Küchenstühle

Data protection

küchen fürs leben 

PRIVACY POLICY

1. Website privacy policy

Thank you for your interest in our website. We are committed to protecting your privacy. Our website is designed accordingly and allows you to decide which of your personal data we receive and the purposes for which we can process or use it.

This privacy policy informs you about the nature, scope and purpose of the collection and use of your data and how you can exercise your data-related rights. You can access the privacy policy at any time by clicking the link at the bottom of any page.

Open access to the website; restricted area

You can visit the public areas of our website at any time without disclosing or saving any personal data.

Certain areas such as the “Retailer area” are only intended for authorised persons and can only be accessed with appropriate personal login details. The logins are saved. As the usernames are linked to specific people, they are classed as personal data. However, extranet use is evaluated on a personal level only to identify accounts that are inactive for an extended period and to deactivate them for security reasons. The use of various areas of the extranet is also statistically evaluated, for example to identify training requirements.

As a team administrator, you are able to create and manage individual login details for your employees. In doing so, you provide us with the following data: name, department, telephone number, e-mail address. It is your responsibility to create a suitable legal basis for sharing your employees’ data with us (e.g. consent). If no such legal basis is confirmed, the data will be deleted after 14 days.

We use this data solely to send information about products and support services available from retail partners.

The legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR. We will store the personal data in line with legal retention periods and then delete it.

Newsletter

We regularly send our newsletter to members of the retailer area using the e-mail address provided during registration. The legal basis for this processing is our legitimate interest according to Article 6(1)(f) of the GDPR. You can withdraw your agreement to receive our newsletter at any time, without incurring any costs other than the transmission costs in accordance with the basic tariffs.

Newsletters are sent by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede. CleverReach is a service that enables newsletters to be scheduled and analysed. Data used for the purposes of the newsletter (e.g. e-mail address) is saved on the CleverReach servers in Germany or Ireland. We have entered into a processing agreement with CleverReach.

Newsletters sent by CleverReach enable us to analyse the behaviour of the newsletter recipients. For example, we are able to analyse how many recipients have opened the newsletter and how often each link in the newsletter has been clicked on. Using conversion tracking, it is also possible to analyse whether a pre-defined action (e.g. purchasing a product on our website) has been carried out after clicking on the link. You can see further information on data analysis via the CleverReach newsletter at: https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.   

If you do not wish your data to be analysed by CleverReach you have the right to object to receiving the newsletter. Every newsletter message contains a link to enable you to unsubscribe.    

The data that you provide us with in relation to the newsletter will be saved until you unsubscribe from the newsletter and will be subsequently deleted from our servers and the CleverReach servers. Data that we save for other purposes shall remain unaffected.   You can find out more about the CleverReach data protection clauses at: https://www.cleverreach.com/de/datenschutz/.   

Registration for the apprentice day

If you are interested in training at our company, you can register on our website for the training day and take part in a free guided tour. If you do, we may take the following personal details: title; first name and surname; email address; telephone number; the names of up to two accompanying persons, where applicable; profession or education; desired time slot.

Once you have registered, you will receive a confirmation email from us. The legal basis for the processing is your consent or, in the case of under 16-year-olds, that of the legal guardian in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. By submitting the form, you consent to the processing of your personal data.

Your data will only be used for our apprentice day. Your data will be deleted after 14 days.

Collection, processing and use of (personal) data

To operate the website, the usual technology-oriented data is processed. This includes the IP address, browser version etc. The purpose of this data processing is to optimise the operation of our website. The legal basis is Article 6(1)(f) of the GDPR.

Further personal data will only be stored and used if you actively and voluntarily provide it to us, e.g. by completing certain fields in a contact form. We will not collect, process or use your personal data from your visit without your express consent. We primarily use your personal data to process orders, deal with enquiries and provide you with access to information or services. Examples include sending you our catalogue and putting you in contact with a specialist retailer near you. The legal basis for this is your consent pursuant to Article 6(1)(a) of the GDPR.

Purpose of anonymous data

To continuously improve the quality of the website, we also store data about pages viewed, visit duration, click rates and other data that is usage-related but not necessarily technical. This data is stored without any link to individuals, i.e. the data is anonymous and cannot be used to identify you.

We perform statistical analyses of this information to make using our website more enjoyable for all users. The data is neither used to create a user profile nor shared with third parties.

To make our marketing measures even more targeted, we also analyse demographic data, information about media effectiveness and our visitors’ browsing behaviour. This enables us to improve the way we address our customers and target our marketing activities more effectively. We will not sell your personal data to third parties or market it in any other way.

Cookies

We use session cookies on our website. What are cookies and why are they used? Cookies are small packages of data that we store on your computer. Cookies do not carry out any commands on your computer and so do not pose a security risk.

Session cookies store certain pieces of information while you browse our website and are not stored permanently but deleted again when you leave our website.

Session cookies are used on the legal basis of Article 6(1)(f). Running the website is in the controller’s legitimate interest.

You can determine how cookies are used on your browser, and have the option to reject them or configure your browser so that they are deleted on a regular basis. You can find out more about this on the internet.

Google Analytics

This website uses Google Analytics, a website analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies – text files that are stored on your computer and allow your use of the website to be analysed. You can find more information on how Google uses this data at: https://policies.google.com/technologies/partner-sites?hl=en-GB

Google Analytics is only used if you have given your consent. The legal basis for this is Art. 6(1)(a) of the GDPR.

You can withdraw your consent at any time by clicking on “Change cookie settings” under “Cookies” and reconfiguring your settings.

The data gathered using Google Analytics is passed on internally to our marketing department.

Google web fonts

This page uses web fonts provided by Google to ensure that fonts are displayed uniformly. The Google fonts are installed locally. No connection to Google servers occurs. 

If your browser does not support web fonts, a default font from your computer will be used.  

You can find further information on Google web fonts at https://developers.google.com/fonts/faq  and in Google’s privacy policy: https://www.google.com/policies/privacy/.  

Google Maps

This website uses the map service Google Maps by means of an API. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  

In order to use the functions on Google Maps, it is necessary to save your IP address. As a rule, this information is transferred to a Google server in the USA and saved there. The provider of this website has no influence on this data transfer. Transfer of data to the USA is based on the standard clauses of the contract that we have entered into with Google.

The use of Google Maps is subject to your agreement. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR.

You can find out more about how user data is handled in the Google privacy policy: https://policies.google.com/privacy.

Social networks

Facebook/Instagram

We use the “Facebook pixel” on our website.   

This service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook).  

If you access our website from sites that use the Facebook pixel, your browser will establish a direct connection to the Facebook servers. The content of the Facebook pixel will be transferred directly to your browser by Facebook and embedded in the page.

The embedded Facebook pixels inform Facebook that your browser has accessed the corresponding page of our website even if you do not have a profile or are not logged in. This information is transferred directly from your browser to Facebook servers, where it is saved. If you are logged in to the service, Facebook can directly associate your visit to our website with your profile. 

The Facebook pixel also sends Facebook information about your actions on our website (e.g. if you make a purchase). 

You can find out about the purpose and scope of data collection and further processing and use by Facebook, as well as your rights and the settings you can use to protect your privacy in Facebook’s privacy policy: http://www.facebook.com/policy.php   

We have concluded standard contractual clauses with Facebook. 

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. 

We also have Facebook and Instagram profiles. The provider of both profiles is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. 

We have entered into an agreement with Facebook on the shared responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing activities for which we and Facebook are responsible when you visit our Facebook fan page. Facebook Ireland assumes primary responsibility for the processing of Insights data pursuant to the GDPR.  You can view this agreement via the following link:     
https://www.facebook.com/legal/terms/page_controller_addendum

You can customise your ad settings in your user account. To do this, simply click the following link and log in:  https://www.facebook.com/settings?tab=ads

For details, please see Facebook’s privacy policy: https://www.facebook.com/about/privacy/    

The legal basis for processing is Article 6(1)(f) of the GDPR. The target-group-oriented design of our posts constitutes our legitimate interest. Facebook provides us with aggregated data, which cannot be linked to individuals.

Xing  

We use a Xing account provided by the operator XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Xing’s privacy policy can be found at:  https://privacy.xing.com/en/privacy-policy.     

Pinterest tag

We have integrated the “Pinterest tag” into our website. This is a piece of code that lets us and Pinterest track visitors to our website and the actions (conversions) they take after seeing our Pinterest ad.

For more information on how Pinterest uses this information, please visit https://help.pinterest.com/de/business/article/install-the-pinterest-tag.

The Pinterest tag also sends Pinterest information about your actions on our website (e.g. if you make a purchase). 

You can find out about the purpose and scope of data collection and further processing and use by Pinterest, as well as your rights and the settings you can use to protect your privacy in Pinterest’s privacy policy: https://policy.pinterest.com/de/ad-data-terms.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR.

YouTube

We use a YouTube channel from the operator Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

If you visit our YouTube channel, the operator will process your personal data such as your IP address and information about your end device, among other data. If you are logged in to your Google account, this data can be linked to it. 

To optimise our reach and improve our online services, we use the statistical data provided by Google on how the channel is used. This enables us to view the following data in particular: 

  • Number of times our videos are viewed
  • Number of subscribers to our channel 
  • Access source 
  • End device information 
  • Demographic data 
  • Categories of other videos viewed by people who access our videos

We have no influence over the production of these statistics.

For more information on data processing and retention periods by and at Google, please visit: https://policies.google.com/privacy 

We shall also sometimes process your personal data in order to respond to enquiries or for other communications via our channel. 

The legal basis for the processing is your consent, which you give us by visiting our channel and writing a comment or initiating other communication with us (Article 6 (1)(a) of the GDPR). 

Use and disclosure of personal data

Your data is not disclosed to third parties unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation to which we are subject in the case in question. According to Article (6)(1)(c) of the GDPR, the processing of personal data is permitted if it is necessary for compliance with a legal obligation to which the controller is subject. Categories of data recipients are: public entities in the event of a legal obligation and processors who process the data gathered online on our behalf. The following processors are involved:

  • CleverReach GmbH & Co. KG
  • iquer.net GmbH & Co. KGo

 

2. Privacy policy – video surveillance and photographs/videos at events

Video surveillance

The gate has been fitted with a visual camera, which recognises vehicle registration plates and enables our drivers and suppliers to access the site. Thermal imaging cameras are also used to monitor our site’s external areas.

The video surveillance of the external areas and the car park entrance are for the purpose of building security and to record the vehicles that enter our site. The security of our buildings and employees as well as the records of the vehicles on our site constitute our legitimate interest pursuant to Article 6(1)(f) of the GDPR. 

The video recordings are kept for 21 days and then deleted. Longer retention periods are only used if a crime is being investigated. In this case, the footage will be evaluated by a security service provider and passed to the public prosecutor’s office. The records of the vehicles are stored for 3 months except if they are to be used as evidence in the event of an accident. In such cases, the recordings will be passed to the law enforcement authorities or our own legal advisors.

Photographs and video recordings at events

Photographs and videos of attendees and the event location are taken and processed to capture the atmosphere and overall impression of the event. They can be used for internal and external marketing purposes as well as for presentations. Selected photographs/videos of public events will be published on the Schüller KG website and social networks.

The presentation of our events and services constitutes a legitimate interest pursuant to Article 6(1)(f) of the GDPR.

If you do not wish to appear in such images, please let the photographer know so that you do not appear in any group images.

 

3. Privacy policy – direct dispatch of product samples, products or other information

If your furniture store or kitchen studio has provided us with information about you so that we can send you product samples, products or information, the following applies.

Name and contact details of the controller:

  • Schüller Möbelwerk KG
  • Rother Straße 1
  • 91567 Herrieden
  • Germany
  • Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer
  • Tel +49 (0) 98 25 83-0
  • Fax +49 (0) 98 25 83-1210
  • datenschutz@schueller.de

Categories of personal data that is processed:

  • Name, address, dispatch reason, furniture store/kitchen studio/retail store
  • Source of the personal data:
  • Furniture store/kitchen studio/retail store as (potential) sellers of products procured via the controller

Purposes for which the personal data is to be processed:

Provision of product samples, products and information (by post)

The legal basis for the processing and – where processing is supported pursuant to Article 6 (1)(f) of the GDPR – the legitimate interests: Articles 6(1)(b) and/or (f) of the GDPR for the performance of precontractual or contractual obligations due to a planned or completed purchase of products, in particular kitchens or kitchen elements manufactured by or procured via the controller.

Recipients or categories of recipients of the personal data:

Furniture store/kitchen studio/retail store, tax and financial authorities, if relevant for accounting purposes Duration for which the personal data is stored:

We delete the data record created in the customer database for the purpose of performing the requested dispatch three months after the dispatch. We delete or destroy the content that must be stored within the scope of tax documentation obligations at the end of the 11th calendar year after the complaint services have been provided.

Need for data collection

The provision of personal data is neither legally nor contractually prescribed, but is necessary for the performance of the dispatch service. We are unable to directly dispatch items without this data.

 

4. General information

Your rights regarding the processing of your data

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”).

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified.

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent at any time, with future effect, informally and without specifying the reason.

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post.

  • Schüller Möbelwerk KG
  • Rother Straße 1
  • 91567 Herrieden
  • Germany
  • Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer
  • datenschutz@schueller.de

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at:https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html&nbsp

If you have any questions, you are welcome to contact our external Data Protection Officer:

  • David Gabel
  • E-mail: david.gabel(at)your-insider.com

General information on data protection and the processing of personal data in data protection processes can be found at https://www.dsgvo-support.de

Data protection notice – interest-finder tool

On our website, we provide an interest-finder tool that helps you to find the right job for you based on a questionnaire. Below, we inform you about how your personal data is processed in connection with the use of this tool.

Data collection and processing

When you use the interest-finder tool, the following data are gathered and processed: your answers to the questions in the questionnaire technical data such as the IP address, browser type and version, date and time of access
Data processing takes place on Microsoft Azure servers. We also use Cloudflare to protect against cyber attacks and to improve loading times.

Purpose of the data processing

The data gathered are used to: provide you with suitable job recommendations based on your answers make the tool available and optimise it from a technical point of view prevent misuse of and attacks on our system Legal basis of the processing. Your data are processed based on the consent that you provide through the use of the tool, pursuant to Art. 6(1)(a) GDPR. To be able to make the tool available and optimise it, as well as to provide protection from misuse, technical data are processed based on our legitimate interest, pursuant to Art. 6(1)(a) GDPR.

Retention period

Your answers to the questionnaire are deleted immediately once the evaluation has been completed and you have been sent the results. Technical data are saved for a maximum of 7 days and then deleted or anonymised.

Data recipients

Your data are passed on to the following recipients or recipient categories:

  • Microsoft Corporation as the operator of the Azure Cloud platform
  • Cloudflare, Inc. to protect from cyber attacks and optimise performance

We have entered into processing agreements with both companies that ensure the protection of your data pursuant to Art. 28 GDPR.

Your rights

In terms of the processing of your personal data, you have the same rights as described in section 4 of this data protection notice (General information). In particular, this includes your right to information, rectification, deletion and restriction of the processing.

You can withdraw your consent to data processing in the scope of the interest-finder tool at any time with future effect. In this case, your data will be deleted immediately and it will no longer be possible to use the tool.

To exercise your rights or in the event of any queries regarding data protection in connection with the interest-finder tool, you can contact our data protection officer at any time.

Privacy policy for Facebook

We have an agreement with Facebook as joint controllers under Article 26 of the GDPR. You can access this agreement using this link. This agreement sets out that Facebook shall fully assume all data protection obligations related to the “Page Insights” function.

     1. Name and address of the controllers:

The joint controllers of this Facebook page are:

a)

  • Facebook Ireland Ltd.
  • 4 Grand Canal Square
  • Grand Canal Harbour
  • Dublin 2
  • Ireland

You can contact Facebook’s Data Protection Officer using the following form: www.facebook.com/help/contact/540977946302970.

and

  • Schüller Möbelwerk KG
  • Rother Straße 1
  • 91567 Herrieden
  • Germany
  • Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer
  • Tel +49 (0) 98 25 83-0
  • Fax +49 (0) 98 25 83-121
  • info@schueller.de

You can contact the external Data Protection Officer for Schüller Möbelwerk KG at:

  • E-mail: david.gabel@your-insider.com

      2. Data categories, purpose and legal basis of the processing

For information on data processing by Facebook, please see its privacy policy at https://www.facebook.com/privacy/explanation.

Please see below for further information about our data processing activities.

a. Statistical data

We are able to access various categories of statistical data using the Facebook “Insights” function. (https://www.facebook.com/business/a/page/page-insights)

These statistics are produced and made available by Facebook. As a user of the site, we have no influence on the production and presentation of such statistics. We cannot turn off this function or prevent the production and processing of data. For a selected time period and for the categories fans, subscribers, people reached and people engaged, Facebook provides us with the following data related to our Facebook page: total number of pages accessed; “Like” information; page activities; engagement with posts; reach; video views; post reach; comments; shared content; replies; breakdown by gender; location based on country and city; language; calls to action and clicks in the shop; clicks on route planners; clicks on telephone numbers. This approach also provides data on the Facebook groups linked to our Facebook page. Due to the ongoing development of Facebook, the availability and processing of data is constantly changing. For further details you should therefore consult the aforementioned Facebook privacy policy.

The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. Our legitimate interest is to make the posts and activities on our Facebook page more attractive to users. For example, we use a breakdown by age and gender to adapt the way that we address users and the main times at which users visit the page to optimise the timing of our posts. Information on the type of end devices used by visitors helps us to adapt the visual design of our posts.

b. Engagement with our account

It is also possible for you to engage with our account. You can do this, for example, by liking, sharing or commenting on a post or by sending us a direct message.

When you engage with us we must, as a rule, process data as this enables us to see your account and therefore access your personal data such as your username, profile picture or the date and time of engagement. According to the Facebook Terms of Service, which every user agrees to when creating a Facebook profile, we can identify page subscribers and fans and see their profile and other information that they share.

This concerns data gathered for information purposes, which is only made available when you engage with our profile. The processing of personal data here is based on Article 6(1)(b) of the GDPR.

        3. Data recipients

Please note that your data can be passed on to third parties by Facebook. We do not have any influence over this. For more detailed information on this, please see the Facebook privacy policy: www.facebook.com/privacy/explanation

We do not disclose your data unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation that we are subject to in the case in question. Categories of data recipients are: public entities in the event of a legal obligation; processors who process the data gathered online on our behalf; website hosts and designers; analysis service providers, etc.

       4. Retention period and deletion

You can obtain information on data retention by Facebook from its privacy policy: www.facebook.com/privacy/explanation.

We save all personal data that you transfer to us only for as long as is necessary to fulfil the purpose for which the data was transferred or for the period set out by law. When the purpose has been fulfilled and/or the legal retention periods have ended, we delete or block the data.

       5. Rights of the data subject

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”).

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified.

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent granted within the context of use of the website at any time with future effect, informally and without specifying the reason.

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post.

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at:https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

If the complaint concerns data processing by Facebook, you can also contact Facebook directly. This is particularly the case if the processing is carried out within the scope of the “Page Insights” function. You can contact Facebook using the following form: https://www.facebook.com/help/contact/2061665240770586.

You can also contact Facebook by post at the following address:

  • Facebook Ireland Ltd.
  • 4 Grand Canal Square
  • Grand Canal Harbour
  • Dublin 2
  • Ireland

Alternatively, you can of course contact us and we will pass on your request in accordance with our agreement with Facebook under Article 26 of the GDPR.

Privacy policy for Pinterest

To adapt our internet content to different target groups, we have a profile on the platform Pinterest. Our profile is linked to our website by a plug-in. Via this link, we and Pinterest are able to track who has visited our website and our Pinterest profile. The plug-in on our website is only activated when the visitor gives their consent.

  1. Name and address of the controllers:

The joint controllers of the Pinterest profile are:

a)

  • Pinterest Europe Ltd.
  • Palmerston House, 2nd Floor
  • Fenian Street
  • Dublin 2
  • Ireland

hereinafter referred to as the “Platform Operator”.

You can contact Pinterest via the following website: https://help.pinterest.com/data-protection-officer-contact-form

You can see the Pinterest privacy policy under the following link: https://policy.pinterest.com/en/privacy-policy

Further questions on data protection are answered here: https://help.pinterest.com/de/topics/legal-and-privacy

b)

  • Schüller Möbelwerk KG
  • Rother Straße 1
  • 91567 Herrieden
  • Germany
  • Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer
  • Tel +49 (0) 98 25 83-0
  • Fax +49 (0) 98 25 83-121
  • info@schueller.de

You can contact our external Data Protection Officer at: david.gabel@your-insider.com

      2. Data categories, purpose and legal basis of the processing

a) When visiting the platform

When accessing the Platform Operator’s website, information is automatically sent to the Platform Operator’s server by the browser used on your end device or by the app. This information is temporarily saved by the Platform Operator in a log file. The following information is gathered without any action on your part and is saved until it is automatically deleted:

  • IP address of the requesting device
  • Date and time of access
  • Type of device that you are using
  • Name and URL of the file accessed
  • Website from which access is obtained (referrer URL)
  • Advertising ID generated by the device
  • Browser used and, if necessary, your computer operating system and the name of your access provider

This data is only available to the Platform Operator. We are unable to access it. You can obtain further information from the Platform Operator’s privacy policy above.

We do not gather any personal data from you in this case. However, it is possible to obtain pseudonymised data on the users of our website in the form of statistics over a specific period. The software used to analyse user statistics is generally provided by the Platform Operator, however, in some places software from third-party providers may also be embedded (e.g. Google Analytics). This means that data on the users of the site can be gathered such as their age, gender, country of origin, browser and interests.

However, this data is always pseudonymised and we are not able to make statements about individual users based on these data. We use this data only to optimise and market the contents that we offer and adapt them to user interests. This is a legitimate interest according to Article 6(1)(f) of the GDPR.

b) When engaging with our account

It is also possible for you to engage with our account. You can do this, for example, by liking, sharing or commenting on a post or by sending us a direct message.

When you engage with us we must, as a rule, process data as this enables us to see your account and therefore access your personal data such as your username, profile picture or the date and time of engagement.

We use this data only to optimise and market the contents that we offer and adapt them to user interests. This is a legitimate interest according to Article 6(1)(f) of the GDPR. Our legitimate interest results from the above-mentioned optimisation of the contents made available under our profile. Furthermore, this concerns data gathered for information purposes, which is only made available to us when you engage with our profile. In doing so, a relevant and appropriate relationship is formed between you and our profile.

If we are able to, we will delete personal data within 28 days, provided that there is no legal basis for further processing beyond that time. You can obtain further information on data processing by the Platform Operator from their privacy policy above.

      3. Data recipients

Please note that your data can be passed on to third parties by Pinterest. We do not have any influence over this. You can see more detailed information on this in the Pinterest Privacy Policy (see above).

We do not disclose your data unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation that we are subject to in the case in question. Categories of data recipients are: public entities in the event of a legal obligation; processors who process the data gathered online on our behalf; website hosts and designers; analysis service providers, etc.

     4. Retention period and deletion

You can obtain information on data retention by Pinterest from its privacy policy (see above).

We save all personal data that you transfer to us only for as long as is necessary to fulfil the purpose for which the data was transferred or for the period set out by law. When the purpose has been fulfilled and/or the legal retention periods have ended, we delete or block the data.

     5. Rights of the data subject

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”). 

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified. 

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent granted within the context of use of the website at any time with future effect, informally and without specifying the reason.  

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post. 

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html 

If the complaint concerns data processing by Pinterest, you can also contact Pinterest directly. This is particularly the case if the processing is carried out within the scope of customised advertising. You can contact Pinterest using the following form: https://help.pinterest.com/data-protection-officer-contact-form

You can also contact Pinterest by post at the following address:

  • Pinterest Europe Ltd.
  • Palmerston House, 2nd Floor
  • Fenian Street
  • Dublin 2
  • Ireland

Alternatively, you can of course contact us and we will forward your query to Pinterest.

Last updated: August 2024