Effective: 14 September 2023

We are glad that you have visited our website and that you are interested in our company and our products. Protecting your data and information is a serious matter and thus we want you to feel secure when visiting our website. The section below provides in accordance with the applicable data privacy regulations information about the personal data that we collect when you

(hereinafter collectively called “website”), for what purposes we use and how we utilise such data to optimize our services for you.

1. Controller, data protection officer of the controller

(1) Controller according to Art. 4 (7) of EU’s General Data Protection Regulation (GDPR) is

hereinafter referred to with “WORK IN PROGRESS TEXTILHANDELS GMBH”, “we” or “us”. For more information about the vendor, refer to our à.

(2) The data security officer can be reached at: dpo[at]carhartt-wip.com or by using the aforementioned postal address with attention to “z.Hd. Datenschutzbeauftragter” (Data security officer).

2. Types of Data Processed, Data Subject Categories

2.1 Type of data processed

  • Inventory data (e.g., customer master data, such as names, addresses)
  • Contact detail (e.g., e-mail, phone numbers)
  • Content data (e.g., text entries, photos, videos)
  • Contractual data (e.g., subject matter, term, customer category)
  • Payment data (e.g., bank information, payment history)
  • Usage data (e.g., visited sites, interest in contents, access times)
  • Meta /communications data (e.g., device information, IP addresses)

(2.2) Data subject categories

  • Visitors and users of the website and online offerings
  • Customers, interested parties and business partners
  • Newsletter subscribers

(The aforementioned persons are collectively referred to below as “User”.)

3. Cookies

We use your personal data

  • to provide our website and online offering, its functions and contents.
  • to create and manage your personal customer account.
  • to identify you as a contractual partner.
  • to process your online purchases. That includes your orders and return of products purchased from our webshop, payment processing as well as sending notices about delivery status or any problems relating to a delivery. Your personal data may also be processed for handling complaints or any warranty claims.
  • to respond to contact requests and communicate with Users.
  • to assert, enforce, maintain or defend against any legal claim(s) and legal dispute(s) as well as identify, investigate and prevent any criminal acts)
  • for security measures
  • to assess coverage
  • for the purpose of direct marketing, e.g. in the form of an e-mail newsletter or postal advertising.
  • for the purpose of surveys of product and service satisfaction and the analysis of these surveys.

4. Provision of Website and Logfiles

(1) In case of using the website only for information purposes, i.e. when you are not registered or otherwise provide us with information, we collect only personal data that your browser automatically sends to our server. If you want to browse our website, we collect the following data which are technically necessary for us to show you our website and ensure its stability and security (this is legally permitted under Art. 6 Para. 1 (1) f) of GDPR):

  • IP address
  • Date and time of inquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of request (specific page)
  • Access status/HTTP status code
  • Amount of data transmitted respectively
  • Website, from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of browser software

(2) User IP addresses are deleted or anonymised after the end of website use. In the case of anonymisation, the IP addresses are changed in such a way that the individual details relating to personal or factual circumstances can no longer be assigned to a specific or identifiable natural person or can only be assigned subject to a disproportionate amount of time, cost and effort.

5. Cookies

(1) In addition to the aforementioned logfile data, cookies are saved on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to your browser and which provide certain information to the entity setting the cookie (us in this case). Cookies cannot cause programs to run nor transmit viruses to your computer. They are used to make our internet offering more user-friendly and effective on a whole.

(2) Use of cookies:

a) This website uses the following types of cookies, whose scope and functions are explained below:

  • Session cookies (see b)
  • Permanent cookies (see c).

b) Session cookies store a so-called session ID, with which different requests from your browser can be assigned to the shared session. Session cookies are deleted when you log out or close your browser. If you launch your browser again and return to the website, the website will not recognize you. You will need to log in again (if a login is required) or you must reset your templates and preferences when the website offers such functions. Then a new session cookie is generated that stores your information and which remains active until you leave the page or close your browser.

c) Permanent cookies are deleted automatically after a specified period, which can differ depending on the cookie. You can delete the cookies in your browser’s security settings at any time.

(3) For what purposes do we use cookies?

We use cookies in order to personalise contents and advertisements, to provide social media functions and to analyse traffic to our website. In addition to that, we provide information about your use of our website to our partners for social media, advertising and and analyses. Our partners may combine this information with other data that you have provided them or which they have collected during your use of services. By continuing to use our website, you give your consent to our cookies.

Your consent applies to the following domains: www.carhartt-wip.com

Cookie declaration last updated on 2025/1/28 by:

Necessary (23)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

NameProviderPurposeMaximum Storage DurationType
__cf_bmus.yextevents.comThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.1 dayHTTP Cookie
_wp_storage_teststatic.scarabresearch.comDetermines whether the user has accepted the cookie consent box.PersistentHTML Local Storage
baqend-speedkit#baqend-speedkit-storewww.carhartt-wip.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.PersistentIndexedDB
baqend-speedkit-configwww.carhartt-wip.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.SessionHTTP Cookie
baqend-speedkit-rum-split-enabledwww.carhartt-wip.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.SessionHTTP Cookie
baqend-speedkit-session-idcarhartt-wip.app.baqend.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.PersistentHTML Local Storage
baqend-speedkit-session-indexcarhartt-wip.app.baqend.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.PersistentHTML Local Storage
baqend-speedkit-session-timestampcarhartt-wip.app.baqend.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.PersistentHTML Local Storage
baqend-speedkit-user-idcarhartt-wip.app.baqend.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.PersistentHTML Local Storage
baqend-speedkit-user-idwww.carhartt-wip.comRegisters the website’s speed and performance. This function can be used in context with statistics and load-balancing.180 daysHTTP Cookie
connect.sidfitanalytics.comThe cookie is necessary for secure log-in and the detection of any spam or abuse of the website.SessionHTTP Cookie
CookieConsentwww.carhartt-wip.comStores the user’s cookie consent state for the current domain1 yearHTTP Cookie
datadomesoundcloud.comUsed in context with the website’s BotManager. The BotManager detects, categorizes and compiles reports on potential bots trying to access the website.SessionHTTP Cookie
is_eus.pinimg.comDetermines whether the user is located within the EU and therefore is subject to EU’s data privacy regulations.SessionHTML Local Storage
JSESSIONIDwww.carhartt-wip.comPreserves users states across page requests.SessionHTTP Cookie
rc::agstatic.comThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.PersistentHTML Local Storage
rc::cgstatic.comThis cookie is used to distinguish between humans and bots.SessionHTML Local Storage
redirect_cookiecarhartt-wip.comPending29 daysHTTP Cookie
sc_anonymous_idsoundcloud.comUsed in context with the 3D-view-function on the website.10 yearsHTTP Cookie
shop_cookiewww.carhartt-wip.comPending30 daysHTTP Cookie
what-intentwww.carhartt-wip.comDetermines the device used to access the website. This allows the website to be formatted accordingly.SessionHTML Local Storage
xp [x2]recommender-eu.scarabresearch.com
recommender.scarabresearch.com
Control cookie used in connection to the website’s Content Delivery Network (CDN).1 yearHTTP Cookie

Preferences (2)

Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

NameProviderPurposeMaximum Storage DurationType
maps/gen_204maps.googleapis.comUsed in context with the website’s map integration. The cookie stores user interaction with the map in order to optimize its functionality.SessionPixel Tracker
scrollPoswww.carhartt-wip.comRegisters if the website’s scroll-depth detection is active – This function remembers how far the user has scrolled on the current session across the website’s sub-pages.PersistentHTML Local Storage

Statistics (27)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

NameProviderPurposeMaximum Storage DurationType
_gacarhartt-wip.comRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.2 yearsHTTP Cookie
_ga_#carhartt-wip.comUsed by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.2 yearsHTTP Cookie
_hjFirstSeenhotjar.comThis cookie is used to determine if the visitor has visited the website before, or if it is a new visitor on the website.PersistentHTML Local Storage
_hjSessionhotjar.comPendingSessionHTTP Cookie
_hjSession_#carhartt-wip.comCollects statistics on the visitor’s visits to the website, such as the number of visits, average time spent on the website and what pages have been read.1 dayHTTP Cookie
_hjSessionUser_#carhartt-wip.comCollects statistics on the visitor’s visits to the website, such as the number of visits, average time spent on the website and what pages have been read.1 yearHTTP Cookie
_hjTLDTestcarhartt-wip.comRegisters statistical data on users’ behaviour on the website. Used for internal analytics by the website operator.SessionHTTP Cookie
_tt_enable_cookiecarhartt-wip.comUsed by the social networking service, TikTok, for tracking the use of embedded services.1 yearHTTP Cookie
_vwo_uuid_v2carhartt-wip.comThis cookie is set to make split-tests on the website, which optimizes the website’s relevance towards the visitor – the cookie can also be set to improve the visitor’s experience on a website.1 yearHTTP Cookie
emos_jcsidwww.carhartt-wip.comRegisters statistical data on users’ behaviour on the website. Used for internal analytics by the website operator.PersistentHTML Local Storage
emos_jcvidwww.carhartt-wip.comRegisters statistical data on users’ behaviour on the website. Used for internal analytics by the website operator.PersistentHTML Local Storage
eu01/v.gifvisualwebsiteoptimizer.comThis cookie is used by the website’s operator in context with multi-variate testing. This is a tool used to combine or change content on the website. This allows the website to find the best variation/edition of the site.SessionPixel Tracker
FPAUcarhartt-wip.comAssigns a specific ID to the visitor. This allows the website to determine the number of specific user-visits for analysis and statistics.3 monthsHTTP Cookie
FPGSIDcarhartt-wip.comRegisters statistical data on users’ behaviour on the website. Used for internal analytics by the website operator.1 dayHTTP Cookie
FPIDcarhartt-wip.comRegisters statistical data on users’ behaviour on the website. Used for internal analytics by the website operator.400 daysHTTP Cookie
FPLCcarhartt-wip.comRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.1 dayHTTP Cookie
hjAbsoluteSessionInProgresshotjar.comPendingSessionHTTP Cookie
hjActiveViewportIdshotjar.comThis cookie contains an ID string on the current session. This contains non-personal information on what subpages the visitor enters – this information is used to optimize the visitor’s experience.PersistentHTML Local Storage
hjIncludedInSessionSamplehotjar.comPendingSessionHTTP Cookie
hjSession_#hotjar.comPendingSessionHTTP Cookie
hjSessionUser_#hotjar.comPending1 yearHTTP Cookie
hjViewportIdhotjar.comSaves the user’s screen size in order to adjust the size of images on the website.SessionHTML Local Storage
number(#)widget.sndcdn.comUsed to track user’s interaction with embedded content.SessionHTML Local Storage
referrerUrlwww.carhartt-wip.comDetects how the user reached the website by registering their last URL-address.SessionHTML Local Storage
s [x2]recommender.scarabresearch.com
recommender-eu.scarabresearch.com
Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.SessionHTTP Cookie
vwo_apm_sentvisualwebsiteoptimizer.comPendingPersistentHTML Local Storage

Marketing (50)

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

NameProviderPurposeMaximum Storage DurationType
#-#www.youtube-nocookie.comUsed to track user’s interaction with embedded content.SessionHTML Local Storage
__CK__WG__webgains.comWebgains is an affiliate network (advertising network) that offers a tracking and analysis platform. External partners can sign up on Webgains and receive tracking links and promotional materials to promote Carhartt WIP.1 yearHTTP Cookie
__Secure-ROLLOUT_TOKENyoutube.comPending180 daysHTTP Cookie
_fbpcarhartt-wip.comUsed by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.3 monthsHTTP Cookie
_gcl_aucarhartt-wip.comUsed by Google AdSense for experimenting with advertisement efficiency across websites using their services.3 monthsHTTP Cookie
_pin_unauthcarhartt-wip.comUsed by Pinterest to track the usage of services.1 yearHTTP Cookie
_pinterest_ct_uapinterest.comUsed by Pinterest to track the usage of services.1 yearHTTP Cookie
_ttp [x2]carhartt-wip.com
tiktok.com
Used by the social networking service, TikTok, for tracking the use of embedded services.1 yearHTTP Cookie
ar_debugpinterest.comChecks whether a technical debugger-cookie is present.1 yearHTTP Cookie
cdv [x2]recommender.scarabresearch.com
recommender-eu.scarabresearch.com
Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant.1 yearHTTP Cookie
emos_jcsidcarhartt-wip.comThis cookie is used to deliver more relevant website advertisement, these ads are based on information on the visitor’s website behavior. The cookie can also measure ad-efficiency – this information is shared with other online advertisers.SessionHTTP Cookie
emos_jcvidcarhartt-wip.comThis cookie is used to deliver more relevant website advertisement, these ads are based on information on the visitor’s website behavior. The cookie can also measure ad-efficiency – this information is shared with other online advertisers.2 yearsHTTP Cookie
IDEdoubleclick.netUsed by Google DoubleClick to register and report the website user’s actions after viewing or clicking one of the advertiser’s ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.400 daysHTTP Cookie
iU5q-!O9@$www.youtube-nocookie.comRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.SessionHTML Local Storage
LAST_RESULT_ENTRY_KEYwww.youtube-nocookie.comUsed to track user’s interaction with embedded content.SessionHTTP Cookie
lastExternalReferrerconnect.facebook.netDetects how the user reached the website by registering their last URL-address.PersistentHTML Local Storage
lastExternalReferrerTimeconnect.facebook.netDetects how the user reached the website by registering their last URL-address.PersistentHTML Local Storage
MUIDbing.comUsed widely by Microsoft as a unique user ID. The cookie enables user tracking by synchronising the ID across many Microsoft domains.1 yearHTTP Cookie
nextIdwww.youtube-nocookie.comUsed to track user’s interaction with embedded content.SessionHTTP Cookie
NIDgoogle.comRegisters a unique ID that identifies a returning user’s device. The ID is used for targeted ads.6 monthsHTTP Cookie
pagead/1p-user-list/#google.comTracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites.SessionPixel Tracker
requestswww.youtube-nocookie.comUsed to track user’s interaction with embedded content.SessionHTTP Cookie
scarab.profilecarhartt-wip.comThis cookie used to determine which products the visitor has viewed – This allows the website to promote related products.SessionHTTP Cookie
scarab.visitorcarhartt-wip.comThis cookie used to determine which products the visitor has viewed – This allows the website to promote related products.SessionHTTP Cookie
scarab.visitorcdn.scarabresearch.comSets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers.PersistentHTML Local Storage
store_pagespixelus.yextevents.comDetermines which products the user has viewed, allowing the website to promote related products.SessionPixel Tracker
test_cookiedoubleclick.netUsed to check if the user’s browser supports cookies.1 dayHTTP Cookie
tt_appInfoanalytics.tiktok.comUsed by the social networking service, TikTok, for tracking the use of embedded services.SessionHTML Local Storage
tt_pixel_session_indexanalytics.tiktok.comUsed by the social networking service, TikTok, for tracking the use of embedded services.SessionHTML Local Storage
tt_sessionIdanalytics.tiktok.comUsed by the social networking service, TikTok, for tracking the use of embedded services.SessionHTML Local Storage
v3/pinterest.comUsed by Pinterest to track the usage of services.SessionPixel Tracker
VISITOR_INFO1_LIVEyoutube.comTries to estimate the users’ bandwidth on pages with integrated YouTube videos.180 daysHTTP Cookie
WIDGET::local::assignmentswidget.sndcdn.comUsed by audio-platform SoundCloud to implement, measure and improve their embedded content/service on the website – The collection of data also includes visitors’ interaction with embedded content/service. This can be used for statistics or marketing purposes.PersistentHTML Local Storage
WIDGET::local::broadcastwidget.sndcdn.comUsed by audio-platform SoundCloud to implement, measure and improve their embedded content/service on the website – The collection of data also includes visitors’ interaction with embedded content/service. This can be used for statistics or marketing purposes.PersistentHTML Local Storage
wps-1static.scarabresearch.comUsed to track visitors on multiple websites, in order to present relevant advertisement based on the visitor’s preferences.PersistentHTML Local Storage
wpsStorestatic.scarabresearch.comUsed to track visitors on multiple websites, in order to present relevant advertisement based on the visitor’s preferences.SessionHTML Local Storage
YSCyoutube.comRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.SessionHTTP Cookie
yt.innertube::nextIdwww.youtube-nocookie.comRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.PersistentHTML Local Storage
yt.innertube::requestswww.youtube-nocookie.comRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.PersistentHTML Local Storage
ytidb::LAST_RESULT_ENTRY_KEYwww.youtube-nocookie.comUsed to track user’s interaction with embedded content.PersistentHTML Local Storage
YtIdbMeta#databaseswww.youtube-nocookie.comUsed to track user’s interaction with embedded content.PersistentIndexedDB
yt-remote-cast-availablewww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-cast-installedwww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-connected-deviceswww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoPersistentHTML Local Storage
yt-remote-device-idwww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoPersistentHTML Local Storage
yt-remote-fast-check-periodwww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-session-appwww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage
yt-remote-session-namewww.youtube-nocookie.comStores the user’s video player preferences using embedded YouTube videoSessionHTML Local Storage

Unclassified (21)

Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

NameProviderPurposeMaximum Storage DurationType
_ga_12345carhartt-wip.comPending2 yearsHTTP Cookie
_visitorwww.carhartt-wip.comPending400 daysHTTP Cookie
7cb54b_session_idcdn.epoq.dePendingPersistentHTML Local Storage
activateScrollRestorationwww.carhartt-wip.comPendingPersistentHTML Local Storage
affiliate_cookiewww.carhartt-wip.comPending400 daysHTTP Cookie
connect.sid.carhartt_wipfitanalytics.comPendingSessionHTTP Cookie
eqe [x3]carharttwip-es.arc.epoq.de
carharttwip-it.arc.epoq.de
carharttwip-pt.arc.epoq.de
Pending30 daysHTTP Cookie
eqsid_www.carhartt-wip.comPendingSessionHTTP Cookie
fita.native.short_sid.carhartt_wipfitanalytics.comPendingSessionHTTP Cookie
fita.native.sid.carhartt_wipfitanalytics.comPendingSessionHTTP Cookie
fita.short_sid.carhartt_wipcarhartt-wip.comPending1 dayHTTP Cookie
fita.sid.carhartt_wipcarhartt-wip.comPending3 monthsHTTP Cookie
fromProductDetailwww.carhartt-wip.comPendingPersistentHTML Local Storage
newsletterinitwww.carhartt-wip.comPendingPersistentHTML Local Storage
parameter_inference_ruleanalytics.tiktok.comPendingSessionHTML Local Storage
remember_mewww.carhartt-wip.comPendingSessionHTTP Cookie
scrollPosCategorywww.carhartt-wip.comPendingSessionHTML Local Storage
speed-kit-referrercarhartt-wip.app.baqend.comPendingSessionHTML Local Storage
wps-user-sessionstatic.scarabresearch.comPendingPersistentHTML Local Storage

The cookies used individually and their course of action on the website can be identified using Cookiebot’s cookie manager. The overview is updated on a regular basis. Below is a simplified overview in table form.

PurposeDescriptionStorage period
Technically essential cookiesTechnically essential cookies allow you to use our website, by enabling basic functions like site navigation and access to secure areas of the website. Accessing our website may not work correctly without such cookies.Session cookies – are deleted when the browser is closed.
Performance (e.g. User’s browser) and preferencesWhen using our website, cookies are implemented (e.g. to recognize the browser) in order to optimize performance (e.g. loading contents faster). If you visit our website, the country and language selection that is determined or set by you is stored in cookies in order to save you from having to select such again during subsequent visits. In advance we check whether your browser supports cookies and this information is stored in an additional cookie. You are then shown contact information that has been localised in accordance with your country and language settings and which is also stored. The legal basis in this regard is Art. 6 Para. 1 (1) f) of GDPR.Session cookies – are deleted when the browser is closed.
Analytical cookies / tracking (statistics)We use third-party analytical cookies in order to understand how visitors use our website. This helps us to improve the quality and contents of our website. The aggregated statistical information includes data such as total number of visitors. For instance, we find out how often and in what order the individual pages are viewed and how much time the visitors spend on average on our webpages. We also learn whether Users have already visited our website at an earlier date. This is legally permitted with the consent that you have given in accordance with Art. 6 Para. 1 (1) a) of GDPR. For more information, refer to Section 13 (Web analysis services).Permanent cookies – remain, but are deleted automatically after a period of two years if a website has not been visited again.
Advertising cookies (Marketing)We use advertising cookies in order to be able to assess the effectiveness of our advertising efforts and derive any possible improvements. This is legally permitted with the consent that you have given in accordance with Art. 6 Para. 1 (1) a) of GDPR.Permanent cookies – remain, but are deleted automatically after a period of two years if a website has not been visited again.

(4) Control over cookies

You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, accept cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website.

6. Contact Form, Google reCAPTCHA, E-Mail Contact

(1) Our website has a contact form, which makes it easier to contact us electronically. If a User makes use of this option, the data entered in the entry mask are sent to us and stored. The corresponding data, in particular personal data, address data and messages (free text field) can be seen directly on the respective entry mask.

At the time of submission, the following data are also stored:

  • The User’s IP address
  • Date and time of submission of the form

(2) With regard to processing the data, reference is made to this Privacy Policy during the form submission process. Alternatively, a User may also contact us using the provided e-mail addresses. In such case, the User’s personal data sent with the e-mail will be stored. The data will be used exclusively for processing the inquiry.

(3) The processing of data that are transmitted when using the contact form or sending an e-mail is legally permitted under Art. 6 Para. 1 (1) f) of GDPR. If the objective of the e-mail contact is to get support or enquire about current customer orders or to form an agreement, the additional legal basis for data processing is Art. 6 Para. 1 (1) b) of GDPR.

(4) Personal data collected from the entry mask is used solely for the purpose of facilitating contact. Contact by e-mail also presumes the necessary legitimate interest in the processing of data. Other personal data processed during the form submission process are used to prevent a misuse of our contact form and ensure the security of our IT systems.

(5) The data will be deleted as soon as they are no longer needed to achieve the purpose for which they are collected. For the personal data collected from the entry mask of the contact form and such data that are submitted by e-mail, this is the case when the respective conversation with the User has ended. The conversation has ended when it can be inferred based on the circumstances that the respective matter has been resolved conclusively. The personal data that are additionally collected during the form submission process will be deleted at the latest after a period of seven days.

7. E-mail Newsletter

7.1 Subscribing to newsletter

(1) By giving your consent, you can subscribe to our e-mail newsletter (hereinafter referred to as “Newsletter”), which is sent to inform you about our products, sales and events.

(2) To register for our Newsletter subscription, we use a so-called double-opt-in process. That means that we will send an e-mail to the provided e-mail address after your registration, in which you are asked to confirm that you wish to receive our Newsletter. If you fail to confirm your registration within fourteen days, your information will be deleted automatically. In addition to that, we also store the IP addresses that you used to register and confirm as well as the times of registration and confirmation. The purpose of this process is to verify your registration and, if necessary, resolve any possible misuse of your personal data.

(3) The mandatory information required for sending the Newsletter is only your e-mail address. The provision of other information is voluntary and is used only in order to be able to address you personally. After receiving your confirmation, we save your e-mail address for the purpose of sending you the Newsletter.

(4) The aforementioned procedures during the Newsletter subscription process are legally permitted with your consent in accordance with Art. 6 Para. 1 (1) a) of GDPR.

(5) Your consent to receiving our Newsletters may be revoked at any time by unsubscribing. You can unsubscribe by clicking on the respective link provided in each Newsletter e-mail or by sending an e-mail to the contact information mentioned above under 1.1 of this Privacy Policy.

(6) The data that you have provided while subscribing to our Newsletter will be deleted when you cancel your subscription.

7.2 Newsletter tracking

(1) We do point out that we do analyse the behavior of Newsletter recipients. For this analysis, the sent e-mails include so-called web beacons or tracking pixels that represent single-pixel image files. For these analyses we combine data or parts thereof which are mentioned above under 2.1 of this Privacy Policy as well as the web beacons with your e-mail address and an individual ID. Even the links included in the Newsletter have this ID. With the data obtained in this manner, we create a user profile that allows us to tailor the Newsletter in order to better address the interests of our customers. In doing so, we record when you read our Newsletters, the links that you click on and thus deduce your personal interests. We in turn link such data with your actions on our website.

(2) The above tracking is legally permitted with the consent that you have given in accordance with Art. 6 Para. 1 (1) a) of GDPR, provided that you have subscribed to our Newsletter.

(3) In the event that you receive our Newsletter after making a purchase without specifically subscribing to the Newsletter and giving your consent, the aforementioned tracking is legally permitted under Art. 6 Para. 1 (1) f) of GDPR. Our legitimate interest in processing data as part of tracking is our desire to tailor the Newsletter in order to better address the interests of our customers.

You can object to the aforementioned tracking at any time by clicking on the respective unsubscribe link provided in each Newsletter e-mail or by sending an e-mail to the contact information mentioned above under 1.1 of this Privacy Policy. The information obtained through tracking will be stored until you have unsubscribed from the Newsletter. After unsubscribing we store the data anonymously purely for statistical purposes.

(5) Tracking is moreover not possible if you have by default turned off the display of images in your e-mail client. In such case, you will not be able to see the Newsletter in its entirety and you may not be able to use all features of the Newsletter. Manually unblocking the display of images activates the above-described tracking.

7.3 Newsletter service provider

(1) The processing operations referred to above in connection with our newsletter, and in particular the analysis and evaluation of customer information and information relating to interested parties (transaction data), are implemented with the help of the services and IT systems of the following service provider who we have commissioned as our processor

(2) The legality is guaranteed in contracts formed in accordance with Art. 28 of GDPR and the EU standard model clauses.

7.4 Customer satisfaction surveys

(1) In order to improve our products and services, we consult with our customers, for example by means of surveys, particularly following product purchases or the receipt of requests for support; in such cases, we are asking you to provide feedback. We also commission other service providers to conduct market and product research and we also trial new technologies in our products in connection with which personal data may potentially be recorded.

(2) The processing operations in connection with the surveys specified above, in particular the analysis and evaluation of the results of these surveys, are implemented with the help of the services and IT systems of the following service provider who we have commissioned as our processor

(3) The legal basis for this is provided by means of agreements concluded in accordance with Article 28 GDPR and the EU Standard Model Clauses.

(4) The legal basis for the processing operations referred to above is the consent given by you as specified in Article 6, 1. (a) GDPR in the course of subscribing to our newsletter or a legitimate interest pursued by us following a purchase as specified in Article 6, 1. (f) GDPR. Our legitimate interest in the processing of this data is to improve our products and the services provided to our customers. You automatically consent to recognize this interest as legitimate when you provide an evaluation of a product or service you have received or participate in a survey. If you are unable to recognize this interest as legitimate, we will anonymize your data, so that this data ceases to be personal data as defined by the regulations.

7.5 Print advertising

(1) We also use data provided by you in the course of a purchase for the mailing of print media.

(2) The processing operations referred to above, in particular those relating to the mailing of print media, are implemented with the help of the services and IT systems provided by various service providers who we have commissioned as our processors.

(3) The legal basis for this is provided by means of agreements concluded in accordance with Article 28 GDPR and the EU Standard Model Clauses.

(4) The legal basis for the processing operations referred to above is a legitimate interest pursued by us following a purchase as specified in Article 6, 1. (f) GDPR. Our legitimate interest in the processing of this data is to promote our products and services and to improve our relationships with our customers.

7.6 Website acceleration with Speed Kit

This website uses the Speed Kit product from Baqend GmbH, which is based at Stresemannstr. 23, 22769 Hamburg, Germany, to reduce page loading times. To achieve this, unencrypted data is transmitted via Baqend GmbH infrastructure. However, no personal data or content that could be used to identify specific people is transmitted or saved. IP addresses are anonymized immediately upon transmission .

8. Online Shop

8.1 Use of online shop

When ordering merchandise from our webshop, we collect and process your personal data which are necessary for processing your order. Mandatory information (name and address) which are necessary for processing orders are marked specifically; other information is provided voluntarily. The processing of such personal data is legally permitted under Art. 6 Para. 1 b) of GDPR.

8.2 Customer account

When registering for a customer account (creating an account under “Sign up”) which is not necessary to make a purchase at our webshop, we process the following personal data: E-mail address and a password that you generate. As registered customer you are able to access your profile and view your order history or your active orders. You can delete your customer account at any time by sending a message to the contact listed under 1.1. or an e-mail. The processing of such personal data is legally established in Art. 6 Para. 1 (1) b) of GDPR.

8.3 Electronic order and payment processes

After deciding to complete your purchase as a registered customer or guest, we collect the following data in order to carry out the order: First name and surname, phone and date of birth, address, possibly delivery address. With regard to type of payment, you can choose to pay by credit card, (only available in Germany), PayPal or cash in advance. If you should pay by credit card (Visa or MasterCard), we process the name, the card number, the expiration date and the card validation code.

The processing of your order and payment data is legally permitted under Art. 6 Para. 1 (1) b) of GDPR.

Your address, payment and order data are saved for a period of ten years after completion of the contract on the basis of archiving obligations under tax and commercial law and then deleted, unless you have consented to a more extensive storage period or the further processing of the data is necessary for the assertion, exercise or defence of legal claims. The processing of personal data for the purpose of fulfilling the statutory archiving and storage obligations is legally permitted under Art. 6 Para. 1 (1) c) of GDPR.

8.4 Fit Analytics

We use Fit Analytics on our website. Use of this tool can help you when working out your correct sizing. To be able to use the tool, the following data is needed on a voluntary basis:  gender, height, weight, age, reference item or brand (optional), body shape, styling preference and previous purchases.

We also use Fit Analytics for measuring reach and for marketing and optimization purposes . Fit Analytics is a function which makes it possible to identify your visits to our website with a cookie so that we can personalise our response to you. A usage profile under a pseudonym can be created from this data. The data collected will not be used to personally identify you without your consent and will not be combined with your personal data via the holder of the pseudonym.

8.5 Disclosure of data as part of scope of order

We process the data provided by you in order to take care of your order. To fulfill a contract we will provide your data to the transport company (e.g. DHL) that is responsible for the delivery, insofar as this is necessary for the delivery of the purchased merchandise. We will also provide the collected payment information to the bank that you have selected for payment and, if necessary, to the payment service provider commissioned by us or to the selected payment service. In part, the selected payment service provider will collect such data themselves if you create an account with them. In this case, you must log in to the payment service provider using your login data during the order process. In this context, the privacy policy of the respective payment service provider applies. In accordance with Art. 6 Para. 1 b) of GDPR, we are entitled to disclose your personal data. Our service providers may only process or use your data for the purpose, for which they were provided to them if required. You can access the data at any time. If data have been provided to external service providers, we have ensured with the aid of technical and organisational measures that the data protection regulations are observed.

9. Job Postings (Work with us!)

(1) We do advertise job vacancies on our website. To process your online application, we process and use your personal data. This is legally permitted under Art. 6 Para. 1 (1) b) of GDPR in conjunction with Sect. 26 of BDSG (Federal Data Protection Law). Your online application data will be sent directly to the company’s management. Suitable technical and organisational measures are taken to ensure that your personal data are treated in confidence within the scope of the statutory provisions.

(2) Note that data sent by e-mail are not encrypted and thus could be read or accessed and even falsified by unauthorised persons. You are also welcome to send us your documents by post. At the end of the application process, but no later than after six months, your personal data are automatically deleted, unless you expressly give your consent to a longer storage period.

10. Disclosure to Third Parties

(1) In order to be able to optimally process your order, we collect and save the data required for handling the transaction and, if necessary, provide such data to the companies involved in fulfilling the order within the framework of executed order processing agreements (payment, logistics, shipping). For processing payments, we rely on payment service providers which are shown on the order page where it is necessary to select the payment methods.

(2) Our Newsletters are sent with the involvement of services and IT systems of an external service provider (Emarsys eMarketing Systems AG), which we have commissioned within the framework of order processing.

(3) As part of hosting our website, your data that we process will be processed by the website hosting company commercetools GmbH which is active on our behalf on the basis of an order processing agreement.

(4) In the case of utilising web analytical services and third party providers, data will be transmitted within the scope described here. Third party providers participate in the Privacy Shield Agreement in accordance with Art. 45 Para. 1 of GDPR.

11. Automated Decision-Making

In general, we do not utilise any fully automated decision-making system to justify and carry out business relations in accordance with Art. 22 of GDPR.

12. Profiling

In order to be able to inform and advise you about products in a targeted manner, we or services providers acting on our behalf possibly make use of web analytical services, in particular tracking technology. These facilitate an appropriate communication and advertising. In this regard, we make reference to Art. 13 Web analytical services and advertising.

13. Data Processing by Third Party Providers

13.1. Registering with Facebook Connect

(1) Instead of registering directly on our website, you can also register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

(2) If you decide to register with Facebook Connect and click the “Login with Facebook” / “Connect with Facebook” button, you will automatically be redirected to the Facebook platform. There you can login using your user data. Doing so links your Facebook profile with our website or our services. This link allows us to access your data stored at Facebook. That includes in particular:

  • Facebook name
  • Facebook profile and cover photo
  • e-mail address saved by Facebook
  • Facebook ID
  • Lists of Facebook friends
  • Facebook “likes”
  • Date of birth
  • Gender
  • Country
  • Language

Such data are used to set up, prepare and personalise your account.

(3) For more information, refer to Facebook’s Terms of Use and its Privacy Policy. You can find these at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

Web analytical services and advertising

13.2 Google Analytics

(1) This website uses Google Analytics, an online analytical service of Google Inc. (“Google”). Google Analytics implements cookies, i.e. text files, which are saved on your computer, and which allow for analyzing your use of the website. The information generated by the cookie based on your use of this website is usually transmitted to a Google server in the US and stored there. If the IP anonymisation function is enabled on this website, your IP address will be abbreviated by Google beforehand within the member states of the European Union or other signatory states of European Economic Area Treaty. A full IP address is only sent in exceptional cases to a Google server in the US and truncated there. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports about website activities and offer the website operator other services linked with website use and Internet use.

(2) The IP address sent by your browser within the framework of Google Analytics is not compiled by Google with other data.

You may prevent the storage of cookies by implementing the corresponding settings in your browser; please note however that you may not be able to fully utilise all the functions of this website. In addition to that, you can prevent Google from collecting data generated by the cookie and associated with your use of the website (including your IP address) and Google’s processing of such data by downloading and installing the browser plug-in provided by Google:

(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are only processed in a truncated form in order to prevent them from being linked to a specific person. If the data collected about you can be associated with a specific person, such data will be excluded immediately and the personal data are promptly deleted.

13.3 Google Analytics Marketing

Carhartt WIP shows you ads on websites and in third-party apps. We would like to understand if these ads were truly targeted and personalized. To this end, we evaluate the interactions that have taken place after clicking on an advertisement. We use certain KPIs to assess whether we have achieved our goals. The results obtained flow directly into our campaign management and help us to show you better advertising.

The US is a country that does not provide adequate protection for personal data within the meaning of EU Regulation 2016/679. Among other things, this implies that government agencies in the U.S. may have the right to access your data without effective remedies being available.

Processing company

Google Ireland Limited

Purposes of the data processing

This list sets out the purposes of data collection and processing.

  • Analysis
  • International data transfer

Technologies used

  • Cookies
  • Keywords

Data collected

This list contains all (personal) data collected by or through the use of this service.

  • Time information (e.g., event time)
  • Store information (e.g., country)
  • Page information (e.g., page type)
  • Browser information (e.g. browser version)
  • Device information (e.g., operating system)
  • Purchase information (e.g., shopping cart value)
  • Marketing information (e.g., campaign ID)
  • Personal information (e.g., IP address)

Legal basis

The following is the required legal basis for the data processing.

  • Art. 6 (1) (a) GDPR (Consent)
  • by setting your browser accordingly; suppressing third-party cookies will prevent in particular the display of third-party advertisements;
  • by disabling conversion tracking cookies by setting your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.de/settings/ads, whereas this setting is deleted when you delete your cookies;
  • by disabling interest-based advertisements of vendors that are part of the “About Ads” self-regulatory campaign via the link http://www.aboutads.info/choices, whereas this setting is deleted when you delete your cookies;
  • by permanently disabling in your browsers Firefox, Internet Explorer or Google Chrome using the link http://www.google.com/settings/ads/plugin. We point out that in such case you may not be able to fully use all functions of this offer.

14. Social Media

14.1 Use of Facebook and Twitter plug-ins

(1) We currently use the following social media plug-ins: Facebook, Twitter. The provider of the plug-ins can be identified by the mark on the box above its first letter or the logo. We offer you the opportunity to directly communicate with the provider of the plug-in by using the button. The plug-in provider only receives information that you have accessed the corresponding website of our online offering if you click on the highlighted field, thus activating it. In addition, the data mentioned under Art. 2 of this Statement will also be transmitted. In the case of Facebook and Xing, IP addresses are anonymised immediately after their collection according to the relevant service providers in Germany. By activating the plug-ins, personal data are transmitted by you to the respective plug-in provider and stored there (at US providers in the US). Since the plug-in provider carries out the data collection with the aid of cookies in particular, we recommend you to delete all cookies using your browser’s security settings prior to clicking on the greyed-out box.

(2) We have no control over the collected data and the data processing operations nor do we know the full extent of the data collection, the purpose of processing and the respective storage periods. We also do not have any information relating to the deletion of data collected by the plug-in provider.

(3) The plug-in provider stores the data collected about you as usage profiles and utilises these for advertising purposes, market research and/or to tailor its website to address requirements. Such an evaluation is carried out in particular (even for users not signed in) to provide requests-oriented advertising and to inform other users of the social network about your activities on our website. You are entitled to object to the creation of such user profiles, whereas you have to contact the respective plug-in provider to assert your objection. Plug-ins give us an opportunity to interact with social networks and other users, allowing us to improve our offering and make our presentation more interesting for you as a user. The use of plug-ins is legally permitted under Art. 6 Para.. 1 (1) b) of GDPR.

(4) The data disclosure takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected about you from us are directly assigned to your existing account with the plug-in provider. If you press the activated button and link, e.g., the page, the plug-in provider stores this information in your user account as well and publicly shares that with your contacts. We recommend that you regularly log out when you are done using a social network, especially prior to activating the button, since this will help to prevent an assignment to your profile with the plug-in provider.

(5) We hereby expressly point out that we as provider of this website have no knowledge about the contents and scope of the transmitted data nor their use by the plug-in provider. For more information about the purpose and scope of the data collection and their processing by the plug-in provider, consult the respective providers’ privacy policies listed below. There you will also find more information about your rights in this regard and possible settings to protect your privacy.

14.2 Use of Instagram Social Plug-ins

(1) Our website makes use of so-called social plug-ins (“Plug-ins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plug-ins are marked by the Instagram logo, for instance, in the form of the “Instagram camera”.

(2) When you open a page of our website that contains such a plug-in, your browser sets up a direct connection to the Instagram servers. The contents of the plug-in are sent from Instagram directly to your browser and incorporated in the webpage. As a result of this integration, Instagram receives information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is sent by your browser directly to an Instagram server in the US and stored there. If you are logged into Instagram, Instagram is able to directly assign your visit to our website to your Instagram account. If you interact with the plug-ins, for instance actuating an Instagram button, this information is also directly sent to an Instagram server and stored there. The information is also posted to your Instagram account and shown to your contacts there.

14.3 Use of Pinterest Social Plug-ins

(1) Our website uses social plugins supplied by the social network Pinterest, operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). When you access a page that contains such a plugin, your browser establishes a direct connection to the servers at Pinterest. As a result, the plugin sends log data to the Pinterest servers in the US. From our point of view, all the data collected remains anonymous and does not provide any means of determining the identity of the user. Information is collected on the device you are using (e.g. type, brand), your operating system and IP address of your device, the time the page was viewed, the type and content of the campaign, your reaction to the respective campaign (e.g. transaction, newsletter entry) as well as information on device identification consisting of the specific attributes of the terminal device. This allows us to recognize your device on our website.

(2) We use Pinterest to optimize our online presence and to appropriately design our Pinterest campaigns. This involves the use of a so-called “Pinterest tag” (individual code snippets) in the advertising campaign. When a Pinterest user views or clicks on an advertisement, additional actions are generated and target groups who have shown an interest are tracked. Using these tags we are able to ensure that Pinterest advertisements are only shown to those Pinterest users who have already demonstrated an interest in what we offer and that the advertisements correspond to the potential interest of each user. This data helps us evaluate the implementation of the corresponding campaign. The data is used for statistical and market research purposes and to help optimize our campaigns. The legal basis for this is that specified in Article 6, 1. (f) GDPR.

(3) The data is stored for the stipulated statutory retention periods and then automatically deleted. When you log into your Pinterest account after visiting our website or if you visit our website while logged in, it is possible that this data will be stored and processed by Pinterest. Pinterest can potentially link this data with your Pinterest account and also use it for their own promotional purposes.

15. Plug-Ins and Tools

We use the following plug-ins and tools. The use of plug-ins is legally permitted under Art. 6 Para.. 1 (1) b) of GDPR.

15.1 YouTube

(1) We have included YouTube videos in our online offering, which are stored at http://www.youtube.com and can be accessed directly for viewing on our website. These are all integrated in “enhanced privacy mode”; in other words, no data is sent to YouTube about you being a user if you do not play the videos. The data mentioned under Art. 2 are sent only if you play the videos. We have no control over the transfer of these data.

(2) By visiting the website, YouTube receives information about the fact that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under Art. 2 (Visiting the website) of this Statement will also be transmitted. This happens regardless of whether you have a YouTube user account that are logged into it or do not have a user account. If you are logged into Google, your data are directly assigned to your account. If you would prefer the use not to be associated with your YouTube profile, you need to log out prior to actuating the button. YouTube stores the data collected about you as usage profiles and utilises such data for advertising purposes, market research and/or to tailor its website to address requirements. Such an evaluation is carried out in particular (even for users not signed in) to provide requests-oriented advertising and to inform other users of the social network about your activities on our website. You are entitled to object to the creation of such user profiles, whereas you have to contact YouTube in order to assert your objection.

(3) YouTube is a subsidiary of Google. For more information about the purpose and scope of data collection and their processing by YouTube, consult its privacy policy. There you will also find more information about your rights and possible settings to protect your privacy.

15.2 SoundCloud

(1) This website uses SoundCloud. SoundCloud is a service offered by SoundCloud Limited and its subsidiaries, which also includes SoundCloud, Inc., (hereinafter called “SoundCloud”).

(2) SoundCloud automatically processes when you use its platform or collects information about usage by using cookies and other online analytical services as described in its. According to SoundCloud, such data include, among other things, the following:

  • Usage data – That entails the collection of data relating to interaction with the platform, including sites visited and links clicked, streaming, offline listening to or downloading of tracks, uploading or recording of tracks, linking to a Facebook or Google+ account, sharing a track with other users, following or unsubscribing from other users, joining or leaving groups, posting comments, searches made, the timing, frequency and duration of visits to the platform and details about whether you interact with e-mail messages, in other words whether you have opened the e-mail message, clicked on it or forwarded it.
  • Login information – We automatically collect login information when you visit the platform, even if you have not registered for an account or have signed into your account. Such data include, among other things, details as to how you have used the platform (including links to third-party pages or services), IP address, access time, type of browser used and your operating system, device data, device event data (e.g. crashes, browser type) and the pages that you have viewed or interacted with immediately before or after visiting the platform.
  • Cookies – We use cookies or similar technologies, such as pixels, local storage and mobile device identifiers, and may also grant our business partners permission to implement these tracking technologies on the platform or contract others to track your usage behavior on our behalf. For more information about how we use these technologies, consult our Cookie Policy.
  • Location data – When you use certain features of the platform, we may collect data about your general location (e.g. IP address). We use these data to provide you with location-based services (such as advertising and personalized contents). Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings.
  • Device information – We collect information from and about the devices you use, including how you interact with the platform and information about the device itself, such as the hardware model, operating system, IP addresses, cookie information, device settings, mobile device and advertising identifiers, installed apps, browser type, language, battery level and time zone. Apple’s iOS advertising identifier (IDFA) and Google’s Android advertising ID (IDFA) are examples of device identifiers. This information allows us to recognize and associate your activities and provide personalized content and advertising, consistently across all of your devices.
  • SoundCloud widget – Other websites may integrate SoundCloud widgets. When you visit a website with an embedded SoundCloud widget, we may receive certain information, including data about the website you visited. SoundCloud and the widget may be able to recognize you, and in some cases the widget may also be used to show personalized content. We know when you interact with a widget, and websites containing the widgets may receive this information as well.

15.3. Google fonts

(1) This site uses so-called web fonts provided by Google to ensure the uniform presentation of fonts. When accessing a page, your browser loads the necessary web fonts into your browser cache to facilitate the correct displaying of texts and fonts.

16. Your Rights

If personal data relating to you are processed, you are within the meaning of GDPR a Data Subject and you are entitled to the following rights vis-a-vis us as the Controller. If you wish to exercise your rights or want to receive more information, please contact us or our data security officer:

a) Rights according to Art. 15 ff. of GDPR

(1) The Data Subject has the right to ask the Controller to confirm whether they have processed personal data relating to you; if that is the case, the Date Subject has a right to information about such personal data and to information listed in detail in Art. 15 of GDPR. Under certain legal requirements you have a right to correction in accordance with Art. 16 of GDPR, the right to restrict processing in accordance with Art. 18 of GDPR and the right to deletion (“Right to be forgotten”) in accordance with Art. 17 of GDPR. In addition, you have the right to request the receipt of data provided by you in a structured, common and machine-readable format (Right to data portability) in accordance with Art. 20 of GDPR, provided that the processing is implemented using automated procedures and based on consent under Art. 6 Para. 1 a) or Art. 9 Para. 2 a) or a contract in accordance with Art. 6 Para. 1 b) of GDPR.

b) Revoking consent in accordance with Art. 7 Para. 3 of GDPR

If processing is carried out on the basis of consent, you may revoke your consent for the processing of personal data at any time. Please note that a revocation only takes effect for the future. Data processing, which took place prior to the revocation, is not affected by this.

c) Right to lodge a complaint

You have the option of submitting a complaint to us or to a data protection supervisory authority (Art. 77 of GDPR).

d) Right to object in accordance with Art. 21 of GDPR

In addition to the aforementioned rights, you are also entitled to object as follows:

Case-based right to object

You have the right for reasons arising in connection with your particular situation to object at any time to the processing of personal data relating to you and based on Art. 6 Para. 1 (1) e) of GDPR (Data processing carried out for public interests) and Art. 6 Para. 1 1 f) of GDPR (Data processing for purposes of legitimate interests); this also applies to profiling based on this provision within the meaning of Art. 4 (4) of GDPR.

Should you object, we will no longer process your personal data, unless we are able to provide compelling legitimate grounds for such processing that outweigh your interests, rights and freedoms or the processing serves the assertion, exercising and defense of legal claims.

Right to object to processing of data for advertising purposes

In specific cases, we process your personal data for direct advertising purposes. You have the right to object at any time to the processing of personal data relating to you for the purposes of such advertising; this also applies to profiling, provided that it is associated with such direct advertising. If you object to processing carried out for direct advertising purposes, we will no longer process your personal data for such purposes.

17. Security

(1) We have taken technical and organisational security measures in accordance with Art. 24, 32 of GDPR in order to protect your personal data from loss, destruction, manipulation or unauthorised access. All our employees and all third parties that are involved in the data processing are obligated to comply with the requirements of GDPR and the confidential handling of personal data.

(2) SSL or TLS encryption

This site uses SSL or TSL encryption for security reasons and to protect the transmission of sensitive contents, such as orders and inquiries that you send to us as site operator. You can recognize an encrypted connection by the fact that the browser’s address bar switches from “http://” to “https://” and a lock symbol appears there as well. If SSL or TSL encryption is enabled, the data that you send us cannot be read by third parties.

18. Changes to our Privacy Policy

We reserve the right to change our security and privacy protection measures if this becomes necessary due to technical development or legal changes. In such cases, we will also adjust our Privacy Policy accordingly. As a result of that, make sure that you always use the current version of our Privacy Policy.