 Consent to the use of individual online services / the collection of tracking data
As in section 3.4. In this information on data protection, shopping24 collects and processes some tracking data. on the basis of consent. You give this consent by clicking on the button "Ok" on the website www.e-shopping24.com that is linked to this consent text. By clicking the "OK" button, you give your consent for shopping24 to store data on your device (e.g. by setting cookies) or to retrieve data from your device. Furthermore, by clicking on the "OK" button, you give your consent to the use of certain advertising functions, the use of which requires consent. You also have the option of clicking "Settings" in the banner and managing your consent preferences there. A distinction is made there between "Absolutely necessary cookies", cookies for marketing purposes ", as well as" Google Adsense and Google Adexchange". The data processing that takes place in connection with these advertising functionalities is described below (section 4.4.1. To section 4.4.5 of this data protection declaration).
4.4.1 Absolutely necessary cookies
220.127.116.11 Google Analytics as "basic version"
For the purpose of the needs-based design and continuous optimization of www.e-shopping24.com, data collected on the basis of a given consent is processed by the basic version of Google Analytics on the legal basis in Article 6 Paragraph 1 Letter f) GDPR (legitimate interest). The basic version of Google Analytics is a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies" (text files) that are stored on your computer and that enable your use of the website to be analyzed. On behalf of shopping24, Google will use this information to evaluate your use of the website and to compile reports on website activity. Google processes the data collected through the use of the "basic version" of Google Analytics exclusively on the instructions of shopping24 and for the purposes of shopping24.
You can object to the further processing of the data by Google Analytics here. The objection has the consequence that Google Analytics no longer collects data on the device you used when you submitted the objection on www.e-shopping24.com.
For the correct recording of sales and / or leads, AWIN AG, Eichhornstrasse 3, 10785 Berlin (hereinafter “AWIN”) places a cookie on a visitor's device. The cookies used by AWIN are accepted in the standard setting of the Internet browser. If you do not want these cookies to be stored, please deactivate the acceptance of cookies for the relevant domains in your Internet browser. AWIN cookies only save the ID of the intermediary partner and the serial number of the advertising material clicked on by the visitor (banner, text link, etc.), which are required for payment processing. When concluding a transaction, the partner ID is used to assign the commission to be paid to the mediating partner. The legal basis for this data processing is Article 6 Paragraph 1 Letter f) GDPR.
Details on data protection can be found at: www.awin.com/de/rechtliches/
4.4.2 Consents for cookies for marketing purposes
18.104.22.168 Consent for Google-Remarketing / Customer Match
This website uses the Google remarketing service. Google Remarketing is an online advertising program from Google Ireland Limited (“Google”). We use the remarketing function within the Google AdWords service. With the remarketing function, we can present you with advertisements based on your interests on other websites within the Google advertising network. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This enables us to display so-called "Google ads" and individualized advertising on other websites even after you have visited our website. For this purpose, Google saves a cookie in your browser when you visit Google services or websites in the Google advertising network. This cookie is used to record your visits. The cookie is used to uniquely identify your web browser and not to identify you personally. It is possible that Google uses the data collected via the otto.de website about your usage behavior for its own purposes or for the purposes of other Google customers (e.g. to display individualized third-party advertisements). Such further processing of the data as well as the processing of the data after it has been transmitted by OTTO to Google is carried out by Google as the sole data protection officer. In this context, Google, as the sole data protection controller, can store data about you in the USA. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy. The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent). We also use the Customer Match service. A pixel is integrated in your browser. As a result, Google assigns you as a visitor to this website an identification number and can thus recognize you when you visit other websites in order to enable the operator of this website to target you with individualized advertising or to decide that such advertising does not take place.
You can find more information about Google remarketing and Google's data protection declaration at: www.google.com/privacy/ads/. Here you can also assert your rights as a data subject (e.g. right to deletion) with regard to the data that Google, as the person responsible for data protection, processes. You can revoke the consent you have given for the use of Google remarketing here or refuse to give your consent and use Google remarketing.
22.214.171.124 Consent for Microsoft Advertising
Our website uses the Microsoft Advertising service. Microsoft Advertising is an online advertising program operated by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521). ("Microsoft"). We use so-called Universal Event Tracking (UET) within the Microsoft Advertising service with which data is collected and stored on this website for marketing and optimization purposes. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. Microsoft saves a cookie in your browser for this purpose. Your visits are recorded via this cookie. The cookie is used to uniquely identify your web browser and not to identify you personally. Microsoft continues to process the data collected about you on this website as the sole responsible party under data protection law. In this context, it is possible that your data will be transmitted from Microsoft to the USA. With regard to the USA, the European Court of Justice has ruled that this is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes without you being given a sufficient legal remedy against this. The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent). You can find more information on Microsoft's data protection declaration at: https://privacy.microsoft.com/de-DE/privacystatement Here you can also assert your rights as a data subject against Microsoft (e.g. right to deletion). The legal basis for the data processing described above is that in Article 6 Paragraph 1 Letter a) GDPR (consent).
126.96.36.199 Consent for Criteo Retargeting-Technology
The retargeting technology of Criteo SA, 32 Rue Blanche, 75009 Paris, is integrated into this website. By using this technology, it is possible to show you advertisements for products that you have viewed on this website on third-party sites (publisher sites). For this purpose, Criteo collects information about your usage behavior on this website by using tracking cookies and similar technologies that are placed in your browser or by using advertising IDs in environments that do not support cookies - for example apps. With the help of these technologies, Criteo can analyze trends and identify the interests of individual users with regard to websites and apps. Criteo uses these technologies to identify visitors to their partners' websites and apps. Users identified by Criteo receive a technical ID. At no point does Criteo collect personal data that could be used for identification, such as names or addresses. Criteo only analyzes the products viewed or the search behavior and the pages visited on the website of the partner for whom Criteo delivers advertising. In order to deliver personalized advertising to you and to offer you a seamless online experience, Criteo may synchronize the IDs of the various browsers you use. ("ID synchronization") Thanks to its ID synchronization technology, Criteo is able to always offer you the most relevant advertisements - regardless of your browser or device - without Criteo having to collect and process personal data such as names or addresses For this purpose, Criteo uses exact linking methods based on the technical data collected by means of the Criteo technologies used - such as the IDs of our advertising partners or encrypted e-mail addresses that the partners pass on to Criteo. Further information on data protection at Criteo can You can see it at https://www.criteo.com/de/privacy/.
The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR (consent).
You can revoke your consent to the use of Criteo technology here.
188.8.131.52 Consent for RTB Retargeting-Technology
The retargeting technology of RTB House GmbH, Kurfürstendamm 226, 10719 Berlin, is integrated into this website. By using this technology, it is possible to show you advertisements for products that you have viewed on this website on third-party sites (publisher sites). For this purpose, RTB House collects information about your usage behavior on this website using tracking cookies and similar technologies that are placed in your browser. Further information on data protection at RTB House can be found at https://www.rtbhouse.com/de/optout-page/.
You can revoke your consent to the use of RTB-House here.
4.4.3 Consent for Google Adsense & Google Adexchange
184.108.40.206 Consent for Google Adsense
We use Google AdSense on our website. Google AdSense is a service from the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, which is used to integrate advertisements. Google AdSense uses ‘cookies’, which are text files that are saved on your computer and allow the use of our website to be analysed. Google AdSense also uses ‘web beacons’. These web beacons allow Google to evaluate information, such as the flow of visitors to our site. In addition to your IP address and the collection of the ad formats displayed, this information is sent to Google in the USA, where it is stored and can be shared by Google with contractual partners. However, Google does not merge your IP address with any other data held about you. You can prevent cookies from being installed by changing your browser settings; please note that in this case, you may be unable to use all of our website’s functions properly. You can object to the use of your information at any time here.
More information can be found at: https://policies.google.com/privacy?hl=de
220.127.116.11 Consent for Google Adexchange // Doubleclick
You can prevent Google from collecting the data generated by the cookies that relates to your use of the websites and you can prevent Google from processing this data by downloading and installing the browser plugin available via the following link under ‘DoubleClick deactivation extension’.
You can also prevent the use of interest-based advertisements from our advertising partners by saving an corresponding cookie in your browser or by clicking here.
The legal bases for data processing are Article 6 (1) (a) and (f) of the GDPR.
4.4.4 Revocation of all consents
You can completely revoke the consent you have given for the data processing described above (sections 4.4.2 to 4.4.3) here.
5 Contacting us
You have the opportunity to get in touch with us in several ways. By e-mail, by phone, by chat or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context for the sole purpose of being able to contact you and process your request.
The legal basis for this data processing is Art. 6 Paragraph 1 Letter a), Art. 6 Paragraph 1 Letter b), Art. 6 Paragraph 1 Letter c) GDPR and Art. 6 Paragraph 1 Letter f) GDPR.
6 Recipients outside the EU
With the exception of the processing operations described above, we do not share your data with recipients based outside the European Union or the European Economic Area. The processing operations outlined in [xxx] mean that we transmit data to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. Data transmission is based on ‘standard contractual clauses’ of the EU Commission.
7 Your rights
In addition to the right to withdraw your consent, which you have given to us, you are entitled to the following additional rights if the respective legal conditions have been met:
- the right of access to your personal data stored by us (Article 15 of the GDPR), in particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom the data has been or is being disclosed, the intended storage period, the origin of your data if it was not collected directly from you;
- the right to rectify inaccurate data or to complete correct data (Article 16 of the GDPR);
- the right to erase your data which is stored by us (Article 17 of the GDPR), provided that we are not obliged to comply with any legal or contractual retention periods or other legal obligations or rights for further storage;
- the right to restrict processing of your date (Article 18 of the GDPR), if the accuracy of the data is disputed by you or processing is unlawful, but you have objected to such data being erased and the controller no longer requires the data, but you require it to establish, exercise or defend legal claims, or you have objected to processing pursuant to Article 21 of the GDPR;
- the right to data portability in accordance with Article 20 of the GDPR, i.e. the right to have selected data concerning you that is stored by us transmitted in a commonly used, machine-readable format, or to request that it is transmitted to another controller; and
- the right to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority where you have your usual place of residence or place of work or where our company headquarters are based.
You can assert the aforementioned rights to which you are entitled at datenschutz‚24.com. You can assert your right to data portability at firstname.lastname@example.org.
7.2 Right to object
Under the conditions of Article 21 (1) of the GDPR, data processing may be objected to on grounds relating to the data subject’s particular situation.
The aforementioned general right of objection applies to all processing purposes described in this data protection notice, which are processed on the basis of Article 6 (1) (f) of the GDPR. In contrast to the right to object especially designed for data processing for advertising purposes (see above 3.3), we are only obliged to act on such a general right to object under the GDPR if you specify grounds of overriding importance (e.g. potential danger to life or health).
7.3 Right of withdrawal
If we process data on the basis of consent given by you, you have the right to withdraw consent given at any time. The withdrawal of the consent does not make data processing previously carried out on the basis of consent up to the time of withdrawal invalid.