Data Protection Policy

At AREBOS, protecting your privacy is important to us. As a UK company we follow UK dataprotection law when we process your personal data. “UK data protection legislation” includes all applicable data protection and privacy legislation in force at any time in the UK including but not limited to the General Data Protection Regulation (GDPR), which is incorporated as the “UK GDPR” within the Data Protection Act 2018,and the Privacy and Electronic Communications Regulations 2003 as amended.

Our Data Protection Policy will provide you with an overview of what data are requested from you by our website, in what manner this data is used and passed on, how you can find out about the information submitted to us and what security measures we take to protect your data.

Our website is not aimed at children and we do not knowingly process personal data relating to children.

We are the controller of your personal data

We are the controller of the personal data we obtain from you.

We are:

Mart24 Ltd

Unit A 82 James Carter Road

Mildenhall, Bury St. Edmunds

Suffolk IP28 7DE

United Kingdom

Tel   +44 208 068 5604

 

We are incorporated as a private limited company in England and Wales. This is our registered office address. Our company number is 12431767.

We have appointed a data protection manager who is retained by one of our associate companies in the European Union. You can contact him at sales@mart24.co.uk.

Our legal entitlement to collect your personal data

Personal data is any information that can be traced back to an identified or identifiable natural entity (“data subject” or “user”), such as your name, address, telephone number, date of birth, bank details and IP address.

Personal data is only usually collected and used with the data subject’s consent. But where prior permission is not possible for reasons of practicality, processing of such data is permitted by UK data protection legislation.

The lawful basis for processing your personal data by AREBOS is therefore on any one or more of the following legal justifications:

Consent: where you have given your specific freely-given consent to our specific processing activity.

Performance of a contract with you: in most cases you are buying goods and services from us and processing your data in certain instances is necessary for the performance of this contract with you or for the purpose of taking steps at your request before entering into such a contract.

Legitimate interests: the interests of our business in conduction and managing our business to enable us to provide you with the best service and the best and most secure experience. We ensure that in exercising our legitimate interests we consider and balance any potential impact on you and your rights before we process your data. We do not use your data for activities where our interests are overridden by the impact on you, unless we have your consent or we are otherwise required or permitted to by law. (You can contact info@arebos.co.uk if you wish to investigate how we assess our interests and the potential impact on you with respect to specific activities).

Compliance with our legal obligations: where we must process your data because it is necessary for compliance with a legal obligation to which AREBOS is subject.

Throughout this Data Protection Policy, we refer to which ones or all of these legal justifications for processing your data where a specific processing activity is described.

 

What data is collected from you and retained?

Usage Data

The following data is logged when using our website. This is only for internal, system-related and statistical purposes, i.e. usage data:

1. Information about browser type and version
2. Resolution used to display the website
3. The user’s operating system and other information about the end device
4. The user’s IP address
5. Duration of access
6. Websites from which the user’s system was referred to our website
7. Pages on our website viewed by the user

This data will also be saved in our system’s log files. This data is not saved together with any of the user’s other personal data.

The legal basis for the temporary saving of data and log files is our legitimate interests and may also necessary to enable us to perform a contract with you. The temporary saving of the IP address by the system is required to facilitate the provision of the website to the user’s computer. To this end, the user’s IP address must be saved for the duration of the session.

Log files are saved to ensure the website’s functionality. The data also allows us to optimise the website and ensure the security of our IT systems. This data is not evaluated for marketing purposes in this context.

Usage data is deleted as soon as it is no longer required to fulfil the purpose of its collection. If data is collected in order to provide the website, this applies from the end of the relevant session. When datais saved in log files, it is deleted after seven days at the latest. Longer saving periods are possible. In this case, the users’ IP addresses will be deleted or disguised so the visiting client can no longer be identified.

Data collection to provide the website and the saving of data in log files is necessary for the operation of the website. Therefore, the user has no right to contest.

Registration

You may register on our website by providing personal data. This data is entered into a form before being transferred and saved by us.

The following data is processed within the registration process:

- Name
- Company name
- Email address
- Address
- Telephone number

The date and time of registration will also be saved.

By checking the box in the registration form to confirm that you have acknowledged our dataprotection policy and completing the registration process by clicking the ‘submit’ button at the end of the form, you are granting permission for your data to be used for the following purposes:

- Processing orders
- Sending newsletters
- Website administration

If the user has granted permission, the legal basis for data processing is consent.

If the registration serves to fulfil a contract with the user or to carry out pre-contractual measures, there is additional legal basis for data processing on the basis of being necessary for the performance of a contract with you.

This data is deleted as soon as it is no longer required to fulfil the purpose of its collection. This applies to the data collected during the registration process if you have objected to us using your data. If you have any questions regarding this matter, again please contact sales@mart24.co.uk .

Deletion may be of data collected during the registration process to fulfil a contract or to carry out pre-contractual measures even if the data is no longer required to carry out the contract. After the contract is completed, it may be necessary to save your personal data in order to fulfil our contractual or statutory obligations.

If the data is required to fulfil a contract or carry out pre-contractual measures, premature deletion of the data is only possible as long as no contractual or statutory obligations prevent deletion.

Contact Form Data

We provide a contact form for you on our website, which you can use to easily contact us regarding a request. We only collect your name and email address via the contact form. The provision of your telephone number is optional.

Alternatively, you can contact us using the email address provided. In this case, the user’s personal data transferred in the email shall be saved.

We only use your data to process your request and may contact you for this purpose using the contact details you provided. This data will not be used for advertising purposes or forwarded to third parties.

The legal basis for processing data sent via the contact form or via email transfer is our legitimate interests. If the contact refers to the completion of a contract, additional legal basis for the processing is for the performance of the contract or taking requested pre-contractual steps.

The processing of personal data from the form only serves the purpose of processing the communication. If we are contacted by email, our legitimate interest justifies our data processing.

This data is deleted as soon as it is no longer required to fulfil the purpose of its collection. This is the case for personal data from the contact form and from email communication once the conversation with the user is over. The conversation is over when the circumstances show that the relevant situation has been resolved.

If you wish to contact us via email or via the contact form, they may object to the saving of their personal data at any time. However, the conversation will not be able to continue in this case. To object to the use of your data, please contact sales@mart24.co.uk . In this case, all personal data saved as part of the communication will be deleted.

Payment Data

We process your personal data for the purposes of dealing with payments made by you. We are entitled to do because it is necessary in order to perform the contract we have entered into with you.

Please see ANNEX 1 for further information regarding the payment systems we use.

 

Personal data shared with third parties

The personal data provided by you will be used to answer your questions, process your order in the AREBOS online shop and for technical website administration purposes. We will only use your datafor a credit check if your order is to be paid after receipt.

Your data will only be passed on, sold or otherwise transferred to third parties if this is necessary to complete the contract, for billing purposes, for collection of payment (shipping company or payment service provider) or if you have explicitly given your permission. Furthermore, we are permitted to forward your personal data for debt collection purposes.

The legal basis for the transfer of data to third parties for the purposes of order processing or billing is the performance of the contract with you, and/or for our compliance with a legal obligation to which we are subject.

Please see ANNEX 2 for information regarding social media services we use.

What security measures have we undertaken to protect your personal data?

We have taken a number of security measures to reasonably and sufficiently protect personal data.

Our databases are protected by physical and technical measures as well as procedural measures that limit access to information to specifically authorised persons in accordance with this data protection policy. Our information system is located behind a dedicated hardware firewall to prevent access from other networks connected to the internet. Only employees who need the information to fulfil a special task will be granted access to personal information. Our employees are trained in security and dataprotection practices.

When collecting and transferring data via our website, we use standardised SSL encryption technology. Personal data is transferred within the order process via an SSL encryption, which can be identified by the lock symbol in the browser and the ‘https://’ prefix in the URL bar.

You should never give out your password to access our website to third parties, and you should change your password regularly. You should not use the same password for our website as you use to access other password-protected websites (email address, online banking etc). When you leave our website, you should log out of your user account and close your browser to avoid unauthorised access to your user account.

When communicating by email, complete data protection cannot be guaranteed.

Cookies and pixels

When using our website, a cookie and tracking pixel are saved to your computer. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard drive. Cookies can only be read by the server that filed them, and they are used to collect information about when you viewed what on a website. Cookies only identify the computer’s IP address and do not save any personal information such as your name. The data saved in the cookies is not linked with your personal data.

Our cookie policy is set out in more detail in ANNEX 3.

 

Marketing and Analytics

We use analysis and marketing software on our website. We use the following analytical tools for the statistical and analytical evaluation of certain data:

- Google AdSense

The relevant data is hereby collected in a pseudonymised form and only used for statistical purposes. The data collected by this analytical software will not be merged or linked to create user profiles. The legal basis for the use of the following services is our legitimate interests. We have a legitimate interest in the collection and evaluation of statistical data as this is necessary to keep the products and services on our website available to our customers and constantly improve our offerings. You can find out how you can object to the evaluation of your data in the relevant service’s data protection policy.

We also make use of retargeting and remarketing techniques on our website. Please also note what we say with respect to Google Adwords Conversion Tracking, advertising by email and newsletter tracking.

Further information is contained in ANNEX 4.

We may also send you push notifications to make you aware of our latest products.

We use Zapier in connection with the transfer of data between databases and applications on our website.

Further information is contained in ANNEX 5.

 

Date Subject Rights

If personal data about you is processed, you are the data subject and you have the following rights in relation to AREBOS as the controller of your data:

Information, correction, limitation of processing and deletion

You have the right to receive information free of charge about personal data saved about you at any time, including its origin, recipient and purpose of data processing. You also have the right to correct, delete or limit the processing of your personal data as long as the statutory conditions are met.

Right to data transferability

You have the right to receive personal data concerning you that you submitted to AREBOS in a standard, structured and machine-readable format. We can fulfil this obligation by providing a CSV export of processed data concerning you.

Right to information

If you exercise your right to information, deletion or limitation of processing against us, we shall be obliged to notify all recipients that receive any personal data concerning you of your request for information, deletion or the limitation of processing, unless this is impossible or would require disproportionate effort. You have the right to be informed by us of the identity of these recipients.

Right to object

You have the right to object to the processing of personal data concerning you on the basis of our legitimate interests on grounds arising from your specific situation at any time; this also applies to profiling supported by these conditions. We shall then cease processing personal data concerning you, unless it can provide grounds for the processing that are worthy of protection and that outweigh your interests, rights and freedoms, or if such processing is required to exercise, enforce or defend legal claims.

If personal data concerning you is processed in order to send direct advertising to you, you have the right to object to the processing of personal data concerning you for the purposes of such advertising; this also applies to processing related to such direct advertising. If you object to data processing for the purposes of direct advertising, your personal data will no longer be processed for these purposes.

Revocability of data protection consents

You can revoke any consents and permissions granted with effect for the future by contacting us using the contact details below.

Automated individual decision making including profiling

You have the right to not be subjected to decisions solely based on automated processing - including profiling - that may have legal consequences or put you at a considerable disadvantage in any similar way. This does not apply if the decision

1. is required for the commencement or fulfilment of a contract between you and the controller,
2. is permitted under UK data protection legislation which contains measures to uphold your rights and freedoms as well as your legitimate interests or
3. is made with your express permission.

In any case, our decisions may not be based on “special categories” of personal data if reasonable measures to protect your rights and freedoms as well as your legitimate interests have been implemented.

In all instances, we shall take such reasonable measures to uphold your rights, freedoms and legitimate interests.

Right to complain to the supervisory authority

You have the right to complain to the data protection supervisory authority in the UK if you believe that the processing of your personal data breaches UK data protection legislation. The supervisory authority (which is the UK data protection regulator) is the Information Commissioner’s Office (“ICO”) (https://ico.org.uk).

Right to object

If your personal data is processed in accordance with our legitimate interests, you have the right to object to the processing of your personal data provided there are reasons for this arising from your particular situation. Following your objection, we will no longer process your personal data, unless we can establish compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of you as the data subject, or if the processing is for the purpose of enforcing, pursuing or defending legal claims.

If you need to exercise any of your rights as set out above, just send an e-mail to sales@mart24.co.uk .

Changes to this Data Protection Policy

We reserve the right to change our Data Protection Policy as required without any prior notice. Please therefore regularly check this page for any changes.

This Data Protection Policy was last updated on 27.01.2022.

ANNEX 1 - PAYMENT DATA

Payment via Klarna Bank

In order to be able to offer you Klarna’s payment options, we will pass to Klarna AB, Sveavägen 46, SE-111, 34 Stockholm, Sweden (“Klarna”) certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna may be found here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarnas privacy statement.

ANNEX 2 - SOCIAL MEDIA

On our website, we link to the social media platforms Facebook, Instagram, Pinterest, Google+, YouTube and Twitter. This is done using a symbol on our website, which is labelled with the logo of the relevant social media platform and which includes a link to the relevant social media service. Social plugins (such as the Facebook ‘like’ button) are not included.

When we link to social media services, no data about you is sent to these services. These are normal hyperlinks, which are not generally used to transfer data. When you click on the link, you will be forwarded directly to our page on the relevant social media network. Data is only transferred if you are logged into your user account on the relevant social media service. You can then directly link or share content from our website with the social media service, or in the case of YouTube, view the videos on our YouTube channel. The relevant social media service will then find out what content you viewed on our website.

The following are exclusively responsible for the social media services linked to by us:

• for Facebook and its online presence, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;

• for Instagram and its online presence, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;

• for Pinterest and its online presence, Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA;

• for Google+ and its online presence, Google Inc., 1600 Amphitheatre Park-way, Mountain View, CA 94043, USA;

• for YouTube and its online presence, YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;

• for Twitter and its online presence, Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA.

• for the WhatsApp Sharing Button, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

You can find more information about the purpose and scope of data collection and further processing and use of your data by the relevant social media service in the relevant service’s data protection policy. These can be found online here:

• Facebook: https://www.facebook.com/about/privacy/

• Instagram: https://www.instagram.com/about/legal/privacy/

• Pinterest: https://about.pinterest.com/de/privacy-policy

• Google+ und YouTube: https://www.google.de/intl/de/policies/privacy/

• Twitter: https://twitter.com/privacy

You can use these links to find information about settings options to protect your privacy and about your further rights concerning the collection, processing and use of your data by the relevant social network.

You are responsible for data transfer to these social network services, as you are active in logging into your account with the relevant social network and clicking on the link, initiating data processing by the relevant social network.

ANNEX 3 - COOKIES

We use cookies to make our website more user friendly. Some elements of our website require that the user’s browser is still recognised after moving from one page to another. The following data is saved and transferred in the cookies:

1. Language settings
2. Items in the cart
3. Log-in information
4. User's session ID
5. Recently viewed categories and products
6. Wishlists
7. Compared products

We also use cookies on our website that allow the analysis of user behaviour. The following data may be transferred in this way:

1. IP adress
2. Search terms used
3. Use of website functions

Data collected about the user in this manner is pseudonymised by technical processes. This means that it is no longer possible to link the data to a specific user. The data is not saved with any other personal data relating to the user.

You can decide whether to allow cookies or not. You can change your browser settings (mostly under ‘settings’ or ‘options’ in the browser menu), so you can choose whether to accept all cookies, reject all cookies or be informed each time a cookie is saved.

The legal basis for the processing of personal data using technologically necessary cookies is our legitimate interests.

The purpose of using technologically necessary cookies is to simplify website use for the user. Some features of our website cannot be provided without the use of cookies. These require that the browseris recognised even after the user moves from one page to another.

User data collected by technologically necessary cookies is not used to create user profiles.

The use of analytical cookies is intended to improve the quality of our website and its content. Analytical cookies tell us how our website is used so we can constantly optimise our offerings. For this purpose, our legitimate interests apply.

Cookies are saved to the user’s computer and transferred to our site from there. This means that you as a user have full control over the use of cookies. You can disable or limit the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. You can even automate this process. If cookies are disabled for our website, it is possible that several of the website features cannot be used in full.

Some of our services also use tracking bugs or tracking pixels. These are code snippets mostly measuring just 1x1 pixel that can identify and recognise your browser type via the browser ID - your browser’s unique fingerprint. This allows the service provider to see when and how many users viewed the pixel, i.e. whether and when an email was opened or a site was visited.

To prevent web bugs on our website, you can use tools such as webwasher, bugnosys or AdBlock. To prevent web bugs in our newsletter, please set up your email programme to hide HTML in messages. Web bugs are also prevented when you read your emails offline. Without your express permission, we will not use web bugs to collect personal data about you without your knowledge or transfer such data to third parties or marketing platforms.

ANNEX 4 - MARKETING AND ANALYSIS

Google Analytics

On our website, we use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, text files that are saved to your computer to facilitate the analysis of your website use. The information about your use of this website collected by cookies is generally transmitted to a Google server in the USA and saved there. If IP anonymisation is activated on this website, your IP address will be shortened by Google before leaving the European Union or the European Economic Area. In exceptional cases, the full IP address may be sent to a Google server in the USA and shortened there. Google will use this information to evaluate your use of the website, create reports on website activity and provide other services related to website use and internet use on behalf of the website operator. The IP address transferred from your browser as part of Google Analytics activity will not be combined with any of Google’s other data. You can prevent the saving of cookies by using the relevant settings in your browser software; however, we should inform you that you may not be able to use all of this website’s features in full if you do so.

Right to Objection

You can also prevent Google from receiving data about your website use (including your IP address) collected by the cookie, and from processing your data, by downloading and installing the browser plug-in available here: (https://tools.google.com/dlpage/gaoptout?hl=en-GB).

Alternatively, you can prevent data collection by Google Analytics by installing a browser plug-in to internet-capable mobile end devices by clicking the following link:

Deactivate Google Analytics

By doing so, an opt-out cookie is saved to your device that prevents future collection of your data by Google Analytics when you visit our website.

Please note that if you delete cookies in your browser settings, this can result in the Google Analytics opt-out cookie being deleted so you will have to reactivate it.

You can find more information about how Google Analytics works and the relevant terms of use and data protection provisions here: https://www.google.com/analytics/terms/gb.html or here: https://policies.google.com/privacy?hl=en-GB&gl=de. We must also inform you that our website uses Google Analytics with the anonymizeIP extension so IP addresses are only used in a shortened form to avoid the possibility of personal identification.

Bing Ads

This website uses the remarketing technology "Bing Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft saves a cookie on your computer ("conversion cookie") if you have reached our website via a Microsoft Bing ad. Microsoft and Bing Ads customers can recognise that the ad has been clicked, and the browser redirected to our site. In this way, these can be used for targeted product recommendations and interest-based advertising on Microsoft and other "Bing Ads" sites.

The information gathered using the conversion cookie is also used to generate conversion statistics. We are learning the total number of users who clicked on a Microsoft Bing ad and were thus redirected to our site. In addition, further anonymous data (e.g., the number of page views and the time spent on the websites) is collected. We do not receive any information that personally identifies users.

Rights

You may decline to receive interest-based advertising from Microsoft by visiting the appropriate opt-out page of Mircosoft: http://choice.microsoft.com/en-US/opt-out. You can also prevent the collection of data by Bing Ads by deactivating or restricting the transmission of cookies in the settings of your Internet browser. For more information about Microsoft's privacy practices and the cookies Microsoft uses, see the Microsoft Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement.

Retargeting and remarketing technologies on our website

We use retargeting and remarketing technology on our website. This is a tracking process in onlinemarketing, where the visitors to a website are marked and then shown targeted advertising on other websites. We use this technology to make our services more attractive and to inform and remind you of current offers that you already viewed in our online shop. The following retargeting and/or remarketing technologies are used:

- Google DoubleClick Remarketing Pixel
- Google AdWords Remarketing
- Criteo
- Facebook Remarketing
- Google AdWords Conversion Tracking
- OptinMonster

From a technical perspective, either an additional cookie will be saved to your computer or browser or an existing cookie will be used, depending on the retargeting service, to anonymously identify you, your computer or your browser as an internet user using the cookie ID and log your surfing behaviour, especially which pages you visit on our website. The cookie can then be read and evaluated by the targeting providers with which we cooperate (see below). This results in you being shown our products or recommendations for similar products by third parties on other websites e.g. as personalised advertising banners.

Within the DoubleClick Remarketing Pixel and Facebook Remarketing, web bugs fulfil a similar function to cookies. Web bugs send your IP address, the URL, the time that the web bug was seen, your browser type, and the previously set cookie information to a web server.

The data collected about your surfing behaviour by cookies or web bugs cannot be used to personally identify you as a user of our website. We only use the data to improve our services and to evaluate user behaviour on our website (e.g. reactions to promotions); no further use or transfer to third parties takes place. This data is anonymous and not connected to personal data on your computer or linked to a database.

All of the following services are used for marketing and advertising purposes with the aim of making our products and services more attractive and offering you a pleasant shopping experience. As described for the individual services, we take your right to data protection seriously so you can object to all services and we will inform you of these data protection options in advance. The legal basis for the above data processing is our legitimate interests.

Google DoubleClick Remarketing Pixels and Google AdWords Remarketing or “Similar Audiences”

We use DoubleClick remarketing pixels and Google AdWords remarketing or “similar audiences” on our website, both of which are services provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). These let us show you advertising related to our onlineshop, e.g. interesting product offers, on other operators’ websites that also use these Google services (“partners” in the Google Display Network). Furthermore, we can use Google AdWords remarketing to remind you via a message on the websites of other providers in the Google Display Network to complete your order if you recently abandoned an order in our online shop. This involves the use of cookie technology.

To this end, Google saves a small file with a string of numbers (cookie ID) to your browser to mark you as a visitor to our website, and collect further anonymous data about the use of our website. We save the cookie ID, and it allows us to uniquely identify your browser but not you as a person. Your personal data is never collected or saved using these services.

We also use Google remarketing across a range of devices. This means that if you start your purchase in our online shop on your smartphone but complete it on your laptop, we can target you with personalised advertising messages on the other device you used. This will only happen if you have given Google your consent that your web and app browser history can be linked by Google to your Google account and information from your Google account can be used to personalise adverts that you see online. In this case, Google uses the data of this logged-in user together with Google Analytics data to create and define user group lists for cross-device target group lists. To support this function, Google Analytics creates Google-authenticated IDs for these users. This data from Google is temporarily linked with our Google Analytics data to create our target groups.

Please check the privacy settings in your Google account to prevent Google from linking your web and app browser history with your Google account.

In order to be able to remind you of a cancelled order in our online shop via a message, no personal information is sent to Google, just the fact that you began placing an order in our online shop using the collected cookie ID and did not complete the order, as well as the total price of the intended order (“shopping cart transfer”).

You can find more information about Google’s remarketing services, the details of data processing via these services and Google’s relevant data protection provisions here: https://policies.google.com/technologies/ads?hl=en-GB

You can permanently disable the use of cookies by Google by clicking on the following link and downloading then installing the browser plug-in available there (https://www.google.com/settings/ads/plugin) or clicking on the relevant objection link further down in this section and following the further instructions you are given. Using Google’s ad settings, you can decide for yourself which ads you see and disable interest based ads.

Facebook Remarketing

For retargeting/remarketing purposes, we also use “Custom Audiences” on our website, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). We can use this service to target you with advertising because Facebook Ads are activated for the users of our website when they visit the Facebook social network.

To this end, we have implemented Facebook remarketing pixels on our website. When visiting our website, the pixel creates a direct connection to Facebook’s servers. Facebook is able to identify you using your browser ID because this is linked to other data saved about you in your user account. Facebook then displays our advertisements tailored to suit you in your Facebook timeline or another location within Facebook.

We are not able to personally identify you using the Facebook pixel because, apart from your browserID, no further personal data is saved by us via the Facebook remarketing pixel.

You can find out more about Facebook’s Custom Audiences, the details of data processing via this service and Facebook’s relevant data protection provisions here: https://www.facebook.com/about/privacy/.

You can deactivate the use of Facebook Remarketing by clicking this link and thereby setting an opt-out cookie. This prevents any further data collection through Facebook remarketing on our pages.

You have the option to opt out of publishing your Facebook username at any time. Please use the contact options listed above. The personal data collected by us will be stored until the abovementioned purposes are abolished and then deleted, unless we rely on justification pursuant to your consent, or for the purposes of performance of a contract with you or we rely on our legitimate interests.

Right to Objection

If you do not want to be shown advertising generated by the relevant targeting service, you can object to the use of retargeting technology on our website by contacting the relevant targeting service. The relevant links to the websites for targeting services used by us are as follows:

• Google DoubleClick remarketing pixels and Google AdWords remarketing or “similar audiences”

• Criteo

• Facebook Remarketing

You can find details about data processing by the relevant targeting services in the service’s data protection provisions as we have listed for you above. By clicking the link, you will find out how you can object to the use of targeting services on your computer.

Google AdWords Conversion Tracking

We also use Google AdWords conversion tracking functions, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). If you click on an ad displayed by Google AdWords, a conversion tracking cookie will be saved to your computer. This cookie is valid for 30 days and does not contain any personal data, meaning that we cannot identify you personally.

Using conversion tracking, we and Google will know which AdWords ad you clicked and whether you were forwarded to our website, as long as you visit our website and the cookie is still valid. We receive our own cookie from Google that is different from the cookies of other customers using this Google service, so that we can measure the reach of just our cookie and not all websites of customers using the Google AdWords service. The cookie lets us establish our own conversion statistics via customers that visited our website via AdWords ads.

To object to participate in Google AdWords conversion tracking, you must disable the saving of Google tracking cookies by using the relevant settings in your browser. You will then no longer be included in our conversion tracking statistics.

You can find more information about Google’s AdWords conversion tracking, the details of dataprocessing via these services and Google’s relevant data protection provisions here: http://www.google.com/policies/technologies/ads/

Right of Withdrawal

The user can cancel their newsletter subscription at any time. A link is provided in each newsletter.

ANNEX 5 - PUSH NOTIFICATIONS AND DATABASE LINKS

With your prior permission, we may send you push messages or notifications via your browser, even when you are not logged into our website. We use push notifications to inform you of our offers and interesting products. The first time you visit our website, you can consent to receiving push notifications. You can prevent the future display of push notifications at any time by using the relevant settings in your browser. The legal basis for the sending of push notifications is your consent.

KLARNA

“In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.”