Privacy

&nb­sp;

Da­ta pro­tec­tion state­ment

This Da­ta Pro­tec­tion Dec­la­ra­tion gives you an overview of how Bistrozuck­er pro­cess­es your da­ta. It ap­plies to all web­sites, apps and other ben­e­fits and ser­vices of­fered by Bistrozuck­er.

How you can read th­ese Da­ta Pro­tec­tion Dec­la­ra­tions:&nb­sp;We of­fer you vari­ous op­tions for read­ing this Da­ta Pro­tec­tion Dec­la­ra­tions. We have sort­ed this Da­ta Pro­tec­tion Dec­la­ra­tion in­to top­ics rel­e­vant for you and di­vid­ed it ac­cord­ing­ly in­to in­di­vi­d­u­al chapters.

Which ser­vices and of­fers this Da­ta Pro­tec­tion Dec­la­ra­tion ap­plies to:&nb­sp;Bistrozuck­er pro­cess­es your da­ta in a sim­i­lar way for most of our ser­vices. This Da­ta Pro­tec­tion Dec­la­ra­tion there­fore ap­plies to all ben­e­fits and ser­vices which we of­fer our Eu­ro­pean cus­tomers. This is true re­gard­less of whether we do this via a web­site, an app, in tran­s­ac­tions, on the phone, at events or via so­cial net­works or other chan­nels. For ease of com­pre­hen­sion, we use the term “ser­vices” to sum­marise this “nor­mal case”.

There are, how­ev­er, al­so ex­cep­tio­n­al ser­vices where we pro­cess your da­ta dif­fer­ent­ly or for par­tic­u­lar pur­pos­es. This may be due to the na­ture of a ser­vice or coun­try-spe­cif­ic re­quire­ments. When we are re­fer­ring to th­ese cas­es (that is “de­vi­a­tions from the nor­mal case”), we call them “ser­vice-spe­cif­ic” or “coun­try-spe­cif­ic”.

Fi­nal­ly, you should al­so bear in mind that Bistrozuck­er is not just a sin­gle com­pany. Bistro is a group and thus con­sists of mul­ti­ple com­pa­nies. Not all of th­ese com­pa­nies of­fer you ser­vices or pro­cess your da­ta. For sim­plic­i­ty, on­ly the Bistro Group com­pa­nies which are ac­tu­al­ly in­volved in pro­cess­ing your da­ta are named be­low. Where we re­fer be­low to “Bistrozuck­er”, “we” or “us”, we mean the re­spon­si­ble com­pa­nies within Bistro Group which pro­cess your da­ta.

&nb­sp;

What you will learn in this Da­ta Pro­tec­tion Dec­la­ra­tion:

• Which da­ta Bistrozuck­er stores.
• What we do with this da­ta and what it is need­ed for.
• Which da­ta pro­tec­tion rights and op­tions you have.
• Which tech­nolo­gies and da­ta we use to per­so­n­alise and co­or­d­i­nate our ser­vices in or­der to of­fer you a se­cure, sim­ple, seam­less and in­di­vi­d­u­al shop­ping ex­pe­ri­ence.
• Which tech­nolo­gies and da­ta we use for ad­ver­tis­ing, in­clud­ing the track­ing tech­nolo­gies we use.

&nb­sp;

If you have a ques­tion re­gard­ing this Da­ta Pro­tec­tion Dec­la­ra­tion or the top­ic of da­ta pro­tec­tion at Bistrozuck­er in gen­er­al, you can con­tact us and our da­ta pro­tec­tion of­fi­cer un­der&nb­sp;in­fobistrozuck­erde&nb­sp;or call us +49 (0) 89 746 10 480

&nb­sp;

1. Which da­ta does Bistrozuck­er pro­cess?

&nb­sp;

Bistrozuck­er of­fers you a wide range of ser­vices, which you can al­so use in a wide range of ways. De­pend­ing on whether you con­tact us on­line, by phone or other­wise and on which ser­vices you use, vari­ous da­ta from dif­fer­ent sources may come in­to play. Much of the da­ta we pro­cess is pro­vid­ed by you your­self when you use our ser­vices or con­tact us, for ex­am­ple when you reg­is­ter and pro­vide your name or email ad­dress or ad­dress. We do, how­ev­er, al­so re­ceive tech­ni­cal de­vice and ac­cess da­ta which is au­to­mat­i­cal­ly col­lect­ed when you in­ter­act with our ser­vices. This may, for ex­am­ple, be in­for­ma­tion on which de­vice you are us­ing. We col­lect fur­ther da­ta us­ing our own da­ta anal­y­s­es (e.g. within the frame­work of mar­ket re­search studies and cus­tomer eval­u­a­tions). We may al­so re­ceive da­ta on you from third par­ties, for ex­am­ple for cred­it rat­ing agen­cies and pay­ment ser­vice providers.

&nb­sp;

When we talk about “y­our da­ta”, we are re­fer­ring to per­so­n­al da­ta. This in­cludes all in­for­ma­tion which al­lows us to iden­ti­fy you straight away or by com­bin­ing it with other in­for­ma­tion. Ex­am­ples: Your name, your tele­phone num­ber, your cus­tomer num­ber, or­der num­bers or your email ad­dress. All in­for­ma­tion which can­not be used to iden­ti­fy you (even by com­bin­ing it with other da­ta) is clas­si­fied as non-per­so­n­al da­ta. Non-per­so­n­al da­ta is al­so re­ferred to as anony­mous da­ta. If we com­bine your per­so­n­al da­ta with anony­mous da­ta, all the da­ta in this re­cord counts as per­so­n­al da­ta. If we delete the per­so­n­al da­ta from a piece of in­for­ma­tion or a re­cord on your per­son, the re­main­ing da­ta in this re­cord no longer counts as per­so­n­al da­ta. This pro­ce­dure is re­ferred to as anonymi­sa­tion. The fol­low­ing gen­er­al­ly ap­plies: If we re­quest that you share par­tic­u­lar per­so­n­al in­for­ma­tion with us, you may of course re­fuse to do this. You can de­cide which in­for­ma­tion you share with us. We may, how­ev­er, be un­able to pro­vide you with the de­sired ser­vices (at least not op­ti­mal­ly). For ex­am­ple, you can­not have a pack­age de­liv­ered with­out giv­ing a de­liv­ery ad­dress. If par­tic­u­lar in­for­ma­tion is re­quired in con­nec­tion with a ser­vice (manda­to­ry in­for­ma­tion), we will in­form you by mark­ing it ac­cord­ing­ly.

&nb­sp;

1.1 Pro­file in­for­ma­tion

&nb­sp;

Pro­file in­for­ma­tion is per­so­n­al and de­mo­graph­ic in­for­ma­tion on your per­son (so-called mas­ter da­ta), along with your in­di­vi­d­u­al in­ter­ests, which you share with us when reg­is­ter­ing for a cus­tomer ac­count.&nb­sp;Your pro­file da­ta in­cludes, for ex­am­ple:

• Your first and last names
• Your con­tact de­tails
• Your pref­er­ences, e.g. in re­la­tion to brands, prod­uct types or styles
• De­mo­graph­ic in­for­ma­tion such as your gen­der, age and place of resi­dence

&nb­sp;

Manda­to­ry in­for­ma­tion is usu­al­ly your name, your email ad­dress and a pass­word you choose your­self. Your email ad­dress and the pass­word will lat­er con­sti­tute your lo­gin de­tails.

&nb­sp;

Other manda­to­ry in­for­ma­tion may al­so be re­quired for the use of ac­cess-re­strict­ed, fee-based or per­so­n­alised ser­vices, such as your date of birth or your ti­tle (e.g. in or­der to trans­fer you to the rel­e­vant Bistrozuck­er shop page for your gen­der) or your favou­rite brands and cloth­ing styles.

&nb­sp;

Pro­file da­ta may al­so in­clude fur­ther in­for­ma­tion on your per­son and your in­ter­ests. Th­ese may be col­lect­ed in the pro­cess of reg­is­ter­ing for the ser­vice, or on­ly sub­se­quent­ly. This is the case, for ex­am­ple, if you lat­er add vol­un­tary in­for­ma­tion to your pro­file or you wish to use your cus­tomer ac­count to reg­is­ter for a ser­vice which re­quires ad­di­tio­n­al manda­to­ry in­for­ma­tion.

&nb­sp;

1.2 Con­tact de­tails

&nb­sp;

If you con­tact us, we col­lect your da­ta. De­pend­ing on how you con­tact us (e.g. by phone or by email), your con­tact de­tails may in­clude your name, pos­tal ad­dress­es, tele­phone num­bers, fax num­bers, email ad­dress­es, de­tail on your so­cial net­work pro­files (for ex­am­ple we re­ceive your Face­book ID if you con­tact us via Face­book), us­er names and sim­i­lar con­tact de­tails.

&nb­sp;

1.3 Shop­ping in­for­ma­tion

&nb­sp;

If you or­der some­thing from Bistrozuck­er or shop on site, for ex­am­ple at a Bistrozuck­er Out­let Store, we col­lect your shop­ping da­ta. De­pend­ing on the type of purchase and pro­cess­ing sta­tus, shop­ping da­ta may in­clude the fol­low­ing in­for­ma­tion:

• Or­der num­ber
• De­tails on the purchased items (name, size, colour, price etc.)
• Pay­ment method in­for­ma­tion
• De­liv­ery and billing ad­dress­es
• Mes­sages and com­mu­ni­ca­tion re­lat­ing to purchas­es (e.g. no­tice of re­vo­ca­tion, com­plaints and mes­sages to cus­tomer ser­vice)
• De­liv­ery and pay­ment sta­tus, e.g. “com­plet­ed” or “dis­patched”
• Re­turn sta­tus, e.g. “suc­cess­ful­ly com­plet­ed”
• In­for­ma­tion on ser­vice providers in­volved in ex­e­cut­ing the con­tract (for or­der purchas­ing per­haps ship­ment num­bers of par­cel ser­vices)

&nb­sp;

1.4 Pay­ment de­tails

&nb­sp;

We of­fer you the com­mon pay­ment meth­ods in on­line re­tail - es­pe­cial­ly ad­vance pay­ment, cred­it card, Pay­Pal or in­voice. We col­lect the pay­ment de­tails shared by you in or­der to ex­e­cute the pay­ment. We re­ceive fur­ther pay­ment de­tails from ex­ter­nal pay­ment ser­vice providers and cred­it agen­cies which we work with in ex­e­cut­ing pay­ments and car­ry­ing out cred­it checks. We on­ly for­ward in­for­ma­tion to our pay­ment ser­vice providers which is ne­ces­sary for pro­cess­ing pay­ment.

&nb­sp;

Pay­ment de­tails in­clude:

• Pre­ferred pay­ment method
• Billing ad­dress­es
• IBAN and BIC or ac­count num­ber and sort code
• Cred­it card de­tails
• Cred­it­wor­thi­ness da­ta

&nb­sp;

The pay­ment de­tails al­so in­clude other in­for­ma­tion di­rect­ly con­nect­ed to pay­ment pro­cess­ing and cred­it check­ing. This ap­plies, for ex­am­ple, to in­for­ma­tion which ex­ter­nal pay­ment ser­vice providers use for iden­ti­fi­ca­tion such as your Pay­Pal ID (if you are pay­ing with Pay­Pal).

&nb­sp;

1.5 In­ter­ests in­for­ma­tion

&nb­sp;

When you in­ter­act with our ser­vices, da­ta aris­es which we use to find out which con­tent, top­ics, prod­ucts, prod­uct types, brands or styles you are in­ter­est­ed in. For ex­am­ple, we can use shop­ping da­ta, wish list con­tent and your age (if this in­for­ma­tion is avai­l­able to us) and com­pari­son with users with sim­i­lar fea­tures to find out which styles and prod­uct cat­e­gories you are in­ter­est­ed in. Thus, we can show the prod­ucts which will prob­a­b­ly be most rel­e­vant to you first the next time you per­form a search.

&nb­sp;

Along with the in­ter­ests you have di­rect­ly shared with us, we can al­so de­rive your in­ter­ests from other da­ta we have col­lect­ed. If, for ex­am­ple, you re­peat­ed­ly vis­it a par­tic­u­lar area of the Bistrozuck­er shop, we can ex­trap­o­late your in­ter­ests from your ac­cess da­ta by means of us­age anal­y­sis (e.g. we can de­duce that you might be in­ter­est­ed in su­gar if you fre­quent­ly vis­it the cat­e­go­ry “su­gar” or or­der prod­ucts from this cat­e­go­ry).

&nb­sp;

For this pur­pose, we al­so re­ceive de­mo­graph­ic in­for­ma­tion and statis­tics on our users from our ex­ter­nal ad­ver­tis­ing part­n­ers (such as age, gen­der, re­gion), as well as de­vice and ac­cess da­ta and in­ter­ests. We take care that our ad­ver­tis­ing part­n­ers on­ly pro­vide Bistrozuck­er with ag­gre­gate, en­crypt­ed and anony­mous da­ta, so that we can­not as­sign the da­ta to any par­tic­u­lar per­son, es­pe­cial­ly any par­tic­u­lar us­er. This in­for­ma­tion may help us to un­der­s­tand our users bet­ter, per­haps within the frame­work of cus­tomer struc­ture anal­y­s­es and us­er seg­men­ta­tion.

&nb­sp;

1.6 Mes­sages, con­ver­sa­tion con­tent

&nb­sp;

If you com­mu­ni­cate with us or other users re­gard­ing prod­ucts (e.g. prod­uct eval­u­a­tions) and other top­ics by phone, post, so­cial me­dia, con­tact forms or any other medi­um, we col­lect the con­tent of your mes­sages.

&nb­sp;

We may for­ward your mes­sages to the of­fice re­spon­si­ble for your con­cerns, per­haps to part­n­er com­pa­nies or man­u­fac­tur­ers. If your mes­sages are for­ward­ed to another com­pany (e.g. if you pro­vide us with feed­back on the man­u­fac­tur­er of a prod­uct), you of course have the op­tion to tell us that the da­ta should on­ly be used by Bistrozuck­er. If so, we will not for­ward your in­for­ma­tion to the re­spon­si­ble of­fice, or will on­ly do so with­out your per­so­n­al in­for­ma­tion, pro­vid­ed that your con­cerns can be pro­cessed in this way.

&nb­sp;

If you trans­mit mes­sages to us for other users via func­tions pro­vid­ed for this pur­pose (e.g. prod­uct eval­u­a­tions), we may pub­lish th­ese within the scope of our ser­vices.

&nb­sp;

Bistrozuck­er al­so us­es so­cial net­work ser­vices such as Face­book, In­s­ta­gram and Twit­ter to com­mu­ni­cate with cus­tomers and users. We use th­ese pop­u­lar plat­forms to of­fer you fur­ther con­tact and in­for­ma­tion op­tions be­yond our in-house com­mu­ni­ca­tion chan­nels. Please bear in mind, how­ev­er, that we do not have any in­flu­ence on the terms of use for so­cial net­works and the ser­vices they of­fer, and on­ly limit­ed in­flu­ence on their da­ta pro­cess­ing. We there­fore ask you to care­ful­ly check which per­so­n­al da­ta you share with us via so­cial net­works. We can­not in­flu­ence the be­haviour of so­cial me­dia op­er­a­tors, other users or third par­ties who may work with the op­er­a­tors of the so­cial net­works or al­so use th­ese ser­vices.

&nb­sp;

1.7 So­cial net­work da­ta

&nb­sp;

So­cial me­dia func­tions may be in­te­grat­ed in­to Bistrozuck­er’s ser­vices. Th­ese may in­clude mes­sen­ger ser­vices and so-called so­cial plug-ins or so­cial lo­gins, such as “lo­gin with Face­book”. If you ac­ti­vate or use th­ese func­tions and are a mem­ber of the rel­e­vant so­cial net­work, we may re­ceive da­ta from their re­spec­tive op­er­a­tors which al­lows us to iden­ti­fy you.&nb­sp;We usu­al­ly re­ceive the fol­low­ing da­ta from so­cial net­works:

• your public pro­file in­for­ma­tion (e.g. name, pro­file pic­ture)
• In­for­ma­tion on the type of de­vice you are us­ing
• the ac­count ID of your pro­file with the rel­e­vant net­work (e.g. Face­book ID)

&nb­sp;

We will al­so not re­ceive any da­ta from the so­cial net­work providers which could be used to iden­ti­fy or con­tact you un­less you pro­vide your consent.&nb­sp;

&nb­sp;

In con­nec­tion with ad­ver­tis­ing via so­cial net­works we gen­er­al­ly on­ly re­ceive gen­er­al de­mo­graph­ic and in­ter­est-re­lat­ed in­for­ma­tion to make our ad­verts more ef­fi­cient, e.g. that a par­tic­u­lar ad­vert was clicked on by a man from Ber­lin be­tween the ages of 25 and 34 and in­ter­est­ed in shop­ping and food. This in­for­ma­tion and th­ese es­ti­mates come from the op­er­a­tor of the so­cial net­work.

&nb­sp;

You can find more de­tailed in­for­ma­tion in the rel­e­vant providers’ terms of use and pri­va­cy poli­cies.

Bistrozuck­er cur­rent­ly us­es Face­book’s Mes­sen­ger ser­vice and so­cial plug-ins/lo­gins from the fol­low­ing so­cial net­works:

• Face­book Inc., 1601 S. Cal­i­for­nia Ave, Pa­lo Al­to, CA 94304, USA (“Face­book”). You can find the link to Face­book’s Da­ta Pro­tec­tion Dec­la­ra­tion here:&nb­sp;Face­book’s pri­va­cy pol­i­cy.
• Twit­ter Inc., 795 Fol­som St., Suite 600, San Fran­cis­co, CA 94107, USA (“Twit­ter”). You can find the link to Twit­ter’s pri­va­cy pol­i­cy here:&nb­sp;Twit­ter’s pri­va­cy pol­i­cy.
• Pin­ter­est Inc., 651 Bran­nan Street, San Fran­cis­co, CA 94103, USA (“Pin­ter­est”). You can find the link to Pin­ter­est’s pri­va­cy pol­i­cy here:&nb­sp;Pin­ter­est’s pri­va­cy pol­i­cy.
• In­s­ta­gram, Face­book Ire­land Limit­ed, 4 Grand Ca­nal Square, Dublin 2, Ire­land
• You can find the link to In­s­ta­gram’s pri­va­cy pol­i­cy here:&nb­sp;https://help.in­s­ta­gram.com

&nb­sp;

2. What does Bistrozuck­er use my da­ta for?

&nb­sp;

Bistrozuck­er pro­cess­es your da­ta in ac­cor­dance with all ap­pli­ca­ble da­ta pro­tec­tion laws. Of course, we ob­serve the prin­ci­ples of da­ta pro­tec­tion law for the pro­cess­ing of per­so­n­al da­ta. We there­fore gen­er­al­ly on­ly pro­cess your da­ta for the pur­pos­es ex­plained to you in this Da­ta Pro­tec­tion Dec­la­ra­tion or shared when we col­lect the da­ta. Th­ese are main­ly purchase pro­cess­ing and the pro­vi­sion, per­so­n­al­i­sa­tion and de­vel­op­ment as well as se­cu­ri­ty of our ser­vices. We al­so use your da­ta within the frame­work of the strict Ger­man and Eu­ro­pean da­ta pro­tec­tion law, but al­so for other pur­pos­es such as prod­uct de­vel­op­ment, sci­en­tif­ic re­search (es­pe­cial­ly in the ar­eas of ma­chine learn­ing, ar­ti­fi­cial in­tel­li­gence and deep learn­ing) and mar­ket re­search, for the op­ti­mi­sa­tion of busi­ness pro­cess­es, the needs-based de­sign of our ser­vices and per­so­n­alised ad­ver­tis­ing.&nb­sp;

&nb­sp;

In this chapter, we al­so in­form you of the le­gal ba­sis on which we pro­cess da­ta for the in­di­vi­d­u­al pur­pos­es. De­pend­ing on the le­gal ba­sis for our pro­cess­ing of your da­ta, you may have ad­di­tio­n­al da­ta pro­tec­tion rights along­side your per­ma­nent rights such as the right to in­for­ma­tion. For ex­am­ple, in in­di­vi­d­u­al cas­es you have the right to ob­ject to the pro­cess­ing of your da­ta.

&nb­sp;

2.1 Purchase pro­cess­ing and pro­vi­sion of on­line, lo­cal and per­so­n­alised ser­vices

&nb­sp;

We pro­cess your da­ta in the ne­ces­sary scope to ful­fil con­tracts and to pro­vide and ex­e­cute fur­ther ser­vices re­quest­ed by you, as de­scribed in this Da­ta Pro­tec­tion Dec­la­ra­tion. The pur­pos­es of the ne­ces­sary da­ta pro­cess­ing there­fore de­pend on the pur­pose of the con­tract agreed with you (in­clud­ing our Gen­er­al Terms and Con­di­tions and any ser­vice-spe­cif­ic terms and con­di­tions or terms of use) or ser­vices re­quest­ed by you.&nb­sp;The most im­por­tant pur­pos­es are:

• The pro­vi­sion, per­so­n­al­i­sa­tion and needs-based de­sign of our ser­vices such as the Bistrozuck­er shop (in­clud­ing our re­spec­tive web­sites, apps and cross-de­vice and cross-plat­form func­tions).
• The pro­vi­sion of lo­cal ser­vices, e.g. in Bistrozuck­er Out­let Stores and at events and trade fairs.
• The ex­e­cu­tion of cus­tomer pro­grammes such as Bistrozuck­er Out­let Card and Bistrozuck­er Plus.
• The ex­e­cu­tion of purchase agree­ments and cus­tomer ser­vice in­clud­ing dis­patch and pay­ment pro­cess­ing, claim ma­n­age­ment as well as the pro­cess­ing of re­turns, com­plaints and war­ran­ty claims.
• The pro­vi­sion of mes­sages, re­ports, newslet­ters and other di­rect com­mu­ni­ca­tion, in­so­far as th­ese are an in­te­gral com­po­nent of our con­trac­tu­al ser­vices or the ser­vices re­quest­ed by you.
• The guar­an­tee of the gen­er­al se­cu­ri­ty, op­er­a­bil­i­ty and sta­bil­i­ty of our ser­vice in­clud­ing de­fence from at­tacks.
• Non-pro­mo­tio­n­al com­mu­ni­ca­tion with you on tech­ni­cal, se­cu­ri­ty-re­lat­ed and con­trac­tu­al­ly rel­e­vant sub­jects (e.g. fraud warn­ings, ac­count block­ing or con­trac­tu­al changes).
• The me­di­a­tion of con­tracts via our trad­ing and sales plat­form, per­haps within the frame­work of the Bistrozuck­er part­n­er pro­gramme or Bistrozuck­er War­drobe.
• The is­su­ing, re­demp­tion, de­liv­ery of Bistrozuck­er vouch­ers.
• The ex­e­cu­tion of cam­paigns and com­pe­ti­tions.

&nb­sp;

Le­gal ba­sis:

&nb­sp;

In­so­far as the pur­pose re­lates to the ex­e­cu­tion of a con­tract agreed with you or the pro­vi­sion of a ser­vice re­quest­ed by you, the le­gal ba­sis is Ar­ti­cle 6 (1) b GD­PR. Other­wise, the le­gal ba­sis is Ar­ti­cle 6 (1) f GD­PR, where­by we may use your per­so­n­al da­ta for the above pur­pos­es if we deem it ne­ces­sary to do so for our le­gi­t­i­mate in­ter­ests.

&nb­sp;

2.2 Fraud pre­ven­tion, se­lec­tion of pay­ment meth­ods and cred­it checks

&nb­sp;

Pre­ven­tion of fraud

&nb­sp;

In or­der to com­bat the risk of da­ta se­cu­ri­ty breach­es, da­ta per­tain­ing to users of our ser­vices is en­crypt­ed in trans­mis­sion. This ap­plies both to or­der­ing and to reg­is­ter­ing for a cus­tomer ac­count. For this we use the cod­ing sys­tem SSL (Se­cure Sock­et Lay­er). En­cryp­tion pre­vents third par­ties from view­ing the da­ta. To pro­vide ad­di­tio­n­al pro­tec­tion from ex­ter­nal at­tacks, we re­ly on spe­cial se­cu­ri­ty tech­nolo­gies which con­s­tant­ly check our sys­tems and iden­ti­fy and re­port ano­ma­lies. We al­so use tech­ni­cal and or­gan­i­sa­tio­n­al mea­sures to se­cure our sys­tems against loss, de­struc­tion, unau­tho­rised ac­cess or dis­tri­bu­tion of cus­tomer da­ta by unau­tho­rised per­sons. In this man­n­er we wish to keep the risk of unau­tho­rised ac­cess as low as pos­si­ble, be­cause pro­tect­ing your da­ta is our top pri­or­i­ty. How­ev­er, we - like other com­pa­nies - can­not guar­an­tee ab­so­lute pro­tec­tion.

&nb­sp;

We al­so use tech­ni­cal and man­u­al pro­ce­dures for fraud pre­ven­tion in or­der to pro­tect us and our users from mi­suse of da­ta, es­pe­cial­ly by frau­d­u­lent or­ders. To this end, Bistrozuck­er sum­maris­es and eval­u­ates your de­vice and ac­cess da­ta (in­clud­ing IP ad­dress, iden­ti­fiers, us­er be­haviour), shop­ping da­ta and pay­ment de­tails (in­clud­ing ad­dress and other cred­it­wor­thi­ness da­ta from ex­ter­nal cred­it agen­cies) as well as the change his­to­ry of your pro­file in­for­ma­tion (e.g. when your de­liv­ery ad­dress was last changed) un­der a pseu­donym when ex­e­cut­ing an or­der. The re­cord is al­so com­pared with your pre­vi­ous us­age and or­der habits. We al­so com­pare it to gen­er­al re­cords from all Bistrozuck­er or­ders (al­so from other Bistro Group com­pa­nies) in­volv­ing con­firmed or sus­pect­ed frau­d­u­lent ac­tions. This com­pari­son al­lows us to iden­ti­fy fraud pat­terns and to pre­vent fraud and iden­ti­ty theft by com­par­ing pat­terns.

&nb­sp;

Fol­low­ing reg­is­tra­tion for a cus­tomer ac­count, Bistrozuck­er trans­mits your name and your ad­dress­es as giv­en in the pro­file to ex­ter­nal cred­it agen­cies. This serves to en­sure that you are ac­tu­al­ly reg­is­tered and can be reached at the dis­closed ad­dress­es. Typ­i­cal in­di­ca­tors which - usu­al­ly in com­bi­na­tion - may in­crease the prob­a­bil­i­ty of at­tempt­ed fraud in­clude:

• Your de­liv­ery ad­dress was changed short­ly be­fore the sub­mis­sion of the or­der and/or is in a re­gion with in­creased risk of fraud.
• Your or­der is par­tic­u­lar­ly large and/or in­cludes prod­ucts which are sub­ject to par­tic­u­lar­ly high de­mand at pre­sent and/or are car­ried out at an unu­su­al time for your re­gion (e.g. at night).
• The pay­ment meth­ods in­voice or di­rect deb­it are used for the or­der.&nb­sp;
• There were sus­pi­cious lo­gin at­tempts on your ac­count be­fore the or­der was sub­mitt­ed, the pat­tern of which suggests au­to­ma­tion.
• Your cus­tomer ac­count is used from a sus­pi­cious IP ad­dress.
• Your cus­tomer ac­count is used by an un­known or sus­pi­cious de­vice.

&nb­sp;

If our se­cu­ri­ty sys­tem sus­pects at­tempt­ed fraud or an in­creased risk of fraud, the rel­e­vant pro­ce­dure will be for­ward­ed to the Bistrozuck­er fraud team for man­u­al in­vesti­ga­tion. Ap­pro­pri­ate pre­ven­ta­tive mea­sures will be tak­en in view of the risk of fraud (e.g. tem­po­rary block­ing of the cus­tomer ac­count or re­stric­tion of pay­ment meth­ods of­fered).

&nb­sp;

Le­gal ba­sis:

&nb­sp;

If your da­ta is pro­cessed to pre­vent fraud at your ex­pense, the le­gal ba­sis is Ar­ti­cle 6 (1) b GD­PR. This pro­cess­ing of your da­ta other­wise oc­curs on the ba­sis of Ar­ti­cle 6 (1) f GD­PR, based on our le­gi­t­i­mate in­ter­est and that of other users in the iden­ti­fi­ca­tion and pre­ven­tion of fraud and clar­i­fi­ca­tion of crim­i­nal of­fences.

&nb­sp;

Choice of pay­ment meth­ods

&nb­sp;

Be­fore we show you the pay­ment meth­ods avai­l­able for a purchase, Bistrozuck­er will car­ry out a risk as­sess­ment. Your pre­vi­ous­ly col­lect­ed purchase da­ta, pay­ment de­tails, cred­it­wor­thi­ness da­ta, da­ta on your pre­vi­ous pay­ment be­haviour as well as your pro­file in­for­ma­tion (such as sur­name, first name, de­liv­ery and billing ad­dress, email ad­dress, date of birth) will be used to car­ry out the risk as­sess­ment. The as­sess­ment and eval­u­a­tion will be car­ried out au­to­mat­i­cal­ly us­ing sta­tis­ti­cal­ly jus­ti­fied es­ti­mates of the de­fault risk in re­la­tion to the pay­ment meth­ods we of­fer. Within the frame­work of the risk as­sess­ment, Bistrozuck­er al­so trans­mits your da­ta to ex­ter­nal cred­it agen­cies to re­ceive gen­er­al in­for­ma­tion from th­ese on the eval­u­a­tion of the pay­ment-spe­cif­ic de­fault risks (e.g. on whether your ad­dress is plau­si­ble and up-to-date) as well as, in in­di­vi­d­u­al cas­es, cred­it­wor­thi­ness da­ta, per­haps on open in­voic­es and cir­cum­s­tances di­rect­ly re­sult­ing in a risk of pay­ment de­fault (e.g. in­sol­ven­cy, de­fer­ral due to in­a­bil­i­ty to pay). Which spe­cif­ic cred­it­wor­thi­ness da­ta is tak­en in­to ac­count in the course of the risk as­sess­ment may vary from coun­try to coun­try.

&nb­sp;

The de­fault risk is as­sessed se­parate­ly for each pay­ment method in the form of an es­ti­mate. If the risk as­sess­ment yields a pos­i­tive re­sult, we can of­fer all the pay­ment meth­ods we gen­er­al­ly of­fer. Other­wise, we will on­ly of­fer you par­tic­u­lar pay­ment meth­ods. Fac­tors which may in­flu­ence the avai­l­a­bil­i­ty of a pay­ment method in­clude:

• The com­bi­na­tion of name and ad­dress could not be found. This may re­sult from typ­ing er­rors, moves, mar­ri­age or a change of dis­trict.
• You have giv­en a de­liv­ery ad­dress, pack­ing sta­tion or com­pany ad­dress dif­fer­ing from the billing ad­dress.
• There are still open claims against you.
• There have been pay­ment dis­rup­tions with par­tic­u­lar pay­ment meth­ods in the past.

&nb­sp;

The risk as­sess­ment will not mean that you are not of­fered any pay­ment method. If you are not in agree­ment with the pay­ment meth­ods of­fered, you can in­form us of this in writ­ing by let­ter or email at in­fo@bistrozuck­er.de. We will then check the de­ci­sion again, tak­ing your view­point in­to ac­count.

&nb­sp;

Le­gal ba­sis:

&nb­sp;

If you have giv­en consent to the pro­cess­ing of your da­ta as de­scribed above for the choice of pay­ment meth­ods, the le­gal ba­sis is Ar­ti­cle 6 (1) a GD­PR (Consent). Other­wise, the le­gal ba­sis is Ar­ti­cle 6 (1) f GD­PR, based on our le­gi­t­i­mate in­ter­est in avoid­ing de­fault risks.

&nb­sp;

2.3 Ad­ver­tis­ing and mar­ket re­search, da­ta anal­y­sis

&nb­sp;

We use your da­ta, al­so within the frame­work of da­ta anal­y­sis, for ad­ver­tis­ing and mar­ket re­search, in par­tic­u­lar for the fol­low­ing pur­pos­es:

• Clas­si­fi­ca­tion in­to vari­ous tar­get and us­er groups within the frame­work of mar­ket re­search (us­er seg­men­ta­tion).
• Find­ings on vari­ous tar­get groups and their re­spec­tive us­age habits and shop­ping in­ter­ests.
• The pro­duc­tion of find­ings on de­mog­ra­phy, in­ter­ests, our users’ shop­ping and us­age habits as well as the mar­ket­ing on th­ese find­ings within the frame­work of ad­ver­tis­ing ser­vices pro­vid­ed to third par­ties.
• The ear­ly iden­ti­fi­ca­tion of trends in the ar­eas of fashion and on­line shop­ping.
• The ex­e­cu­tion of ad­ver­tis­ing to ex­ist­ing cus­tomers.
• The ex­e­cu­tion of di­rect mar­ket­ing, e.g. in the form of newslet­ters.
• The plan­n­ing, ex­e­cu­tion and suc­cess mon­i­tor­ing of ad­ver­tis­ing cor­re­spond­ing to the in­ter­ests of the tar­get groups be­ing ad­dressed (per­so­n­alised ad­ver­tis­ing).
• Find­ings as to how our ser­vices are used (us­age anal­y­sis).
• The mar­ket­ing of the above find­ings within the frame­work of ad­ver­tis­ing ser­vices for ad­ver­tis­ing cus­tomers.

&nb­sp;

De­pend­ing on the pur­pose, we use the da­ta we have stored for da­ta anal­y­sis. For ex­am­ple, we use sum­marised (ag­gre­gat­ed), sta­tis­ti­cal, de­per­so­n­alised (anonymised) pro­file in­for­ma­tion or da­ta which can on­ly be as­signed to per­sons via fur­ther in­ter­me­di­ate steps (pseu­donymised pro­file in­for­ma­tion) as well as shop­ping and de­vice and ac­cess da­ta in or­der to un­der­s­tand and anal­yse purchas­ing pro­cess­es us­ing da­ta anal­y­sis. This gives us anony­mous or pseu­donymised find­ings on our users’ gen­er­al us­age be­haviour.

&nb­sp;

We pro­cess your da­ta on the ba­sis of bal­anc­ing of in­ter­ests to pro­tect our le­gi­t­i­mate in­ter­ests or those of third par­ties (such as ad­ver­tis­ing part­n­ers or deal­ers which par­ti­ci­pate in Bistrozuck­er’s part­n­er pro­gramme). Bistrozuck­er’s le­gi­t­i­mate in­ter­est or that of third par­ties in da­ta pro­cess­ing de­rives from the rel­e­vant pur­pos­es and is, un­less other­wise in­di­cat­ed, of a com­pet­i­tive and eco­nom­ic na­ture.

&nb­sp;

Le­gal ba­sis:

&nb­sp;

If da­ta pro­cess­ing for the above pur­pos­es oc­curs with your consent, the le­gal ba­sis is Ar­ti­cle 6 (1) a GD­PR (consent). This da­ta pro­cess­ing da­ta other­wise oc­curs on the ba­sis of Ar­ti­cle 6 (1) f GD­PR, where­by the le­gi­t­i­mate in­ter­ests are for the above pur­pos­es.

&nb­sp;

2.4 Prod­uct and tech­nol­o­gy de­vel­op­ment

&nb­sp;

We use your da­ta for prod­uct and tech­nol­o­gy de­vel­op­ment in­clud­ing the de­vel­op­ment and im­prove­ment of per­so­n­alised ser­vices. In do­ing this we use ag­gre­gat­ed, pseu­donymised or anonymised da­ta and ma­chine learn­ing al­go­rithms, per­haps from our re­search, which fa­cil­i­tate es­ti­mates, prog­nos­es and anal­y­sis in the in­ter­ests of our users. In this way, for ex­am­ple, we can de­vel­op apps which can suggest prod­ucts tar­get­ed to your in­ter­ests and needs and recog­nise styles and as­sign prod­ucts which cor­re­spond to your ac­tu­al in­ter­ests. Da­ta is pro­cessed in re­la­tion to prod­uct and tech­nol­o­gy de­vel­op­ment par­tic­u­lar­ly for the fol­low­ing pur­pos­es:

• The de­vel­op­ment and im­prove­ment of per­so­n­alised ser­vices and tech­nolo­gies for da­ta anal­y­sis, ad­ver­tis­ing and per­so­n­alised on­line shop­ping.
• The de­vel­op­ment of tech­nolo­gies and con­cepts to im­prove IT se­cu­ri­ty, pre­vent fraud and im­prove da­ta pro­tec­tion e.g. by pseu­donymi­sa­tion, en­cryp­tion and anonymi­sa­tion tech­nolo­gies.
• The de­vel­op­ment and test­ing of soft­ware so­lu­tions for the op­ti­mi­sa­tion of ne­ces­sary busi­ness and lo­gis­tics pro­cess­es.

&nb­sp;

Le­gal ba­sis:

&nb­sp;

The le­gal ba­sis for the pro­cess­ing of your da­ta for prod­uct and tech­nol­o­gy de­vel­op­ment pur­pos­es is Ar­ti­cle 6 (1) f GD­PR, where­by our le­gi­t­i­mate in­ter­ests are in the above pur­pos­es.

&nb­sp;

2.5 Busi­ness ma­n­age­ment and busi­ness op­ti­mi­sa­tion

&nb­sp;

We trans­mit and pro­cess your da­ta where ne­ces­sary for ad­min­is­tra­tive and lo­gis­ti­cal pro­cess­es and to op­ti­mise busi­ness pro­cess­es within Bistro Group in or­der to de­sign th­ese in a more ef­fi­cient and le­gal­ly se­cure way and to ful­fil our con­trac­tu­al and le­gal obli­ga­tions (e.g. re­ten­tion obli­ga­tions un­der com­mer­cial and tax law). Many sys­tems and tech­nolo­gies are shared within Bistro Group. This al­lows us to of­fer a more eco­nom­i­cal, se­cure, uni­fied and per­so­n­alised ser­vice. There­fore, vari­ous com­pa­nies within Bistrozuck­er Group have ac­cess to your da­ta in so far as this is ne­ces­sary for the ful­fil­ment of the pur­pos­es named in this Da­ta Pro­tec­tion Dec­la­ra­tion.

&nb­sp;

Da­ta pro­cess­ing for busi­ness ma­n­age­ment and busi­ness op­ti­mi­sa­tion al­so in­cludes, for ex­am­ple, the fol­low­ing pur­pos­es:

• The ex­e­cu­tion and im­prove­ment of cus­tomer ser­vice.
• The pre­ven­tion and clar­i­fi­ca­tion of crim­i­nal of­fences.
• Guar­an­tee­ing the se­cu­ri­ty and op­er­a­bil­i­ty of our IT sys­tems.

&nb­sp;

Le­gal ba­sis:

&nb­sp;

The le­gal ba­sis for the pro­cess­ing of your da­ta for busi­ness ma­n­age­ment and op­ti­mi­sa­tion is Ar­ti­cle 6 (1) f GD­PR, where­by our le­gi­t­i­mate in­ter­ests are in the above pur­pos­es. Where we pro­cess your da­ta on the ba­sis of le­gal spe­c­i­fi­ca­tions, e.g. re­ten­tion obli­ga­tions and mon­ey laun­der­ing tests un­der tax law, the le­gal ba­sis is Ar­ti­cle 6 (1) c GD­PR.

&nb­sp;

2.6 On the ba­sis of your consent

&nb­sp;

If you have giv­en us your consent for the pro­cess­ing of per­so­n­al da­ta, your consent is the pri­mary ba­sis of our da­ta pro­cess­ing. Which of your da­ta we pro­cess on the ba­sis of your consent de­pends on the pur­pose of your consent.&nb­sp;Typ­i­cal pur­pos­es in­clude:

• Sub­scrip­tion to a newslet­ter.
• Par­ti­ci­pa­tion in sur­veys and mar­ket re­search studies.
• The pro­cess­ing of par­tic­u­lar­ly sen­si­tive da­ta, con­tain­ing e.g. your po­lit­i­cal opinions, re­li­gious or ide­o­log­i­cal con­vic­tions or state of health.
• The re­cord­ing of tele­phone con­ver­sa­tions which you have e.g. with our hot­line.
• The trans­mis­sion of your da­ta to third par­ties or to a coun­try out­side the Eu­ro­pean Union.
• The ex­e­cu­tion of a cred­it check (if it is not ne­ces­sary for con­trac­tu­al ful­fil­ment or pre­con­trac­tu­al mea­sures).

&nb­sp;

No­tices of with­draw­al

&nb­sp;

You can with­draw consent at any time with ef­fect for the fu­ture, e.g. by e-mail, let­ter or fax.

&nb­sp;

2.7 Other pur­pos­es

&nb­sp;

If da­ta pro­tec­tion law al­lows it, we can use your da­ta for new pur­pos­es such as car­ry­ing out da­ta anal­y­s­es and de­vel­op­ing our ser­vices and con­tent with­out your consent. It is a pr­e­requisite for this that th­ese new pur­pos­es which the da­ta is to be used for were not fixed or fore­see­able when the rel­e­vant da­ta was col­lect­ed and the new pur­pos­es are com­pat­i­ble with the pur­pos­es for which the rel­e­vant da­ta was orig­i­nal­ly col­lect­ed. For ex­am­ple, new de­vel­op­ments in the le­gal or tech­ni­cal sphere and new busi­ness mod­els and ser­vices may lead to new pro­cess­ing pur­pos­es.

&nb­sp;

3. Per­so­n­alised ser­vices

&nb­sp;

The de­vel­op­ment and pro­vi­sion of per­so­n­alised func­tio­n­al­i­ties and ser­vices for you is our top pri­or­i­ty. We of­fer you an in­di­vi­d­u­al shop­ping ex­pe­ri­ence and a range tailored to your in­di­vi­d­u­al in­ter­ests, re­gard­less of lo­ca­tion, time and de­vices used. The pro­cess­ing of your da­ta to per­so­n­alise our ser­vice is there­fore an in­te­gral part of Bistrozuck­er’s ser­vice.&nb­sp;

&nb­sp;

Ex­am­ples

&nb­sp;

If you cre­ate a wish list in the Bistrozuck­er app, you can view and ed­it this lat­er on the Bistrozuck­er web­site.

&nb­sp;

If you search for prod­ucts on the Bistrozuck­er web­site, we save your search terms. This al­lows us to show the re­sults first which are prob­a­b­ly par­tic­u­lar­ly rel­e­vant to you when you search the Bistrozuck­er web­site in fu­ture.

&nb­sp;

If you place a prod­uct in the bas­ket, we can give you re­c­om­men­da­tions on the se­lec­tion of suit­able prod­ucts on the ba­sis of your pre­vi­ous or­ders and re­turns.

&nb­sp;

If you have sub­scribed to our newslet­ter, we can pre­sent you with prod­ucts which fit your pre­vi­ous or­ders.

&nb­sp;

3.1 What are per­so­n­alised ser­vices?

&nb­sp;

Per­so­n­alised ser­vices al­low us to of­fer you bet­ter, more prac­ti­cal and more se­cure ser­vices. To this end we use the da­ta we have stored about you in or­der to de­ter­mine your needs and in­ter­ests. On this ba­sis we can of­fer you more rel­e­vant con­tent cor­re­spond­ing to your needs and in­ter­ests. Of course, you still have ac­cess to all con­tent. Per­so­n­al­i­sa­tion al­lows you to see con­tent which is more rel­e­vant to you more quick­ly, or con­tent is spe­cial­ly pre­sent­ed to you (e.g. in the form of in­di­vi­d­u­al prod­uct re­c­om­men­da­tions).

&nb­sp;

3.2 Why do I need a cus­tomer ac­count?

&nb­sp;

Most of our per­so­n­alised ser­vices re­quire you to set up a cus­tomer ac­count so that we can save da­ta we col­lect on you at a cen­tral lo­ca­tion.

&nb­sp;

3.3 Which da­ta is saved on my cus­tomer ac­count?

&nb­sp;

Da­ta which we col­lect about you is saved on your cus­tomer ac­count, along with your cus­tomer num­ber (cus­tomer ID). The cus­tomer num­ber is a ran­dom­ly gen­er­at­ed se­quence of num­bers which does not con­tain any per­so­n­al da­ta. Your da­ta is as­so­ci­at­ed with your cus­tomer num­ber, in or­der to link you to your cus­tomer ac­count. The cus­tomer num­ber al­so func­tions as a pseu­donym.

&nb­sp;

3.4 Which da­ta is used for per­so­n­al­i­sa­tion?

&nb­sp;

Per­so­n­alised con­tent is gen­er­al­ly se­lect­ed on the ba­sis of all da­ta stored on your cus­tomer ac­count.

&nb­sp;

If de­vice and ac­cess da­ta is used which is not saved on your cus­tomer ac­count, th­ese are on­ly pseu­donymised for the rel­e­vant per­so­n­al­i­sa­tion (so e.g. in con­nec­tion with your cus­tomer num­ber, but not in con­nec­tion with your named or other di­rect­ly iden­ti­fy­ing pro­file da­ta) for the du­ra­tion of the us­age.

&nb­sp;

Not&nb­sp;used:

• Cred­it­wor­thi­ness da­ta
• In­for­ma­tion for cam­paigns and sur­veys
• Job ap­pli­ca­tions
• No­ti­fi­ca­tions (e.g. from cus­tomer ser­vice)

&nb­sp;

3.5 Your op­tions

&nb­sp;

You can view most of the da­ta we have stored on your cus­tomer ac­count at any time. If re­quired you can al­so ed­it this da­ta on your ac­count and in­flu­ence per­so­n­al­i­sa­tion, per­haps by pro­vid­ing your pref­er­ences.

&nb­sp;

If per­so­n­al­i­sa­tion is based on de­vice and ac­cess da­ta, you can pre­vent the col­lec­tion of this da­ta by de­ac­ti­vat­ing the col­lec­tion of this da­ta by track­ing tools. Please bear in mind, how­ev­er, that you will re­ceive less or no per­so­n­alised con­tent and ser­vices. Please bear in mind that the da­ta used for per­so­n­alised ser­vices are al­so need­ed for other pur­pos­es (in­clud­ing the pro­vi­sion of our ser­vices), in which case the col­lec­tion of the da­ta re­quired will cont­in­ue to be col­lect­ed. How­ev­er, the ad­ver­tis­ing pre­sent­ed to you will then not be per­so­n­alised.

&nb­sp;

4. In­fo on web­sites and apps

&nb­sp;

We use your da­ta to pro­vide ac­cess to the Bistrozuck­er web­sites and apps. Along with the de­vice and ac­cess da­ta col­lect­ed when­ev­er you use th­ese ser­vices, the type of da­ta pro­cessed as well as the pro­cess­ing pur­pos­es de­pend es­pe­cial­ly on how you use the func­tions and ser­vices pro­vid­ed via our ser­vices. We al­so use the da­ta col­lect­ed when you use our ser­vices to find out how our on­line of­fer­ing is used. We use this in­for­ma­tion and other in­for­ma­tion in the course of shop­ping per­so­n­al­i­sa­tion to im­prove our ser­vices and for per­so­n­alised ad­ver­tis­ing.&nb­sp;

&nb­sp;

4.1 Providers

&nb­sp;

You can find the re­spon­si­ble ser­vice provider in the im­print of the rel­e­vant web­site or app.

&nb­sp;

4.2 Which da­ta is col­lect­ed?

&nb­sp;

We gen­er­al­ly col­lect all the da­ta which you di­rect­ly share with us via our ser­vices.

&nb­sp;

De­vice and ac­cess da­ta

&nb­sp;

When­ev­er you ac­cess our ser­vices and databas­es, we col­lect de­vice and ac­cess da­ta and re­cord it in so-called serv­er log files. The IP ad­dress it con­tains is anonymised short­ly af­ter the end of the rel­e­vant ses­sion, as soon as stor­age is no longer re­quired to main­tain the func­tio­n­al­i­ty of the rel­e­vant web­site.&nb­sp;

&nb­sp;

If it is avai­l­able and ac­ti­vat­ed on your de­vice, we al­so col­lect a de­vice-spe­cif­ic ID num­ber (e.g. a so-called “pro­mo ID” if you are us­ing an An­droid de­vice or an “ad ID” if you are us­ing an Ap­ple de­vice). This de­vice ID is is­sued by the man­u­fac­tur­er of your op­er­at­ing sys­tem and can be read by web­sites and apps and used to pre­sent con­tent on the ba­sis of your us­age habits. If you do not want this, you can de­ac­ti­vate it at any time in your de­vice’s brows­er sett­ings or sys­tem sett­ings.

&nb­sp;

Lo­gin

&nb­sp;

We set up pass­word-pro­tect­ed per­so­n­al ac­cess for users who reg­is­ter for a cus­tomer ac­count or another ser­vice. If you do not log out again af­ter log­ging in with your lo­gin de­tails, most ser­vices au­to­mat­i­cal­ly keep you logged in. De­pend­ing on the type of ser­vice, a cookie or sim­i­lar tech­nol­o­gy is used for this. This func­tion al­lows you to use part of our ser­vices with­out hav­ing to log in again ev­ery time. For se­cu­ri­ty rea­sons, how­ev­er, you will be asked to en­ter your pass­word again if, for ex­am­ple, you want to change your pro­file in­for­ma­tion or sub­mit an or­der.

So­cial Plug-ins

&nb­sp;

Our ser­vices may con­tain so­cial plug-ins (“plug-ins”) from vari­ous so­cial net­works. Th­ese plug-ins al­low you, for ex­am­ple, to share con­tent or re­c­om­mend prod­ucts. The plug-ins are de­ac­ti­vat­ed as stan­dard and there­fore do not send any da­ta. You can ac­ti­vate the plug-ins by click­ing on the cor­re­spond­ing but­ton (e.g. “ac­ti­vate so­cial me­dia”. The plug-ins can al­so be de­ac­ti­vat­ed again with a click. If the plug-ins are ac­ti­vat­ed, your web brows­er sets up a di­rect con­nec­tion to the web servers of the rel­e­vant so­cial net­work. The con­tent of the plug-ins is then trans­ferred by the so­cial net­work di­rect­ly to your web brows­er and in­te­grat­ed by the lat­ter in­to our web­site. In­te­grat­ing the plug-ins al­lows the so­cial net­work to re­ceive the in­for­ma­tion that you have called up the rel­e­vant page of our in­ter­net of­fer­ing and can col­lect your de­vice and ac­cess da­ta. If you are logged in­to the so­cial net­work, the lat­ter may al­so as­sign the vis­it to your ac­count with the rel­e­vant so­cial net­work. If you in­ter­act with the plug-ins, for ex­am­ple by click­ing the Face­book “like” but­ton or mak­ing a com­ment, the cor­re­spond­ing in­for­ma­tion will be trans­mitt­ed by your brows­er di­rect­ly to the so­cial net­work and stored there. The pur­pose and scope of the da­ta col­lec­tion, and the fur­ther pro­cess­ing and use of the da­ta by the par­tic­u­lar so­cial net­works and your rights and con­fig­u­ra­tion op­tions con­cern­ing this to pro­tect your pri­va­cy, can be found in the pri­va­cy no­tices of the re­spec­tive so­cial net­works and web­sites. You can find the links to th­ese be­low. Even if you are not reg­is­tered with the so­cial net­works, web­sites with ac­tive plug-ins may send da­ta to the net­works. An ac­tive plug-in will place a cookie with an ID each time you call up the web­site. Be­cause your web brows­er sends this cookie with­out be­ing asked ev­ery time you con­nect to a serv­er, the so­cial net­work could in prin­ci­ple cre­ate a pro­file of which web­sites the us­er be­long­ing to the ID had called up. And it would al­so be quite pos­si­ble to as­sign this ID to a per­son, for ex­am­ple if they lat­er reg­is­tered with the so­cial net­work.

&nb­sp;

Face­book so­cial plug-ins

&nb­sp;

We use plug-ins by the so­cial net­work face­book.com, op­er­at­ed by Face­book Inc., 1601 S. Cal­i­for­nia Ave, Pa­lo Al­to, CA 94304, USA (“Face­book”), on sev­er­al web­sites. You can find the link to Face­book’s Da­ta Pro­tec­tion Dec­la­ra­tion here:&nb­sp;Face­book’s pri­va­cy pol­i­cy.

&nb­sp;

Twit­ter so­cial plug-ins

&nb­sp;

We use plug-ins by the so­cial net­work Twit­ter, op­er­at­ed by Twit­ter Inc., 795 Fol­som St., Suite 600, San Fran­cis­co, CA 94107, USA (“Twit­ter”), on sev­er­al web­sites. You can find the link to Twit­ter’s pri­va­cy pol­i­cy here:&nb­sp;Twit­ter’s pri­va­cy pol­i­cy.

&nb­sp;

Pin­ter­est so­cial plug-ins

&nb­sp;

We use plug-ins by the so­cial net­work Pin­ter­est, op­er­at­ed by Pin­ter­est Inc., 651 Bran­nan Street, San Fran­cis­co, CA 94103, USA (“Pin­ter­est”), on sev­er­al web­sites. You can find the link to Pin­ter­est’s pri­va­cy pol­i­cy here:&nb­sp;Pin­ter­est’s pri­va­cy pol­i­cy.

&nb­sp;

So­cial Lo­gins

&nb­sp;

Our ser­vices may of­fer you the op­tion of reg­is­ter­ing with us di­rect­ly us­ing your so­cial net­work ac­counts. If you wish to use this func­tion, you will first be for­ward­ed to the rel­e­vant so­cial net­work’s of­fer­ing. There you will be asked to log in with your us­er name and pass­word. Of course, we do not our­selves take note of your lo­gin de­tails. If you are al­ready logged in, this step will be skipped. The rel­e­vant so­cial net­work then no­ti­fies you and asks you to con­firm which da­ta are trans­mitt­ed to us (e.g. public pro­file, friends list, email ad­dress and cur­rent resi­dence). We use the da­ta trans­mitt­ed to cre­ate your cus­tomer ac­count, but will not, of course, save your friends list, for ex­am­ple. No fur­ther per­ma­nent con­nec­tion be­tween your cus­tomer ac­count and your so­cial net­work ac­count will take place. We al­so re­ceive so­cial net­work da­ta from the providers of the rel­e­vant so­cial net­works.

&nb­sp;

Shop­ping per­so­n­al­i­sa­tion

&nb­sp;

Our ser­vices use the de­vice and ac­cess da­ta from the us­age anal­y­sis, which are col­lect­ed when you use our ser­vice, for shop­ping per­so­n­al­i­sa­tion. De­pend­ing on the type of ser­vice, this may in­clude com­mon track­ing tech­nolo­gies us­ing track­ing pix­els and iden­ti­fi­ca­tion cookies or sim­i­lar Ids (so-called tag­ging). In ad­di­tion, our ad­ver­tis­ing part­n­ers may col­lect your de­vice and ac­cess da­ta in this way, in or­der to pro­vide us with in­for­ma­tion on your in­ter­ests and de­mo­graph­ic da­ta (such as age, gen­der, re­gion) dur­ing your use of our ser­vices. This al­lows us to pre­sent you with ad­ver­tis­ing and/or par­tic­u­lar of­fer­ings and ser­vices which cor­re­spond to your in­ter­ests (for ex­am­ple prod­uct re­c­om­men­da­tions based on the fact that you have on­ly viewed train­ers in the last few days). Our goal when do­ing this is to make our of­fer­ing as at­trac­tive to you as pos­si­ble and to pre­sent you with ad­ver­tis­ing cor­re­spond­ing to your in­ter­est ar­eas. Of course, you can cont­in­ue to use all con­tent and func­tions. This on-site op­ti­mi­sa­tion does, how­ev­er, al­low us to first show you con­tent and func­tions which are more rel­e­vant for you. On-site op­ti­mi­sa­tion is car­ried out au­to­mat­i­cal­ly by our sys­tems, which recog­nise that users have re­peat­ed­ly called up prod­ucts and con­tent from par­tic­u­lar cat­e­gories.

&nb­sp;

If you do not want on-site op­ti­mi­sa­tion, you can de­ac­ti­vate this func­tion at any time:

• Please do this by de­ac­ti­vat­ing web anal­y­sis or app anal­y­sis.

&nb­sp;

In­fo on web­site cookies

&nb­sp;

Our web­sites use cookies. Ac­cept­ing cookies is not a pr­e­requisite for us­ing our web­sites. We would, how­ev­er, like to point out that our web­sites can on­ly func­tion on a limit­ed ba­sis if you do not ac­cept cookies. You can set your brows­er up in such a way that cookies are on­ly saved if you agree to this.

&nb­sp;

What are cookies?

&nb­sp;

Cookies are small text files which are saved by your web brows­er and which save par­tic­u­lar sett­ings and da­ta for exchange with our web serv­er.&nb­sp;

&nb­sp;

A dist­inc­tion is gen­er­al­ly made be­tween two dif­fer­ent types of cookies, so-called ses­sion cookies, which are delet­ed as soon as you close your brows­er, and tem­po­rary/per­ma­nent cookies which are stored for a longer pe­ri­od. Stor­ing this da­ta helps us to de­sign our web­sites and ser­vices for you ac­cord­ing­ly and makes them easi­er for you to use, for ex­am­ple by sav­ing par­tic­u­lar en­tries so that you do not have to re­peat them con­s­tant­ly.

&nb­sp;

The cookies used by our web­site may come from Bistrozuck­er or ad­ver­tis­ing part­n­ers. If you on­ly wish to ac­cept the Bistrozuck­er cookies, but not our ad­ver­tis­ing part­n­ers’ cookies, you can choose the cor­re­spond­ing sett­ing in your brows­er (e.g. “block third-par­ty cookies). The help func­tion in your web brows­er’s menu bar gen­er­al­ly shows you have to re­ject new cookies, and to turn off cookies which have al­ready been re­ceived. We re­c­om­mend that you com­plete­ly log out af­ter you fin­ish us­ing our web­site on shared com­put­ers which are set to ac­cept cookies and Flash cookies.

&nb­sp;

Our ser­vices use three cat­e­gories of cookies:

• Ne­ces­sary cookies: Th­ese cookies are re­quired for op­ti­mal navi­ga­tion and op­er­a­tion of the web­site. For ex­am­ple, th­ese cookies are used to im­ple­ment the bas­ket func­tion, such that the goods in your bas­ket stay saved while you cont­in­ue with the purchase. The ne­ces­sary cookies al­so serve to save par­tic­u­lar in­puts and sett­ings which you have made so that you don’t have to con­s­tant­ly re­peat them, and to adapt Bistrozuck­er con­tent to your in­di­vi­d­u­al in­ter­ests. On­ly limit­ed use of the web­site is pos­si­ble with­out ne­ces­sary cookies.
• Sta­tis­ti­cal cookies: Th­ese cookies col­lect de­vice and ac­cess da­ta to anal­yse the use of our web­site, such as which ar­eas of the web­site are used how (so-called surf­ing be­haviour), how fast con­tent is load­ed and whether er­rors oc­cur. Th­ese cookies on­ly con­tain anony­mous or pseu­dony­mous in­for­ma­tion and are on­ly used to im­prove our web­site and to find out what our users are in­ter­est­ed in, and to mea­sure how ef­fec­tive our ad­ver­tis­ing is. Sta­tis­ti­cal cookies can be blocked with­out ad­verse­ly af­fect­ing the navi­ga­tion and op­er­a­tion of the web­site.
• Mar­ket­ing cookies (“track­ing cookies”): Th­ese cookies con­tain iden­ti­fiers and col­lect de­vice and ac­cess da­ta, in or­der to adapt per­so­n­alised ad­ver­tis­ing on Bistrozuck­er web­sites to your in­di­vi­d­u­al in­ter­ests. Our ad­ver­tis­ing part­n­ers who op­er­ate on­line ad­ver­tis­ing net­works al­so col­lect de­vice and ac­cess da­ta on our web­sites. This al­lows us to dis­play per­so­n­alised ad­ver­tis­ing on other web­sites and in other providers’ apps which fits your in­ter­ests (so-called re­tar­get­ing). Mar­ket­ing cookies can be blocked with­out ad­verse­ly af­fect­ing the navi­ga­tion and op­er­a­tion of the web­site.&nb­sp;Shop­ping per­so­n­al­i­sa­tion may, how­ev­er, not be pos­si­ble.

&nb­sp;

4.3 On­line ad­ver­tis­ing/re­tar­get­ing

&nb­sp;

Our web­sites and apps con­tain cookies and sim­i­lar track­ing tech­nolo­gies from ad­ver­tis­ing part­n­ers which op­er­ate an on­line ad­ver­tis­ing net­work. This al­so al­lows our ad­ver­tis­ing part­n­ers to col­lect your de­vice and ac­cess da­ta and to pre­sent you with per­so­n­alised ad­ver­tis­ing on other web­sites and in other providers’ apps tar­get­ed to your in­ter­ests (e.g. ad­ver­tis­ing based on which prod­ucts you have pre­vi­ous­ly viewed in the Bistrozuck­er shop).

&nb­sp;

You can de­ac­ti­vate the pro­cess­ing of your da­ta for re­tar­get­ing at any time:

• Please do this by de­ac­ti­vat­ing us­age anal­y­sis.
• For other web­sites and apps you can al­so de­ac­ti­vate re­tar­get­ing by par­ti­ci­pat­ing on­line ad­ver­tis­ing net­works on the de­ac­ti­va­tion page of the Eu­ro­pean In­ter­ac­tive Dig­i­tal Ad­ver­tis­ing Al­liance (EDAA):&nb­sp;De­ac­ti­vate fur­ther ad­ver­tis­ing.

&nb­sp;

4.4 Us­age anal­y­sis

&nb­sp;

We use com­mon track­ing tech­nolo­gies to eval­u­ate de­vice and ac­cess da­ta. This al­lows us to find out how our of­fer­ing is be­ing used by our users in gen­er­al. We do this us­ing iden­ti­fi­ca­tion cookies and sim­i­lar iden­ti­fiers. This al­lows us to find out, for ex­am­ple, which con­tent and top­ics are par­tic­u­lar­ly pop­u­lar, when our ser­vices are used the most, from which re­gions (down to the ci­ty lev­el) our ser­vices are used and which browsers and de­vices our users gen­er­al­ly use.

&nb­sp;

5. Newslet­ter

&nb­sp;

We of­fer you vari­ous newslet­ter ser­vices. When you reg­is­ter for a newslet­ter ser­vice you will re­ceive in­for­ma­tion on the top­ics dealt with by the in­di­vi­d­u­al newslet­ters. There are al­so ser­vice-spe­cif­ic newslet­ters, which are in­te­gral com­po­nents of a par­tic­u­lar ser­vice. For ex­am­ple, you will on­ly re­ceive the Bistrozuck­er newslet­ter if you are a mem­ber of the Bistrozuck­er shop­ping club. When you use our newslet­ters we al­so con­nect de­vice and ac­cess da­ta.&nb­sp;

&nb­sp;

5.1 How do I reg­is­ter?

&nb­sp;

When send­ing out our no­ti­fi­able newslet­ters (such as the Bistrozuck­er shop newslet­ter), we use the so-called dou­ble opt-in pro­ce­dure or sin­gle opt-in pro­ce­dure (coun­try-de­pen­dent), i.e. we will on­ly send you the newslet­ter if you have giv­en ex­plic­it pri­or consent to us ac­ti­vat­ing the newslet­ter. If a dou­ble opt-in is re­quired in your coun­try, you must al­so have con­firmed that the email ad­dress you have shared with us be­longs to you. For this pur­pose we will send you a no­ti­fi­ca­tion email and ask you to con­firm by click­ing on one of the links in this email that you are the own­er of the email ad­dress you have shared with us. We may waive this mea­sure if you have al­ready con­firmed to us in this way for another pur­pose that you are the own­er of this email ad­dress.

&nb­sp;

5.2 Un­sub­scrib­ing

&nb­sp;

If you no longer wish to re­ceive emails from us, you can with­draw your consent at any time with­out in­cur­ring any costs other than the trans­mis­sion costs ac­cord­ing to ba­sic tar­iffs. A no­ti­fi­ca­tion in text form (e.g. email, fax, let­ter) to the Bistrozuck­er com­pany re­spon­si­ble for the rel­e­vant newslet­ter is suf­fi­cient for this. Of course, you will al­so find an un­sub­scribe link in ev­ery newslet­ter.

&nb­sp;

5.3 Which da­ta is col­lect­ed?

&nb­sp;

If you sub­scribe to a newslet­ter, we au­to­mat­i­cal­ly save your IP ad­dress and the time of your sub­scrip­tion and con­fir­ma­tion. This way we can prove that you ac­tu­al­ly sub­scribed and iden­ti­fy any unau­tho­rised use of your email ad­dress.

&nb­sp;

We col­lect de­vice and ac­cess da­ta which arise when you in­ter­act with a newslet­ter. For this eval­u­a­tion, the newslet­ters con­tain links to im­age files stored on our web servers. When you open a newslet­ter, your email pro­gramme loads th­ese im­age files from our web serv­er. We col­lect the de­vice and ac­cess da­ta which then aris­es in pseu­donymised form un­der a ran­dom­ly gen­er­at­ed ID num­ber (newslet­ter ID), which we will not use to iden­ti­fy you with­out your consent. This way we can un­der­s­tand whether and when you have opened which is­sues of a newslet­ter. The links con­tained in the newslet­ters like­wise con­tain their newslet­ter ID so that we can de­ter­mine which con­tent you are in­ter­est­ed in. We use the da­ta col­lect­ed here to cre­ate a us­er pro­file for your newslet­ter ID in or­der to per­so­n­alise newslet­ter con­tent ac­cord­ing to your in­ter­ests and us­age habits and to sta­tis­ti­cal­ly anal­yse how our users use the newslet­ter ser­vice. We con­nect this da­ta to da­ta which we col­lect within the frame­work of us­age anal­y­sis.

&nb­sp;

This shop­ping per­so­n­al­i­sa­tion is an in­te­gral com­po­nent of the Bistrozuck­er shop newslet­ter.

&nb­sp;

You can ob­ject to newslet­ter anal­y­sis at any time by de­ac­ti­vat­ing the cor­re­spond­ing newslet­ter ser­vice. Of course, you will al­so find an un­sub­scribe link in ev­ery is­sue of our newslet­ter.

&nb­sp;

Al­ter­na­tive­ly, you can de­ac­ti­vate the dis­play of im­ages in your email pro­gramme. In this case, how­ev­er, the newslet­ter will not be dis­played to you in full.

&nb­sp;

6. In­di­vi­d­u­al prod­uct re­c­om­men­da­tions by email and push ser­vice.

&nb­sp;

In con­nec­tion with our ser­vices we pre­sent in­for­ma­tion and of­fer­ings from Bistrozuck­er on the ba­sis of your in­ter­ests. You will re­ceive th­ese in­di­vi­d­u­al prod­uct re­c­om­men­da­tions from us re­gard­less of whether you have sub­scribed to a newslet­ter. In ac­cor­dance with le­gal stip­u­la­tions, we pref­er­en­tial­ly use your pre­vi­ous shop­ping and in­ter­ests da­ta, which al­low us to de­rive your prod­uct in­ter­ests in view of the in­ter­ests, pref­er­ences and pro­file da­ta you have shared with us, to se­lect in­di­vi­d­u­al prod­uct re­c­om­men­da­tions.&nb­sp;

&nb­sp;

If you do not wish to re­ceive any more in­di­vi­d­u­al prod­uct re­c­om­men­da­tions from us, you can de­ac­ti­vate this ser­vice at any time:

• If you do not wish to re­ceive any in­di­vi­d­u­al prod­uct re­c­om­men­da­tions from us by email, you can in­for­mal­ly ob­ject to it at any time with­out in­cur­ring any costs other than the trans­mis­sion costs ac­cord­ing to ba­sic tar­iffs (e.g. in­ter­net con­nec­tion costs, pos­tage), e.g. by email. Of course, you will al­so find an un­sub­scribe link in ev­ery email.

&nb­sp;

7. Vouch­ers

&nb­sp;

We use the da­ta sub­mitt­ed when or­der­ing Bistrozuck­er vouch­ers to check and pro­cess the or­der and to is­sue and re­deem the vouch­er. This al­so in­cludes the re­cord­ing and pro­cess­ing of the da­ta con­nect­ed to use of the vouch­er, es­pe­cial­ly for fraud pre­ven­tion.

&nb­sp;

We al­so stored the fol­low­ing da­ta for this pur­pose:

• Date of is­sue
• Vouch­er val­ue
• Vouch­er code
• Per­so­n­al­i­sa­tion da­ta (if you pro­vide this)
• Name of vouch­er hold­er (for per­so­n­al vouch­ers)
• Time of vouch­er re­demp­tion
• Name of the re­deem­ing par­ty and the cus­tomer ac­count ID of the ac­count used for re­demp­tion.

&nb­sp;

8. How does Bistrozuck­er use my da­ta for ad­ver­tis­ing?

&nb­sp;

We and our ad­ver­tis­ing part­n­ers use your da­ta for per­so­n­alised ad­ver­tis­ing pre­sent­ed to you in Bistrozuck­er’s ser­vices and on other providers’ web­sites and apps. We and our ad­ver­tis­ing part­n­ers use the pre­vail­ing mar­ket tech­nolo­gies for this pur­pose. This al­lows us to ad­ver­tise in a more tar­get­ed way in or­der to dis­play as many ad­verts and of­fers to you which are ac­tu­al­ly rel­e­vant to you. This al­lows us to bet­ter meet our users’ needs as re­gards per­so­n­al­i­sa­tion and dis­cov­er­ing new prod­ucts and to in­ter­est you in our ser­vice in the long run by pro­vid­ing a more per­so­n­alised shop­ping ex­pe­ri­ence.

&nb­sp;

Ex­am­ple

&nb­sp;

If you are look­ing for su­gar sticks on the web­site of a Bistrozuck­er ad­ver­tis­ing part­n­er, we can take this in­for­ma­tion in­to ac­count in your prod­uct search­es in the Bistrozuck­er shop. This al­lows us e.g. to show you su­gar sticks first in the “su­gar” area or to re­c­om­mend you train­ers in the feed on the home­page. If you in­form us of pref­er­ences in your cus­tomer ac­count or you have al­ready bought sports items from us, we can al­so take this in­for­ma­tion in­to ac­count in our re­c­om­men­da­tions.

&nb­sp;

8.1 Ad­ver­tis­ing for­mats and chan­nels

&nb­sp;

The ad­ver­tis­ing for­mats used by Bistrozuck­er and Bistrozuck­er’s ad­ver­tis­ing part­n­ers in­clude pre­sen­ta­tions in the Bistrozuck­er shop (within the frame­work of on-site and in-app op­ti­mi­sa­tion), ad­verts on so­cial net­works (e.g. Face­book ads, In­s­ta­gram ads, You­Tube video ads) and ad­ver­tis­ing spaces me­di­at­ed via the on­line ad­ver­tis­ing net­works used by Bistrozuck­er such as Dou­bleClick by Goo­gle.

&nb­sp;

Bistrozuck­er does not sell any per­so­n­al da­ta.

&nb­sp;

8.2 In­for­ma­tion which we use to cre­ate tar­get groups

&nb­sp;

In cre­at­ing tar­get groups we use our own find­ings from da­ta anal­y­sis on our users’ us­age and purchas­ing be­haviour and cus­tomers as well as our mar­ket re­search on us­er seg­men­ta­tion which we ap­p­ly to the us­er da­ta col­lect­ed by Bistrozuck­er. In do­ing this we es­pe­cial­ly con­sid­er ag­gre­gat­ed, pseu­donymised or anonymised shop­ping da­ta, search his­to­ries, in­ter­ests da­ta and de­mo­graph­ic pro­file da­ta as well as de­vice and ac­cess da­ta.

&nb­sp;

Ex­am­ple

&nb­sp;

A tar­get group may be: “Wo­m­en be­tween 25 and 35 years old who are food-con­s­cious and in­ter­est­ed in sport, and who have or­dered a tea prod­uct in the last year”.

&nb­sp;

Our ad­ver­tis­ing part­n­ers al­so have the op­tion to pro­vide us with their own da­ta for us­er seg­men­ta­tion, which was col­lect­ed by the ad­ver­tis­ing part­n­ers them­selves. The ad­ver­tis­ing part­n­ers must un­der­take on­ly to pro­vide Bistrozuck­er with ag­gre­gat­ed, en­crypt­ed or anony­mous da­ta, so that we can­not as­sign the da­ta to any par­tic­u­lar per­son, es­pe­cial­ly any par­tic­u­lar us­er of the Bistrozuck­er shop. Some tar­get groups are cre­at­ed on the ba­sis of the users’ surf­ing be­haviour. This is the case if ad­ver­tis­ing is on­ly in­tend­ed to be pre­sent­ed to users who have re­cent­ly visit­ed a par­tic­u­lar web­site or searched for par­tic­u­lar con­tent.

&nb­sp;

8.3 How do we use this in­for­ma­tion in on­line ad­ver­tis­ing on the Bistrozuck­er shop and in other Bistrozuck­er ser­vices

&nb­sp;

We use the above in­for­ma­tion within the frame­work of on-site op­ti­mi­sa­tion in or­der to pre­sent you with more rel­e­vant in­for­ma­tion and con­tent when you search for prod­ucts, call up your feed or vis­it a prod­uct area. On-site and in-app op­ti­mi­sa­tion is based on cookies and sim­i­lar iden­ti­fi­ca­tion tech­nolo­gies for the pseu­dony­mous col­lec­tion of de­vice and ac­cess da­ta. This da­ta is not used to iden­ti­fy you per­so­n­al­ly, but rather to eval­u­ate your us­age pseu­dony­mous­ly. Your da­ta is nev­er per­ma­nent­ly com­bined with other per­so­n­al da­ta we have stored on your per­son. This tech­nol­o­gy al­lows us to pre­sent you with prod­ucts and/or par­tic­u­lar of­fer­ings and ser­vices with con­tent based on your de­vice and ac­cess da­ta (for ex­am­ple ad­ver­tis­ing geared to the fact that you have on­ly viewed tea in the last few days).

&nb­sp;

If you do not want on-site op­ti­mi­sa­tion, you can de­ac­ti­vate this func­tion at any time:

• Please do this by de­ac­ti­vat­ing web anal­y­sis or app anal­y­sis. Please bear in mind that da­ta used for on-site and in-app op­ti­mi­sa­tion is al­so used for other pur­pos­es (in­clud­ing the pro­vi­sion of our ser­vices). The col­lec­tion of the da­ta used for this is there­fore not pre­vent­ed by de­ac­ti­va­tion. The ad­ver­tis­ing pre­sent­ed to you will, how­ev­er, no longer be per­so­n­alised.

&nb­sp;

8.4 On so­cial net­works

&nb­sp;

If we ad­ver­tise via ad­ver­tis­ing for­mats of­fered by so­cial net­works (e.g. You­Tube, Face­book, In­s­ta­gram), we have the op­tion of for­ward­ing en­crypt­ed in­for­ma­tion on Bistrozuck­er users (e.g. de­vice and ac­cess da­ta such as ad­ver­tis­ing and cookie IDs, email ad­dress­es) which we be­lieve be­long to an ad­ver­tis­ing cus­tomer’s tar­get group or show par­tic­u­lar fea­tures (e.g. age group, re­gion, in­ter­ests).

&nb­sp;

The rel­e­vant so­cial net­work will then - ei­ther on our be­half as an or­der pro­ces­sor or with the consent of the rel­e­vant us­er - de­crypt the trans­mitt­ed da­ta and dis­play the ad­ver­tis­ing booked by us to the us­er as part of his ex­ist­ing us­age re­la­tion­ship with the rel­e­vant so­cial net­work (if he is a mem­ber of the rel­e­vant so­cial net­work).

&nb­sp;

If you do not want us to use your da­ta to pre­sent you with per­so­n­alised ad­ver­tis­ing on so­cial net­works, you can de­ac­ti­vate the for­ward­ing of your da­ta:

• Please do this by de­ac­ti­vat­ing web anal­y­sis or app anal­y­sis.

&nb­sp;

If you have consent­ed to the for­ward­ing of your da­ta to so­cial net­works, you can with­draw your consent at any time.

&nb­sp;

You may al­so have the op­tion of de­ac­ti­vat­ing the use of your da­ta for per­so­n­alised ad­ver­tis­ing by the so­cial net­works you use by di­rect­ly con­tact­ing the rel­e­vant providers.&nb­sp;For fur­ther in­for­ma­tion, di­rect­ly con­tact:

&nb­sp;

Face­book (Face­book, In­s­ta­gram):

• In­for­ma­tion on Face­book ad­verts
• Ad­ver­tis­ing sett­ings for Face­book

&nb­sp;

Goo­gle (Goo­gle ad­ver­tis­ing net­work, You­Tube, Goo­gle search):

• In­for­ma­tion on Goo­gle ad­verts
• Ad­ver­tis­ing sett­ings for Goo­gle

&nb­sp;

8.5 on ad­ver­tis­ing spaces me­di­at­ed via on­line ad­ver­tis­ing net­works (re­tar­get­ing)

&nb­sp;

Ad­ver­tis­ing part­n­ers which run an on­line ad­ver­tis­ing net­work may use cookies and sim­i­lar tech­nolo­gies to pseu­dony­mous­ly col­lect your us­age be­haviour us­ing de­vice and ac­cess da­ta on the Bistrozuck­er shop and in other providers’ apps. Th­ese ad­ver­tis­ing part­n­ers use the da­ta col­lect­ed in or­der to iden­ti­fy the prob­a­bil­i­ty of you be­long­ing to the tar­get group we are ad­dress­ing, and take this in­to ac­count when choos­ing the ad­verts on the ad­ver­tis­ing spaces me­di­at­ed via their on­line ad­ver­tis­ing net­work. This stan­dard in­ter­net tech­nol­o­gy is re­ferred to as re­tar­get­ing. Re­tar­get­ing al­lows us to run ad­ver­tis­ing which is as rel­e­vant to you as pos­si­ble and to mea­sure the ef­fi­cien­cy and reach of the ad­ver­tis­ing ma­te­rials, but al­so to check our ad­ver­tis­ing part­n­ers’ bills for cam­paigns we are run­n­ing.

You can de­ac­ti­vate the pro­cess­ing of your da­ta for re­tar­get­ing at any time:

• Please do this by de­ac­ti­vat­ing us­age anal­y­sis.
• You can de­ac­ti­vate re­tar­get­ing by par­ti­ci­pat­ing on­line ad­ver­tis­ing net­works for our web­sites on the de­ac­ti­va­tion page of the Eu­ro­pean In­ter­ac­tive Dig­i­tal Ad­ver­tis­ing Al­liance (EDAA):&nb­sp;De­ac­ti­vate fur­ther ad­ver­tis­ing.

&nb­sp;

Please bear in mind that the da­ta used for re­tar­get­ing is al­so need­ed for other pur­pos­es (in­clud­ing the pro­vi­sion of our ser­vices). The col­lec­tion of the da­ta used for this is there­fore not pre­vent­ed by de­ac­ti­va­tion. The ad­ver­tis­ing pre­sent­ed to you will then not, how­ev­er, be per­so­n­alised.

&nb­sp;

9. Who is my da­ta for­ward­ed to?

&nb­sp;

Bistrozuck­er on­ly for­wards your da­ta if this is al­lowed by Ger­man or Eu­ro­pean law. We work par­tic­u­lar­ly close­ly with cer­tain ser­vice providers, for ex­am­ple in the area of cus­tomer ser­vice (e.g. hot­line ser­vice providers), with tech­ni­cal ser­vice providers (e.g. run­n­ing com­put­er cen­tres) or with lo­gis­tics com­pa­nies (e.g. pos­tal com­pa­nies such as DHL). Th­ese ser­vice providers may gen­er­al­ly on­ly pro­cess your da­ta on our be­half un­der spe­cial con­di­tions. Where we use them to pro­cess or­ders, the ser­vice providers on­ly re­ceive ac­cess to your da­ta in the scope and for the time pe­ri­od re­quired for pro­vi­sion of the rel­e­vant ser­vice. If you shop with a Bistrozuck­er part­n­er, we for­ward par­tic­u­lar shop­ping da­ta re­gard­ing you to the Bistrozuck­er part­n­er (e.g. your name and your de­liv­ery ad­dress), so that the Bistrozuck­er part­n­er can send you the goods or­dered.

&nb­sp;

9.1 Bistro­group com­pa­nies

&nb­sp;

Many sys­tems and tech­nolo­gies are shared within Bistro Group. This al­lows us to of­fer you a more eco­nom­i­cal, se­cure, uni­fied and per­so­n­alised ser­vice. There­fore, com­pa­nies within Bistro group which re­quire ac­cess to your da­ta to ful­fil our con­trac­tu­al and le­gal obli­ga­tions, or to ful­fil their re­spec­tive func­tions within Bistrozuck­er group, re­ceive this ac­cess.

&nb­sp;

Ex­am­ples

• If you reg­is­ter with your cus­tomer ac­count (provider: Bistrozuck­er H&V GmbH) for Bistrotea (provider: Bistrotea H&V GmbH & Co.KG), Bistrozuck­er grants Bistrotea ac­cess to the in­for­ma­tion stored in your cus­tomer ac­count in the ne­ces­sary scope.
• When you con­tact Bistrozuck­er cus­tomer ser­vice, your re­quest is for­ward­ed to Bistrozuck­er & Bistrotea there. Both th­ese Bistrozuck­er com­pa­nies are re­spon­si­ble for cus­tomer ser­vice within Bistro group. Where this is ne­ces­sary to pro­cess your con­cerns, th­ese two Bistro com­pa­nies may ac­cess your da­ta stored by other Bistro com­pa­nies, for ex­am­ple your or­der da­ta.

&nb­sp;

When you sub­mit an or­der, your or­der and pay­ment de­tails are for­ward­ed to Bistrozuck­er H&V GmbH. Bistrozuck­er H&V GmbH is re­spon­si­ble for pay­ment pro­cess­ing within Bistro Group.

&nb­sp;

9.2 Ship­ping com­pa­nies

&nb­sp;

We work with ex­ter­nal ship­ping com­pa­nies (e.g. DHL) to de­liv­er or­ders. Th­ese ship­ping com­pa­nies re­ceive the fol­low­ing da­ta to ex­e­cute the rel­e­vant or­der:

• Your name
• Your de­liv­ery ad­dress
• your post num­ber if ap­pli­ca­ble (if you wish to have the or­der de­liv­ered to a DHL pack­ing sta­tion)
• your email ad­dress if ap­pli­ca­ble (if the ship­ping com­pany wish­es to in­form you of the pro­vi­sio­n­al de­liv­ery date by email)

&nb­sp;

9.3 Part­n­ers in the Bistro­part­n­er pro­gramme

&nb­sp;

Within the frame­work of the Bistrozuck­er part­n­er pro­gramme we al­low other re­tail­ers (so-called Bistrozuck­er part­n­ers) to sell their prod­ucts (so-called Bistrozuck­er part­n­er items) via the Bistrozuck­er shop. The Bistrozuck­er shop serves as a sales plat­form for the me­di­a­tion of purchase agree­ments within the frame­work of the Bistrozuck­er part­n­er pro­gramme. “Sale and ship­ping by our part­n­er” is then dis­played un­der the rel­e­vant Bistrozuck­er part­n­er item, along with the name of the rel­e­vant Bistrozuck­er part­n­er.

&nb­sp;

When you or­der a Bistrozuck­er part­n­er item, the item is gen­er­al­ly dis­patched by the rel­e­vant Bistrozuck­er part­n­er. We for­ward your shop­ping da­ta to the Bistrozuck­er part­n­er for this pur­pose. This in­cludes:

• De­tails on the Bistrozuck­er part­n­er items or­dered
• Your name
• Your de­liv­ery ad­dress

&nb­sp;

In some cas­es or coun­tries we al­so trans­mit your email ad­dress or tele­phone num­ber to a part­n­er, but on­ly where this is ne­ces­sary to fa­cil­i­tate the de­liv­ery of the item to you.&nb­sp;

&nb­sp;

Even if you purchase a Bistrozuck­er part­n­er item, Bistrozuck­er re­mains re­spon­si­ble for pro­cess­ing your da­ta. Your da­ta will nei­ther be pro­cessed to­gether with a Bistrozuck­er part­n­er nor on be­half of a Bistrozuck­er part­n­er. Bistrozuck­er will en­sure that the Bistrozuck­er part­n­er pro­gramme does not give Bistrozuck­er part­n­ers any con­trol over the pro­cess­ing of your da­ta. When you purchase a Bistrozuck­er part­n­er’s items or goods from Bistrozuck­er, Bistrozuck­er on­ly trans­mits to the Bistrozuck­er part­n­er the da­ta list­ed above which the Bistrozuck­er part­n­er re­quires in or­der to ful­fil its ser­vice to you, i.e. nor­mal­ly in or­der to de­liv­er the purchased goods to you. When Bistrozuck­er trans­mits your da­ta to a Bistrozuck­er part­n­er for the rea­sons above, Bistrozuck­er will en­sure in the con­trac­tu­al agree­ments with the part­n­ers that the Bistrozuck­er part­n­er on­ly pro­cess­es your da­ta for the above pur­pos­es.

&nb­sp;

Please bear in mind that the Bistrozuck­er part­n­ers have their own da­ta pro­tec­tion pro­vi­sions. You can usu­al­ly find th­ese on the rel­e­vant part­n­er pages of the Bistrozuck­er shop and/or on the web­sites of the rel­e­vant Bistrozuck­er part­n­er. Bistrozuck­er is not re­spon­si­ble for its part­n­ers’ da­ta pro­tec­tion pro­vi­sions and da­ta pro­cess­ing prac­tices.

&nb­sp;

9.4 Tech­ni­cal ser­vice providers

&nb­sp;

We work with tech­ni­cal ser­vice providers in or­der to be able to pro­vide our ser­vices. Th­ese ser­vice providers in­clude, for ex­am­ple, Telekom Deutsch­land GmbH and Ama­zon Web Ser­vices, Inc. If they pro­cess your da­ta out­side the Eu­ro­pean Union, this may mean that your da­ta is trans­mitt­ed to a coun­try with a low­er da­ta pro­tec­tion stan­dard than the Eu­ro­pean Union. In such cas­es Bistrozuck­er will en­sure that the rel­e­vant ser­vice providers con­trac­tu­al­ly or other­wise guar­an­tee an equi­va­lent da­ta pro­tec­tion lev­el.

&nb­sp;

9.5 Cred­it agen­cies

&nb­sp;

Co­op­er­a­tion with ex­ter­nal cred­it agen­cies for fraud pre­ven­tion, pay­ment method se­lec­tion and cred­it checks is coun­try-spe­cif­ic, in or­der to take ac­count of coun­try-spe­cif­ic fea­tures and re­quire­ments.

&nb­sp;

9.6 So­cial me­dia net­works

&nb­sp;

As part of ad­ver­tis­ing cam­paigns we for­ward da­ta to so­cial net­work providers within the scope of da­ta pro­tec­tion law. You can find fur­ther in­for­ma­tion un­der “How does Bistrozuck­er use my da­ta for ad­ver­tis­ing?”.

&nb­sp;

9.7 Au­thor­i­ties and other third par­ties

&nb­sp;

If we are obliged by an of­fi­cial or court de­ci­sion or it is for pros­e­cu­tion pur­pos­es, we will if ne­ces­sary for­ward your da­ta to pros­e­cu­tion au­thor­i­ties or other third par­ties.

&nb­sp;

10. Which da­ta pro­tec­tion rights do I have?

&nb­sp;

You have the fol­low­ing le­gal da­ta pro­tec­tion rights un­der the rel­e­vant le­gal con­di­tions: Right to in­for­ma­tion (Ar­ti­cle 15 GD­PR), right to dele­tion (Ar­ti­cle 17 GD­PR), right to cor­rec­tion (Ar­ti­cle 16 GD­PR), right to re­stric­tion of pro­cess­ing (Ar­ti­cle 18 GD­PR), right to da­ta porta­bil­i­ty (Ar­ti­cle 20 GD­PR), right to lodge a com­plaint with a su­per­vi­so­ry au­thor­i­ty (Ar­ti­cle 77 GD­PR), right to with­draw consent (Ar­ti­cle 7 (3) GD­PR) as well as the right to ob­ject to par­tic­u­lar da­ta pro­cess­ing mea­sures (Ar­ti­cle 21 GD­PR).

&nb­sp;

Im­por­tant in­for­ma­tion:

• In or­der to en­sure that your da­ta is not dis­closed to third par­ties in the course of&nb­sp;re­quests for in­for­ma­tion, please at­tach suf­fi­cient proof of iden­ti­ty to your re­quest by email or post.

&nb­sp;

Tip

&nb­sp;

It is gen­er­al­ly suf­fi­cient for this if you send your re­quest to us us­ing the email ad­dress saved to your ac­count.

• You can change most of your in­for­ma­tion your­self in your cus­tomer ac­count.&nb­sp;For other cas­es please con­tact cus­tomer ser­vice.
• The re­spon­si­bil­i­ties of the da­ta pro­tec­tion au­thor­i­ties de­pend on the seat of the com­pe­tent au­thor­i­ties. You may, how­ev­er, con­tact the da­ta pro­tec­tion au­thor­i­ty, which will then for­ward your&nb­sp;com­plaint&nb­sp;to the re­spon­si­ble au­thor­i­ty. The au­thor­i­ty re­spon­si­ble for Bistrozuck­er is the Ber­lin Com­mis­sion­er for Da­ta Pro­tec­tion and Free­dom of In­for­ma­tion, Frie­drich­str. 219 b, 10969 Ber­lin, Ger­many.
• If you have giv­en consent for the pro­cess­ing of your da­ta, you may&nb­sp;with­draw&nb­sp;it at any time. With­draw­al has no ef­fect on the ad­mis­si­bil­i­ty of the pro­cess­ing of your da­ta which took place be­fore the with­draw­al.
• You may&nb­sp;ob­ject to&nb­sp;the pro­cess­ing of your da­ta for&nb­sp;ad­ver­tis­ing&nb­sp;pur­pos­es, in­clud­ing&nb­sp;di­rect mar­ket­ing&nb­sp;(in­clud­ing in the form of da­ta anal­y­sis) at any time with­out giv­ing rea­sons.
• If we are pro­cess­ing your da­ta on the ba­sis of bal­anc­ing of in­ter­ests ac­cord­ing to Ar­ti­cle 6 (1) f GD­PR (e.g. the re­port­ing of cred­it­wor­thi­ness to an ex­ter­nal cred­it agen­cy), you may&nb­sp;ob­ject to&nb­sp;the pro­cess­ing. When as­sert­ing your ob­jec­tion, we ask you to give the rea­sons why you do not wish us to cont­in­ue pro­cess­ing your da­ta. In the event of a jus­ti­fied ob­jec­tion, we will check the state of af­fairs and ei­ther stop or ad­just the pro­cess­ing, or in­form you of the ur­gent rea­sons wor­thy of pro­tec­tion why we are en­ti­tled to cont­in­ue the pro­cess­ing.

&nb­sp;

11. When will my da­ta be delet­ed?

&nb­sp;

We will store your per­so­n­al da­ta as long as is ne­ces­sary for the pur­pos­es named in this Da­ta Pro­tec­tion Dec­la­ra­tion, es­pe­cial­ly for the ful­fil­ment of our con­trac­tu­al and le­gal obli­ga­tions. We may al­so store your per­so­n­al da­ta for other pur­pos­es if or as long as the law al­lows us store it for par­tic­u­lar pur­pos­es, in­clud­ing for de­fence against le­gal claims.&nb­sp;

&nb­sp;

If you close your cus­tomer ac­count, we will delete all the da­ta we have stored re­gard­ing you. If it is not pos­si­ble or ne­ces­sary to com­plete­ly delete your da­ta for le­gal rea­sons, the rel­e­vant da­ta will be blocked for fur­ther pro­cess­ing.

&nb­sp;

What does block­ing mean?

&nb­sp;

If da­ta is blocked, re­stric­tion of ac­cess rights and other tech­ni­cal and or­gan­i­sa­tio­n­al mea­sures are used to en­sure that on­ly a few em­ploy­ees can ac­cess the rel­e­vant da­ta. Th­ese em­ploy­ees may al­so on­ly use the blocked da­ta for the above pur­pos­es (e.g. for sub­mis­sion to the tax of­fice in the event of a tax au­dit).

&nb­sp;

Block­ing will oc­cur, for ex­am­ple, in the fol­low­ing cas­es:

• Your or­der and pay­ment de­tails and per­haps other de­tails are gen­er­al­ly sub­ject to vari­ous le­gal re­ten­tion obli­ga­tions, such as those in the Han­dels­ge­setzbuch (HGB - Com­mer­cial Code) and the Ab­gabenord­nung (AO - Tax Code). The law obliges us to re­tain this da­ta for tax au­dits and fi­nan­cial au­dits for up to ten years.&nb­sp;On­ly then can we fi­nal­ly delete the rel­e­vant da­ta.&nb­sp;
• Even if your da­ta is not sub­ject to any le­gal re­ten­tion obli­ga­tion, we may re­frain in the cas­es al­lowed by the law from im­me­di­ate dele­tion and in­stead car­ry out ini­tial block­ing. This ap­plies es­pe­cial­ly in cas­es where we may need the rel­e­vant da­ta for fur­ther con­trac­tu­al pro­cess­ing or pros­e­cu­tion or le­gal de­fence (e.g. in the event of com­plaints). The de­ci­sive cri­te­ri­on for the du­ra­tion of the block­ing is then the le­gal lim­i­ta­tion pe­ri­ods. Af­ter the rel­e­vant lim­i­ta­tion pe­ri­ods ex­pire, the rel­e­vant da­ta will fi­nal­ly be delet­ed.

&nb­sp;

Dele­tion may be waived in the cas­es al­lowed by law if the da­ta is anony­mous or pseu­dony­mous and dele­tion would rule out or se­ri­ous­ly hin­der pro­cess­ing for sci­en­tif­ic re­search or sta­tis­ti­cal pur­pos­es.

&nb­sp;

12. How does Bistrozuck­er pro­tect my da­ta?

&nb­sp;

We trans­mit your per­so­n­al da­ta se­cure­ly us­ing en­cryp­tion. This ap­plies to your or­der and your cus­tomer lo­gin. We do this us­ing the cod­ing sys­tem SSL (Se­cure Sock­et Lay­er). We al­so use tech­ni­cal and or­gan­i­sa­tio­n­al mea­sures to se­cure our web­site and other sys­tems against loss, de­struc­tion, ac­cess, change or dis­sem­i­na­tion by unau­tho­rised per­sons.

&nb­sp;

13. Changes to this Da­ta Pro­tec­tion Dec­la­ra­tion and points of con­tact

&nb­sp;

Fur­ther de­vel­op­ment of our web­sites and apps and the im­ple­men­ta­tion of new tech­nolo­gies to im­prove our ser­vice for you may re­quire changes to this pri­va­cy pol­i­cy. We there­fore re­c­om­mend that you re-read this Da­ta Pro­tec­tion Dec­la­ra­tion from time to time.

&nb­sp;

If you have any ques­tions re­gard­ing da­ta pro­tec­tion at Bistrozuck­er Group, please con­tact our da­ta pro­tec­tion of­fi­cer. The easi­est way to con­tact us&nb­sp;is at&nb­sp;in­fo@bistrozuck­er.de

&nb­sp;

Con­tact de­tails for Bistrozuck­er’s da­ta pro­tec­tion of­fi­cer:
Da­ta pro­tec­tion
Der Bistrozuck­er H&V GmbH
Klaus­n­er­ring 13
85551 Kirch­heim b. München
Tele­fax: +49 (0)89 746 10 480
E-Mail:&nb­sp;in­fo@bistrozuck­er.de

&nb­sp;