Data Protection

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided regarding the processing operations described below.
"Personal data" refers to any information relating to an identified or identifiable natural person.

Server log files
You may visit our website without providing any personal information.
Each time you access our website
,
usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
 

Contact

Data Controller Please
contact us if you wish. The data controller is: Fashiontrendshop GmbH, Otto-Hahn-Str. 6, 85055 Ingolstadt, Germany, 0841/3708855, info@cinquestore.de

Unsolicited contact from the customer via email
If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves to process and respond to your contact enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice regarding purchase interest, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use
your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves the purpose of establishing contact.
If the contact serves the purpose of carrying out pre-contractual measures (e.g. advice regarding purchase interest, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use
your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Customer Account Orders Customer

Account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing
orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is carried out on the basis of Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transfer is kept to a minimum.

Advertising


Use of your email address for sending newsletters
We use your email address, independently of contract processing, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

  Your data will be passed on to an email marketing service provider as part of data processing on our behalf. Your data will not be passed on to any other third parties.

Shipping serviceprovider Inventory management

Disclosure of email address to shipping companies for information on shipping status
We will pass on your email address to the transport company as part of contract fulfilment, provided you have expressly consented to this during the ordering process. The purpose of this disclosure is to inform you of the shipping status by email. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Use of an external merchandise management system
We use a merchandise management system for contract fulfilment within the scope of order processing. To this end, your personal data collected as part of the order is transferred to
Pickware GmbH,
Goebelstr. 21, 64293 Darmstadt.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6(1)(b) of the GDPR.

Payment service provider Credit reference

Use of Klarna payment options
We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.

In doing so, cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to this processing of personal data concerning you on grounds relating to your particular situation.
“Pay Later” (invoice), “Pay Now” (payment by direct debit), “Financing” (instalment purchase)
For certain payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit) and “Financing” (instalment purchase), Klarna reserves the right to obtain a credit report, where necessary, based on mathematical and statistical methods using credit reference agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first name and surname, address, gender, email address, IP address and data relating to the order to a credit reference agency for the purpose of identity and credit checks, and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical methods, which incorporate, amongst other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protection against payment default where Klarna provides advance payment. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will result in the contract not being concluded using your chosen payment method.
Further information, in particular regarding which credit reference agencies Klarna passes your personal data on to, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna is available at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and in line with the information set out in Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Use of SOFORT
We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; “SOFORT”) for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The purpose of this data processing is to offer you various payment methods through payment processing via the payment service provider SOFORT. Once you have selected this payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Article 6(1)(b) of the GDPR. Further information on data processing when using the payment service provider SOFORT can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to make full use of all the functions of this website.
The links below provide information on how to manage (including disabling) cookies in the most popular browsers :
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after you have changed pages and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after you have changed pages.
The use of cookies or similar technologies is based on Section 25(2) of the TDDDG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our service.
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation

.


Use of Consentmanager
We use the consent management tool Consentmanager from Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”) on our website.
The tool enables you to grant consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already granted.
The purpose of data processing is to obtain and document the necessary consents to data processing and thereby comply with legal obligations.
Cookies may be used for this purpose. In doing so, the following information, amongst other things, may be collected and transmitted to Consentmanager: date and time of the page visit, information about the browser and device you are using, anonymised IP address, opt-in and opt-out data. This data will not be passed on to any other third parties.
Data processing is carried out to fulfil a legal obligation on the basis of Article 6(1)(c) of the GDPR.
Further information on data protection at Consentmanager can be found at: https://www.consentmanager.net/privacy.php


Analysis and advertising tracking

Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet usage.
The following information, amongst others, may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activities. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.

Your IP address is first truncated by us on our own servers. Google therefore receives only pseudonymised data.

The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

The information generated in this way regarding your use of this website is generally transmitted to a Google server in the USA and stored there. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.

Use of the Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").
Meta and we are joint controllers for the collection of your data and the transfer of this data to Meta when the service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, in which the respective responsibilities are set out. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. Accordingly, we are in particular responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects our obligations under the joint processing agreement. Meta is responsible for enabling data subjects’ rights in accordance with Articles 15–20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the security of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects Meta’s obligations under the joint processing agreement.
The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. To this end, Meta’s remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta’s servers when you visit the website. This transmits information to Meta’s servers regarding which of our pages you have visited. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves the purpose of generating conversion statistics. This allows us to determine the total number of users who clicked on one of our adverts and were redirected to a page tagged with a conversion tracking tag, as well as the actions taken after being redirected to this website. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
You can deactivate the “Custom Audiences” remarketing function here. Further information on the collection and use of data by Meta, your rights in this regard and options for protecting your privacy can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising programme “Google Ads” on our website and, within this framework, conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advert placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advert and were redirected to that page. Each Google Ads customer receives a different cookie. Consequently, it is not possible for cookies to be tracked across the websites of Ads customers.
The information collected via the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

Your data may be transferred to the servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on
the basis of your consent prior to withdrawal. Further information and Google’s privacy policy can be found at:
https://www.google.de/policies/privacy/
Use of the remarketing or “similar audiences” function provided by Google Inc.
We use the remarketing or “similar audiences” function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The purpose of this application is to analyse visitor behaviour and interests. Google uses cookies to analyse website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website as well as anonymised data regarding website usage. No personal data of website visitors is stored. If you subsequently visit another website within the Google Display Network, you will be shown advertisements that are highly likely to take into account previously viewed product and information sections.
Your data may be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained TADPF certification and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on
the basis of your consent prior to withdrawal. Further information on Google Remarketing and the associated privacy policy can be found at:
https://www.google.com/privacy/ads/

Use of the Pinterest Tag
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, “Pinterest”) on our website.
The purpose of this application is to target website visitors with interest-based advertising on the Pinterest social network. To this end, the Pinterest conversion tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to the Pinterest servers. This transmits information to the Pinterest server regarding which of our pages you have visited. Pinterest associates this information with your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, you will then be shown personalised, interest-based Pinterest ads.
If you arrive at our website via a pin on the Pinterest social network, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the pin and were redirected to that page. The information collected using the conversion cookie is used to compile conversion statistics and thereby optimise our website. The following information, amongst other things, may be processed: the total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, the contents of your shopping basket, and completed transactions.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. Data transfer takes place, amongst other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
Further information on the collection and use of data by Pinterest, your rights in this regard and options for protecting your privacy can be found in Pinterest’s privacy policy at https://policy.pinterest.com/de/privacy-policy.


Plug-ins and other features

Use of Google Tag Manager
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing our website to meet user needs and optimising it.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.

Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
  This serves the purpose of distinguishing between input by a human and automated, machine-based processing. In the background, Google collects and analyses usage data, which is used by Invisible reCAPTCHA to distinguish regular users from bots. To this end, your input is transmitted to Google and processed there. In addition, the IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and, where applicable, also transmitted to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on
the basis of your consent prior to withdrawal. Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy

Use of YouTube
We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”). YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos stored on YouTube within an iFrame on the website. The “Enhanced Privacy Mode” option is activated. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained TADPF certification and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on
the basis of your consent prior to withdrawal. Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.

Data subject rights and retention

period Retention period
Once the contract has been fully executed, the data will initially be stored for the duration of the warranty period; thereafter, it will be stored in accordance with statutory retention periods, in particular those under tax and commercial law, and then deleted upon expiry of the retention period, provided you have not consented to further processing and use.

Rights of the data subject Provided the legal requirements
are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: Right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority: In accordance with Article
77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may lodge a complaint with, amongst others, the supervisory authority responsible for us, which you can contact using the following details: :

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to
object If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time, with effect for the future, on grounds relating to your particular situation.
Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

Last updated: 29 November 2023