Data protection

1. Website privacy policy

Thank you for your interest in our website. We are committed to protecting your privacy. Our website is designed accordingly and allows you to decide which of your personal data we receive and the purposes for which we can process or use it. We comply with current data protection regulations, especially the German Data Protection Act (BDSG) and EU General Data Protection Regulation (GDPR). This privacy policy informs you about the nature, scope and purpose of the collection and use of your data and how you can exercise your data-related rights. You can access the privacy policy at any time by clicking the link at the bottom of any page.

Controller

Schüller Möbelwerk KG
Rother Straße 1
91567 Herrieden

Germany

Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer

Tel +49 (0) 98 25 83-0
Fax +49 (0) 98 25 83-121

info@next125.com

Open access to the
Website; restricted area

You can visit the public areas of our website at any time without disclosing or saving any personal data.

Certain areas such as the “Retailer area” are only intended for authorised persons and can only be accessed with appropriate personal login details. The logins are saved. As the usernames are linked to specific people, they are classed as personal data. However, extranet use is evaluated on a personal level only to identify accounts that are inactive for an extended period and to deactivate them for security reasons. The use of various areas of the extranet is also statistically evaluated, for example to identify training requirements.

As a team administrator, you are able to create and manage individual login details for your employees. In doing so, you provide us with the following data: name, department, telephone number, e-mail address. It is your responsibility to create a suitable legal basis for sharing your employees’ data with us (e.g. consent). If no such legal basis is confirmed, the data will be deleted after 14 days.

We use this data solely to send information about products and support services available from retail partners.

The legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR. We will store the personal data in line with legal retention periods and then delete it.

Newsletter

If you wish to receive the newsletter offered on the website, we will collect your name, your e-mail address and other information which enables us to verify that you are the owner of the e-mail address provided and agree to receive the newsletter. Any further data is collected on an exclusively voluntary basis. We will use this data solely to send the requested information and will not share it with third parties.

The data entered in the newsletter registration form will be processed solely on the basis of your consent (Article 6(1)(a) of the GDPR). You can revoke your consent for the data and e-mail address to be stored and used to send the newsletter at any time, for example using the “unsubscribe” link in the newsletter. The revocation shall not affect the lawfulness of the data processing activities that have already been performed.

The data that you provide us with in relation to the newsletter will be saved until you unsubscribe from the newsletter and will subsequently be blocked. Upon expiration of the three-year statutory retention period (regular statutory limitation period), this data will be deleted. Data that we save for other purposes shall remain unaffected.  

We regularly send our newsletter to members of the retailer area using the e-mail address provided during registration. The legal basis for this processing is our legitimate interest according to Article 6(1)(f) of the GDPR. You can withdraw your agreement to receive our newsletter at any time, without incurring any costs other than the transmission costs in accordance with the basic tariffs.

Newsletters are sent by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede. CleverReach is a service that enables newsletters to be scheduled and analysed. Data used for the purposes of the newsletter (e.g. e-mail address) is saved on the CleverReach servers in Germany or Ireland. We have entered into a processing agreement with CleverReach.

Newsletters sent by CleverReach enable us to analyse the behaviour of the newsletter recipients. For example, we are able to analyse how many recipients have opened the newsletter and how often each link in the newsletter has been clicked on. Using conversion tracking, it is also possible to analyse whether a pre-defined action (e.g. purchasing a product on our website) has been carried out after clicking on the link. You can see further information on data analysis via the CleverReach newsletter at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.   

If you do not wish your data to be analysed by CleverReach you have the right to object to receiving the newsletter. Every newsletter message contains a link to enable you to unsubscribe. 
The data that you provide us with in relation to the newsletter will be saved until you unsubscribe from the newsletter and will be subsequently deleted from our servers and the CleverReach servers. Data that we save for other purposes shall remain unaffected.   

You can find out more about the CleverReach data protection clauses at: https://www.cleverreach.com/de/datenschutz/

Collection, processing
and use of (personal) data

To continuously improve the quality of the website, we store data about access to various pages, visit duration, click rates and other data that is usage-related but not necessarily technical. We perform statistical analyses of this information to make using our website more enjoyable for all users. The data is neither used to create a user profile nor shared with third parties. To make our marketing measures even more targeted, we also analyse demographic data, information about media effectiveness and our visitors’ browsing behaviour. This enables us to improve the way we address our customers and target our marketing activities more effectively. The legal basis for processing this data is Article 6(1)(f) of the GDPR. Our legitimate interests are constituted by the operation and optimisation of the website as well as our marketing measures.

Further personal data will only be stored and used if you actively and voluntarily provide it to us, e.g. by completing certain fields in a contact form. We primarily use your personal data to process orders, deal with enquiries and provide you with access to information or services. Examples include sending you our catalogue and putting you in contact with a specialist retailer near you. The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the GDPR, which you provide by using the contact form or other communication channels.

Cookies

Our website sometimes uses cookies on various pages. Cookies are small text files that are placed on your computer and stored by your browser. The cookies we use are known as session cookies and are automatically deleted when you close your browser. We also use some persistent cookies, which are deleted according to their expiry date rather than when you close your browser. We use persistent cookies solely to analyse user behaviour and visitor volumes on our website. Cookies do not contain viruses or damage your computer. In addition to our own cookies, our analysis partners also use session and persistent cookies.

The legal basis for the use of session cookies is Article 6(1)(f) of the GDPR. Operating the website constitutes our legitimate interest. You can determine how cookies are used on your browser, and have the option to reject them or configure your browser so that they are deleted on a regular basis. You can find out more about this on the internet.

Below is a list of all the cookies we use:

Cookie setting

Use of Google Analytics

This website uses Google Analytics, a website analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies – text files that are stored on your computer and allow your use of the website to be analysed. Due to the activation of IP anonymisation on these web pages, however, your IP address will first be truncated by Google within European Union Member States or other states party to the Agreement on the European Economic Area. You can find more information on how Google uses this data at:  https://policies.google.com/technologies/partner-sites?hl=en

Google Analytics is only used if you consent to the use of cookies. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. You can withdraw your consent at any time by clicking “Cookie settings” under “Cookies” and saving new settings.

The data gathered using Google Analytics is passed on internally to our marketing department.

Recipients of personal data

Your data is not disclosed to third parties unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation to which we are subject in the case in question. According to Article (6)(1)(c) of the GDPR, the processing of personal data is permitted if it is necessary for compliance with a legal obligation to which the controller is subject. Categories of data recipients are: public entities in the event of a legal obligation and processors who process the data gathered online on our behalf. The following processors are involved:

CleverReach GmbH & Co. KG
iquer.net GmbH & Co. KGo

Digital Ocean

Use of fonts

Google Maps

This website uses the map service Google Maps by means of an API. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.  

In order to use the functions on Google Maps, it is necessary to save your IP address. As a rule, this information is transferred to a Google server in the USA and saved there. The provider of this website has no influence on this data transfer.  

Transfer of data to the USA is based on the standard clauses of the contract that we have entered into with Google.

The use of Google Maps is subject to your agreement. The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. 

You can find out more about how user data is handled in the Google privacy policy: 

https://policies.google.com/privacy.

Social media presence

To expand our reach, we have a presence on various social media platforms. If you visit our account on one of these platforms, the platform operators may also process your personal data.

Plug-ins

Our website uses plug-ins from Facebook (“Facebook plug-ins”) and Pinterest (“Pinterest plug-ins”). These services are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) and Pinterest Inc., 808 Brannan Street, San Francisco, CA, 91403, USA (“Pinterest”). An overview of Facebook plug-ins and what they look like can be obtained from: https://developers.facebook.com/docs/plugins

An overview of Pinterest plug-ins and what they look like can be obtained from: https://developers.pinterest.com/docs/getting-started/introduction/

If you access a page on our website that contains such a plug-in, your browser will establish a direct link to the servers of the respective provider. The content of the plug-in will be transferred directly to your browser by the provider and embedded in the page. When the plug-in is embedded, the provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not logged in. This information (including your IP address) is transferred directly from your browser to a server in the USA and saved there.

If you have logged in to the corresponding provider’s website, they can directly associate your visit to our website with your profile. If you engage with the plug-in, for example by clicking on the “Like” or “Pin it” button, this information is also directly transferred to the provider’s server and saved there. Furthermore, the information will be published on the social network in question and will be visible to your contacts and other users.

For information about the purpose and scope of the data collection, further processing and use by the providers as well as about your related rights and the settings you can use to protect your privacy, please see the privacy policies on Facebook: http://www.facebook.com/policy.php and Pinterest: https://policy.pinterest.com/de/privacy-policy.

Profiles

Facebook/Instagram profiles

We have Facebook and Instagram profiles. The provider of both profiles is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

We have entered into an agreement with Facebook on the shared responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing activities for which we and Facebook are responsible when you visit our Facebook fan page. Facebook Ireland assumes primary responsibility for the processing of Insights data pursuant to the GDPR.  You can view this agreement via the following link:    
https://www.facebook.com/legal/terms/page_controller_addendum   

You can customise your ad settings in your user account. To do this, simply click the following link and log in:   
https://www.facebook.com/settings?tab=ads   

For details, please see Facebook’s privacy policy:   
https://www.facebook.com/about/privacy/   

The legal basis for processing is Article 6(1)(f) of the GDPR. The target-group-oriented design of our posts constitutes our legitimate interest. Facebook provides us with aggregated data which cannot be linked to individuals.

Houzz
We have a Houzz profile from the operator Houzz Inc., Delaware, USA. Houzz’s privacy policy can be viewed at https://www.houzz.de/privacyPolicy.

YouTube
We use a YouTube channel from the operator Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

If you visit our YouTube channel, the operator will process your personal data such as your IP address and information about your end device, among other data. If you are logged in to your Google account, this data can be linked to it. 

To optimise our reach and improve our online services, we use the statistical data provided by Google on how the channel is used. This enables us to view the following data in particular: 

Number of times our videos are viewed 

Number of subscribers to our channel 

Access source 

End device information 

Demographic data 

Categories of other videos viewed by people who access our videos 

We have no influence over the production of these statistics. 

For more information on data processing and retention periods by and at Google, please visit: 

https://policies.google.com/privacy 

We shall also sometimes process your personal data in order to respond to enquiries or for other communications via our channel. 

The legal basis for the processing is your consent, which you give us by visiting our channel and writing a comment or initiating other communication with us (Article 6 (1)(a) of the GDPR). 

Pinterest
We use a Pinterest account from the operator Pinterest Inc., 808 Brannan Street, San Francisco, CA, 91403, USA (“Pinterest”).

For information about the purpose and scope of the data collection, further processing and use by Pinterest as well as about your related rights and the settings you can use to protect your privacy, please see Pinterest’s privacy policy at https://policy.pinterest.com/en/privacy-policy. 

Gewinnspiel über Instagram

Wir veranstalten zwischen dem 09.07.2023 und dem 16.07.2023 ein Gewinnspiel auf Instagram. Wenn Sie an dem Gewinnspiel teilnehmen, verarbeiten wir im Falle eines Gewinnes Ihre personenbezogenen Daten zum Zweck der Gewinnausschüttung. Konkret verarbeiten wir Ihren Namen und Ihre E-Mailadresse, die Sie uns per Direktnachricht mitteilen. Rechtsgrundlage für die Verarbeitung ist Ihre Einwilligung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO. Das Zusenden Ihrer Daten stellt Ihre Einwilligung in die oben beschriebene Datenverarbeitung dar.

Wir speichern Ihre personenbezogenen Daten für den Zeitraum, der notwendig ist, um die in dieser Erklärung beschriebenen Zwecke zu erfüllen. Ihre Daten werden anschließend gelöscht.

2. Data Protection Statement – Direct Shipping of Product Samples, Items or Other Information

If your furniture store or kitchen studio has provided us with information about you so that we can send you product samples, products or information, the following applies: we comply with current data protection regulations, especially the German Data Protection Act (BDSG), the German Telemedia Act (TMG) and EU General Data Protection Regulation (GDPR). This privacy policy informs you about the nature, scope and purpose of the collection and use of your data and how you can exercise your data-related rights. You can access the privacy policy at any time by clicking the link at the bottom of any page.

Processing-Specific Information

Name and contact details of the controller:

Schüller Möbelwerk KG

Rother Straße 1

91567 Herrieden

Germany

Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer

Tel +49 (0) 98 25 83-0

Fax +49 (0) 98 25 83-1210

datenschutz@schueller.de

Contact details of the Data Protection Officer:

David Gabel
Am Bügerl 1

92431 Neunburg v.W.

Germany

david.gabel(at)your-insider.com

Categories of personal data that is processed:

Name, address, dispatch reason, furniture store/kitchen studio/retail store

Source of the personal data:

Furniture store/kitchen studio/retail store as (potential) sellers of products procured via the controller

Purposes for which the personal data is to be processed:

Provision of product samples, products and information (by post)

The legal basis for the processing and – where processing is supported pursuant to Article 6 (1)(f) of the GDPR – the legitimate interests:

Articles 6(1)(b) and/or (f) of the GDPR for the performance of precontractual or contractual obligations due to a planned or completed purchase of products, in particular kitchens or kitchen elements manufactured by or procured via the controller.

Recipients or categories of recipients of the personal data:

Furniture store/kitchen studio/retail store, tax and financial authorities, if relevant for accounting purposes

Duration for which the personal data is stored:
We delete the data record created in the customer database for the purpose of performing the requested dispatch three months after the dispatch. We delete or destroy the content that must be stored within the scope of tax documentation obligations at the end of the 11th calendar year after the complaint services have been provided.

Necessity for Data Collection

The provision of personal data is neither legally nor contractually prescribed, but is necessary for the performance of the dispatch service. We are unable to directly dispatch items without this data.

3. General information

Your rights regarding the processing of your data

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”).

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified.

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent at any time, with future effect, informally and without specifying the reason.

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post.

Schüller Möbelwerk KG

Rother Straße 1

91567 Herrieden
Germany

Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer

datenschutz@schueller.de

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have any questions, you are welcome to contact our external Data Protection Officer:

David Gabel

E-mail: david.gabel(at)your-insider.com

General information on data protection and the processing of personal data in data protection processes can be found at
https://www.dsgvo-support.de

4. Privacy policy for facebook

We have an agreement with Facebook as joint controllers under Article 26 of the GDPR. You can access this agreement using this link.
This agreement sets out that Facebook shall fully assume all data-protection obligations related to the “Page Insights” function.

Name and address of the controllers:

The joint controllers of this Facebook page are:

a)

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

You can contact Facebook’s Data Protection Officer using the following form:

www.facebook.com/help/contact/540977946302970.

and

Schüller Möbelwerk KG
Rother Straße 1
91567 Herrieden

Germany

Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer

Tel +49 (0) 98 25 83-0
Fax +49 (0) 98 25 83-121

info@schueller.de

You can contact the external Data Protection Officer for Schüller Möbelwerk KG at:

E-mail: david.gabel@your-insider.com

Data categories, purpose and legal basis of the processing

For information on data processing by Facebook, please see its privacy policy at https://www.facebook.com/privacy/explanation.

Please see below for further information about our data processing activities.

Statistical data

We are able to access various categories of statistical data using the Facebook “Insights” function. (https://www.facebook.com/business/a/page/page-insights)

These statistics are produced and made available by Facebook. As a user of the site, we have no influence on the production and presentation of such statistics. We cannot turn off this function or prevent the production and processing of data. For a selected time period and for the categories fans, subscribers, people reached and people engaged, Facebook provides us with the following data

related to our Facebook page:

total number of pages accessed; “Like” information; page activities; engagement with posts; reach; video views; post reach; comments; shared content; replies; breakdown by gender; location based on country and city; language; calls to action and clicks in the shop; clicks on route planners; clicks on telephone numbers. This approach also provides data on the Facebook groups linked to our Facebook page.

Due to the ongoing development of Facebook, the availability and processing of data is constantly changing. For further details you should therefore consult the aforementioned Facebook privacy policy.

The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR. Our legitimate interest is to make the posts and activities on our Facebook page more attractive to users. For example, we use a breakdown by age and gender to adapt the way that we address users and the main times at which users visit the page to optimise the timing of our posts. Information on the type of end devices used by visitors helps us to adapt the visual design of our posts.

Engagement with our account

It is also possible for you to engage with our account. You can do this, for example, by liking, sharing or commenting on a post or by sending us a direct message.

When you engage with us we must, as a rule, process data as this enables us to see your account and therefore access your personal data such as your username, profile picture or the date and time of engagement. According to the Facebook Terms of Service, which every user agrees to when creating a Facebook profile, we can identify page subscribers and fans and see their profile and other information that they share.

This concerns data gathered for information purposes, which is only made available when you engage with our profile. The processing of personal data here is based on Article 6(1)(b) of the GDPR.

Data recipients

Please note that your data can be passed on to third parties by Facebook. We do not have any influence over this. For more detailed information on this, please see the Facebook privacy policy: www.facebook.com/privacy/explanation

We do not disclose your data unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation that we are subject to in the case in question. Categories of data recipients are: public entities in the event of a legal obligation; processors who process the data gathered online on our behalf; website hosts and designers; analysis service providers, etc.

Retention period and deletion

You can obtain information on data retention by Facebook from its privacy policy: www.facebook.com/privacy/explanation.

We save all personal data that you transfer to us only for as long as is necessary to fulfil the purpose for which the data was transferred or for the period set out by law. When the purpose has been fulfilled and/or the legal retention periods have ended, we delete or block the data.

Rights of the data subject

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”).

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified.

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent granted within the context of use of the website at any time with future effect, informally and without specifying the reason.

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post.

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If the complaint concerns data processing by Facebook, you can also contact Facebook directly. This is particularly the case if the processing is carried out within the scope of the “Page Insights” function. You can contact Facebook using the following form:

https://www.facebook.com/help/contact/2061665240770586.

You can also contact Facebook by post at the following address:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

Alternatively, you can of course contact us and we will pass on your request in accordance with our agreement with Facebook under Article 26 of the GDPR.

5. Privacy policy for pinterest

To adapt our internet content to different target groups, we have a profile on the platform Pinterest. Our profile is linked to our website by a plug-in. Via this link, we and Pinterest are able to track who has visited our website and our Pinterest profile. The plug-in on our website is only activated when the visitor gives their consent.

Name and address of the controllers:

The joint controllers of the Pinterest profile are:

a)

Pinterest Europe Ltd.
Palmerston House, 2nd Floor
Fenian Street
Dublin 2
Ireland

hereinafter referred to as the “Platform Operator”.

You can contact Pinterest via the following website: https://help.pinterest.com/data-protection-officer-contact-form

You can see the Pinterest privacy policy under the following link:

https://policy.pinterest.com/en/privacy-policy

Further questions on data protection are answered here: https://help.pinterest.com/de/topics/legal-and-privacy

b)
Schüller Möbelwerk KG
Rother Straße 1
91567 Herrieden

Germany

Managing Directors: Markus Schüller, Max Heller, Manfred Niederauer

Tel +49 (0) 98 25 83-0
Fax +49 (0) 98 25 83-121

info@schueller.de

You can contact our external Data Protection Officer at:

david.gabel@your-insider.com

Data categories, purpose and legal basis of the processing

a) When visiting the platform

When accessing the Platform Operator’s website, information is automatically sent to the Platform Operator’s server by the browser used on your end device or by the app. This information is temporarily saved by the Platform Operator in a log file. The following information is gathered without any action on your part and is saved until it is automatically deleted:

IP address of the requesting device
Date and time of access
Type of device that you are using
Name and URL of the file accessed
Website from which access is obtained (referrer URL)
Advertising ID generated by the device
Browser used and, if necessary, your computer operating system and the name of your access provider

This data is only available to the Platform Operator. We are unable to access it. You can obtain further information from the Platform Operator’s privacy policy above.

We do not gather any personal data from you in this case. However, it is possible to obtain pseudonymised data on the users of our website in the form of statistics over a specific period. The software used to analyse user statistics is generally provided by the Platform Operator, however, in some places software from third-party providers may also be embedded (e.g. Google Analytics). This means that data on the users of the site can be gathered such as their age, gender, country of origin, browser and interests.

However, this data is always pseudonymised and we are not able to make statements about individual users based on these data. We use this data only to optimise and market the contents that we offer and adapt them to user interests. This is a legitimate interest according to Article 6(1)(f) of the GDPR.

b) When engaging with our account

It is also possible for you to engage with our account. You can do this, for example, by liking, sharing or commenting on a post or by sending us a direct message.

When you engage with us we must, as a rule, process data as this enables us to see your account and therefore access your personal data such as your username, profile picture or the date and time of engagement.

We use this data only to optimise and market the contents that we offer and adapt them to user interests. This is a legitimate interest according to Article 6(1)(f) of the GDPR. Our legitimate interest results from the above-mentioned optimisation of the contents made available under our profile. Furthermore, this concerns data gathered for information purposes, which is only made available to us when you engage with our profile. In doing so, a relevant and appropriate relationship is formed between you and our profile.

If we are able to, we will delete personal data within 28 days, provided that there is no legal basis for further processing beyond that time.
You can obtain further information on data processing by the Platform Operator from their privacy policy above.

Data recipients

Please note that your data can be passed on to third parties by Pinterest. We do not have any influence over this. You can see more detailed information on this in the Pinterest Privacy Policy (see above).

We do not disclose your data unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) of the GDPR and in conjunction with the directive or legal obligation that we are subject to in the case in question. Categories of data recipients are: public entities in the event of a legal obligation; processors who process the data gathered online on our behalf; website hosts and designers; analysis service providers, etc.

Retention period and deletion

You can obtain information on data retention by Pinterest from its privacy policy (see above).

We save all personal data that you transfer to us only for as long as is necessary to fulfil the purpose for which the data was transferred or for the period set out by law. When the purpose has been fulfilled and/or the legal retention periods have ended, we delete or block the data.

Rights of the data subject

You have a number of rights that we would like to inform you about below with regard to the processing of personal data. You can see further details on your rights in Articles 15 to 21 of the GDPR and Articles 32 to 37 of the German Data Protection Act (“BDSG”). 

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified. 

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) of the GDPR and to any profiling according to Article 21 of the GDPR. You can withdraw your consent granted within the context of use of the website at any time with future effect, informally and without specifying the reason.  

You can assert all of the above rights under Articles 15 to 21 of the GDPR informally by e-mail or post. 

You are entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can find a list of Data Protection Officers and their contact details at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If the complaint concerns data processing by Pinterest, you can also contact Pinterest directly. This is particularly the case if the processing is carried out within the scope of customised advertising. You can contact Pinterest using the following form:

https://help.pinterest.com/data-protection-officer-contact-form

You can also contact Pinterest by post at the following address:

Pinterest Europe Ltd.
Palmerston House, 2nd Floor
Fenian Street
Dublin 2
Ireland

Alternatively, you can of course contact us and we will forward your query to Pinterest.