Privacy Policy

of About You SE & Co. KG, Domstraße 10, 20095 Hamburg (as of October 2024).

In the following Privacy Policy, we inform you about the processing of personal data carried out by About You SE & Co. KG, Domstraße 10, 20095 Hamburg ( „ABOUT YOU“ and/or „Controller“) in accordance with the German Data Protection Regulation ( „GDPR“) and the German Federal Data Protection Act ( "BDSG"). Our Privacy Policy applies to the following websites, applications and further services and performances (hereinafter jointly referred to as „Services“): en.aboutyou.de, ABOUT YOU App.

Please read our Privacy Policy carefully. If you have any questions or comments about our Privacy Policy, please contact us at [email protected] .

Content

You can easily jump directly to the section you are interested in by clicking on the respective chapter headings.

1. Name and Contact Details of the Controller

2. Contact Details of the Data Protection Officer

3. Purposes of the Data Processing, Legal Bases and Legitimate Interests pursued by the Controller or a Third Party, as well as Categories of Recipients

3.1. Acess to our Websites/Applications

3.1.1. Log-Files

3.1.2. Cookies and Tracking

3.2. Establishment, Execution and/or Termination of a Contract

3.2.1. Data Processing upon Conclusion of the Contract

3.2.2. Use of Data for Fraud Prevention Purposes

3.2.3. Transmission of Information to Transport/Shipping Partners

3.3. Data Processing for Advertising Purposes

3.3.1. Postal advertising

3.3.2. Newsletter

3.3.3. Product Recommendations by Email

3.3.4. News via WhatsApp

3.3.5. Competitions

3.4. Personal User Experience

3.4.1. Identification on Third Party Pages

3.4.2. Personalized Ads and Content

3.4.3. Market Research

3.4.4. Product Development

3.5. Performance

3.5.1. Fraud Detection and Security

3.5.2. Shopping Basket, Wish List and similar Functions

3.5.3. Basic Tracking for Error Monitoring in connection with the functioning of our CMP

3.6. Data Processing for success-based Settlement Purposes

3.7. Size Recommendations ("Perfect Fit")

3.8. Advertising (Retargeting)

3.9. Advantage and Voucher Offers

3.9.1. Advantage offers

3.9.2. Voucher Offers

3.10. Fanpages

3.11. Facebook Connect / Login

3.12. Login via Apple (“Log in with Apple”)

3.13. Customer Account / User Account

3.14. Contacting

3.15. Payment Methods

3.15.1. Paypal

3.15.2. Klarna Payment Methods

4. No Requirement to provide Data

5. Recipients of Personal Data

5.1. Transmission of Data to Third Parties

5.2. Transmission to Processors

6. Storage Period and Data Deletion

7. Recipients outside the EEA

8. Your Rights

8.1. Overview

8.2. Right of Objection

8.3. Right of Withdrawal

8.4. Fanpages

1. Name and Contact details of the Controller

This Privacy Policy applies to the data processing by the

About You SE & Co. KG,
Domstraße 10, 20095 Hamburg
Phone: 0800 / 30 15 085
Email: [email protected]

legally represented by: ABOUT YOU Verwaltungs SE, which in turn is represented by the Management Board members Tarek Müller, Hannes Wiese and Sebastian Betz. Chairman of the Supervisory Board: Sebastian Klauke

Website: en.aboutyou.de

for the following Services: en.aboutyou.de, ABOUT YOU App

2. Contact Details of the Data Protection Officer

You can contact the Data Protection Officer of the Controller at

About You SE & Co. KG
attn. Sebastian Herting - Datenschutzkanzlei
Domstraße 10
20095 Hamburg Germany

E-Mail: [email protected].

3. Purposes of the Data Processing, Legal Bases and Legitimate Interests pursued by the Controller or a Third Party, as well as Categories of Recipients

3.1. Access to our Websites/Applications

3.1.1. Log-Files

Each time Services are accessed, information is sent by the respective Internet browser of your respective end device to the server of our service and temporarily stored in Log-Files. The data records stored in the Log-Files contain the following data: Date and time of the request, name of the requested page, IP address of the requesting device, device type, cfRayId, referrer URL (origin URL from which you came to our Service), the amount of data transferred, loading time, product and version information of the browser used in each case, as well as the name of the provider of your Internet access. We process the Log-Files in order to be able to provide our Services reliably and securely.
Insofar as we process personal data (e.g. the IP address) in this context, the legal basis for this is Art. 6 (1) f) GDPR. Our legitimate interest results from the

• Ensure smooth connection establishment,
• Ensuring a comfortable use of our Services,
• Evaluation of system security and stability.

A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. The information is stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

Insofar as we use cookies or similar technologies in connection with the processing of Log-Files described above, this is absolutely necessary in order to provide the Services requested by you. We may use these cookies without your consent on the basis of Section 25 (2) No. 2 Telecommunications Digital Services Data Protection Act (“TDDDG”).

3.1.2. Cookies and Tracking

General Information

In our Services, we and our Partners use Cookies or similar technologies (together also referred to as„Cookies“). Cookies are small text files that can be stored on your end device (laptop, tablet, smartphone or similar) when you visit and/or use our Services. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the Cookie that is related to the specific end device used. This does not mean, however, that we can gain direct knowledge of your identity and/or draw conclusions about your person.

Some of the Cookies used are deleted again after the end of the browser session (so-called session Cookies). Such Cookies allow us, for example, to improve the security of our Services by preventing bot attacks.

Other Cookies remain on your terminal device and allow us to recognize your terminal device on your next visit (so-called persistent or session-spanning Cookies). These Cookies are used, for example, to show you ads and content in our Services that are tailored to you personally.

Consent to the Use of Cookies

We use most Cookies based on your consent. We ask you for this consent in our Consent Management Plattform ( „CMP“ and/or “Preference Center”). There, it is described as "store and/or retrieve information on your device". If you give your consent, this is the legal basis for the use of Cookies (Section 25 (1) TDDDG in conjunction with Article 6 (1) a) GDPR). We store the decision made by you in this respect as to whether you wish to give consent in order to be able to implement it accordingly. An exception to this consent requirement only applies to Cookies that are absolutely necessary for the provision of a Service expressly requested by you. We may use these Cookies without your consent on the basis of Section 25 (2) No. 2 TDDDG.

Consent to the Processing of your Data based on Cookies

In our CMP we also ask you - if necessary - for your consent to the processing of your data based on these Cookies. In doing so, we request consent not only for us, but also for the processing of such data by our Partner .

In our CMP you will find detailed information about the purposes for which we and our Partners would like to process your data based on your consent, as well as a list of our Partners with further information about the data processing they would like to carry out based on your consent. Partners with further information on the data processing they wish to carry out on the basis of your consent.

The decision you make in the CMP whether or to what extent you want to give consent to the processing of your data based on Cookies, we store it under a so-called Consent ID (e.g. d13b5c50-6x7a-4d7b-9962-3846c8abba), which you can also find at the end of ourPrivacy Policy to be able to implement it accordingly. This pseudonymous Consent ID is generated individually for you as a website user in order to provide legal proof of the settings you have made in our CMP and the consents given/extracted therein with details of the time (date, time). You can check the Consent ID at any time in our CMP under the section "Privacy Preference Center".

The legal basis for any data processing that takes place is Art. 6 (1) f) GDPR. We have a legitimate interest in processing your decision to grant consent, so that we do not have to ask you again each time you access our Services whether you wish to grant your consent.

If you have given your consent to the processing of your data, Art. 6 (1) a) GDPR is the legal basis for this data processing.

---

Reference to the Right of Withdrawal

You can revoke your consent(s) in whole or in part at any time with effect for the future by changing your settings in our CMP here and clicking on "Confirm My Choices" or by clicking on "Reject All". You can also always find our CMP at the bottom of the page under the link "Preference Center (Consent Management)". Your revocation does not change the legality of the data processing carried out on the basis of the consent(s) until revocation.

---

3.2. Establishment, Execution and/or Termination of a Contract

3.2.1. Data Processing upon Conclusion of the Contract

If you register with one of our Services and/or enter into another contract with us (e.g. buy a product from us), we process the data required for the establishment, performance and/or termination of the contract. This includes:

• Salutation
• First name, last name
• Invoice and delivery address
• Email address
• Billing and payment information
• Date of birth
• Phone number
• Information about orders placed
• Store settings

The legal basis for this is Art. 6 b) GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer/user account, processing of a purchase contract) between you and us. We are also obliged to process your email address in the event of a purchase via our websites/apps due to legal requirements in the German Civil Code ( „BGB“), to send an electronic order confirmation (Art. 6 para. 1 c) GDPR).

We store the data collected for the processing of the contract - unless we use it for our own marketing purposes - for the duration of the respective contract and until the expiry of the respective statutory or possible contractual warranty and guarantee rights and applicable limitation periods. After expiry of this period, we retain the information required by commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities. Further information on this can be found in Section 6. Legal basis for this further data processing is Art. 6 para. 1 c) GDPR as well as Art. 6 para. 1 f) GDPR. We have a legitimate interest in the assertion, exercise or defense of legal claims.

Furthermore, the following data processing is required for the execution of a purchase contract via our Services:

Payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on details of the delivery address to logistics and shipping partners commissioned by us so that the order can be delivered. To ensure that the goods are delivered according to your wishes, we may transmit your email address and, if necessary, the telephone number to the logistics and / or shipping partners contracted by us, which take over the delivery. If necessary, they will contact you in advance of the delivery to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purpose and will not be used for other purposes after delivery and will be deleted after expiration of existing commercial and tax retention obligations.

3.2.2. Use of Data for Fraud Prevention Purposes

The information you provide in the context of an order may be used to check whether an atypical order transaction has occurred (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis for this data processing is Art. 6 (1) f) GDPR.

3.2.3. Transmission of Data to Transport /Shipping Partners

For the purpose of delivery of ordered goods, we work together with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivery of the ordered goods or for the purpose of shipment notification: First name, last name, postal address and, if applicable, the email address and, if applicable, the telephone number. The legal basis for this data processing is Art. 6 para. 1 b) GDPR.

3.3. Data Processing for Advertising Purposes

3.3.1. Postal Advertising

In principle, we have a legitimate interest in using certain information for marketing purposes in order to be able to make you relevant offers. We process the following information for postal advertising for our own marketing purposes as well as for marketing purposes of third parties: first name, last name, postal address, year of birth.

We are also entitled to store further personal information collected about you in compliance with the legal requirements for our own marketing purposes and for the marketing purposes of third parties. The aim is to send you advertising that is geared solely to your actual or perceived needs/interests and accordingly not to bother you with advertising that is not relevant to you.

A transfer of the stored data to third parties does not take place. Furthermore, ABOUT YOU pseudonymizes / anonymizes personal data collected about you for the purpose of using the pseudonymized / anonymized data for its own marketing purposes as well as for marketing purposes of third parties (advertisers).

The legal basis for the processing of personal data for marketing purposes (postal advertising) is Art. 6 (1) f) GDPR. We and the third parties with whom we cooperate have a legitimate interest in sending you postal advertising (tailored to your needs/interests), insofar as this is in accordance with the legal requirements for direct advertising.

---

Reference to the Right of Objection
You can object to the use of your personal information for the aforementioned marketing purposes at any time free of charge with effect for the future at [email protected].

If you object, your data will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

---

3.3.2. Newsletter

As part of our Services, we offer you the opportunity to register for our newsletter. In order to be able to ensure that no mistakes have been made when entering the email address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the email address you provided. Only when you click on this confirmation link will your email address be added to our distribution list for sending our newsletter. The legal basis for this processing is Art. 6 (1) a) GDPR.

---

Reference to the Right of withdrawal
You can withdraw your consent at any time with effect for the future by sending a message to [email protected] or the unsubscribe option at the end of each newsletter.

---

3.3.3. Product Recommendations by Email

As an existing customer, you will regularly receive product recommendations from us via email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. Here, we use the email address provided by you in the context of the purchase to advertise our own goods and / or services that are similar to those that you have purchased from us based on an order already placed. The legal basis for this data processing is Art. 6 para. 1 f) GDPR. We have a legitimate interest in sending you product recommendations by email, insofar as this is in accordance with the legal requirements for direct advertising.

---

Reference to the Right of withdrawal
You can object to our product recommendations at any time free of charge with effect for the future by sending a message to [email protected] or at the end of each product recommendation email.

---

3.3.4. News via WhatsApp

You have the option to join our WhatsApp Community and receive News, Deals and Updates from ABOUT YOU via WhatsApp ( “WhatsApp Conversations”). WhatsApp is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp Ireland"). WhatsApp Ireland acts as a controller in terms of data protection law for the transmission of messages via WhatsApp and your responses. Further information on data processing by WhatsApp can be found here: WhatsApp Ireland privacy notice.

To send messages via WhatsApp, we process your telephone number and your WhatsApp profile name. The processing of your data is based on your consent, which you give us in the WhatsApp chat by clicking on "Let's go!" button or by entering the word "Let's go!". The legal basis for this processing is Art. 6 para. 1 a) GDPR. We are responsible for this processing in the sense of data protection law.

You also have the option of subscribing to personalized content by accessing our Services via WhatsApp (click on "Register here") and logging in there with your registration information (e.g., your e-mail address). In this case, we also use information about your completed or intended orders (order history) to send you personalized News, Deals and Updates. The information about your orders is linked to your WhatsApp ID, which we generate for customer assignment. This processing of your data is also based on your consent, which you give us by clicking on "Register here" and then logging in to ABOUT YOU. The legal basis for this processing is Art. 6 para. 1 a) GDPR. We are also responsible for this processing in the sense of data protection law.

We use the software solution of Charles GmbH, Gartenstr. 86-87, 10115 Berlin ("Charles") to offer and use WhatsApp Conversations. As a processor, Charles processes your data exclusively on our behalf and not for its own purposes.

---

Reference to the Right of withdrawal
You can revoke your consent(s) at any time with effect for the future by sending the message "STOP" in our WhatsApp chat.

---

3.3.5. Competitions

If you register/participate in competitions organized by ABOUT YOU (hereinafter referred to as “Participation”), we will use the data you provide when participating in the respective competitions for the purpose of executing the Participation agreement, in particular to notify you of the prize and, if applicable, to advertise our offers and/or offers of our competition partners. Detailed information can be found in the respective conditions of Participation for the respective competition. The legal basis for this data processing is Art. 6 para. 1 a) GDPR, Art. 6 para. 1 b) GDPR.

3.4. Personal User Experience

We and our Partners would like to offer you as personal a user experience as possible on our Services. In our CMP we therefore ask you for your consent for the processing purposes described in the following Sections 3.4.1 to 3.4.4. The legal basis for the data processing described in these sections is Art. 6 (1) a) GDPR.

In addition, we process your data in order to be able to provide our Services securely and reliably and in the form requested by you. You can find more information on this in Section 3.5.1. The legal basis for the data processing described there is Art. 6 (1) f) GDPR. We have a legitimate interest in offering our Services securely and reliably, as well as providing Services that you expressly request (e.g. our basket-function).

3.4.1. Identification on Third Party Pages

For certain Services, we need to be able to assign users on our own or on third party pages, e.g. to be able to show you ads for our products on third party pages. For this purpose, we or our Partners assign a pseudonymous ID. In addition, we and our Partners can assign you on third party pages with the help of your pseudonymous email address or telephone number.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.4.2. Personalized Ads and Content

In order to provide you with the full ABOUT YOU experience, we and our Partners use certain information (e.g., browser information, click path, date and time of visit, geographic location, IP address, usage data, websites visited) with your consent to present you with ads and content tailored to you in our online store and on third party pages, which may be based on your preferences or recently viewed products, for example.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.4.3. Market Research

With your consent, we and our Partners use certain information about interactions with content and ads in our online store and on third party pages to better understand how they are received by our users. To do this, we combine data sets (such as user profiles, statistics, market research and analytics data) that provide information about how you and other users interact with content and ads. This information allows us to identify common characteristics, such as which content is relevant to which audiences.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.4.4. Product Development

We and our Partners use information about your activities in our online shop and on third party pages (e.g., your interaction with ads or content) with your consent because it helps us improve our products and Services and develop new products and Services based on user interactions, audience type, etc. This purpose does not include developing or improving user profiles and identifiers. This purpose does not include the development or improvement of user profiles and identifiers.

You can find out which information we or the respective Partners would like to use on the basis of your consent in the Partner list.

The legal basis for the data processing is Art. 6 para. 1 a) GDPR.

3.5. Performance

3.5.1. Fraud Detection and Security

We need certain information to provide our online shop safely and reliably. To do this, we monitor and prevent unusual and potentially fraudulent activity (e.g., advertising, ad clicks by bots) and ensure that systems and processes are working properly and securely. The information may also be used to troubleshoot problems you or we have in providing or interacting with content and ads. In addition, we need certain information to provide you with our online shop in the form you requested, for example, we remember which products you have added to your shopping cart or wish list.

You can find out which information we or the respective Partners use for these purposes in the Partner list.

The legal basis for data processing is Art. 6 (1) (f) GDPR. We have a legitimate interest in offering our Services securely and reliably as well as providing Services that you expressly request (e.g. our shopping cart function).

3.5.2. Shopping Basket, Wish List and similar Functions

In addition, we need certain information to provide you with functions in our online shop such as shopping basket, wish list and similar functions requested by you. For example, we remember which products you have placed in your shopping basket or added to your wish list.

You can see which information we or the respective partners use for these purposes in the Partner list.

The legal basis for data processing is Art. 6 (1) (f) GDPR. We have a legitimate interest in providing functions that you have expressly requested (e.g. our shopping basket function).

3.5.3. Basic Tracking for Error Monitoring in connection with the functioning of our CMP

ABOUT YOU has developed its own web tracking technology („Basic Tracking“) in order to be able to collect and process data that is absolutely necessary for the provision of our services. The aim of this in-house development was the best possible implementation of data protection through technology design (‘Privacy by Design’). With basic tracking, technical means are used to ensure that data cannot be traced back to you personally.

As part of the Basic Tracking for error monitoring in connection with the functioning of our CMP, we collect your browser and device information, behavioral data, technical usage data and consent preferences, which enable us to identify or count the users’ interactions with our CMP as a whole (and not on an individual level) and thus draw conclusions about the functioning of our CMP. For this reason, we process the data collected for error monitoring exclusively in pseudonymized form after it has been collected by taking appropriate technical measures, i.e. it is not possible to assign it directly to you without using separately stored information. Furthermore, we delete the data after two years at the latest. The legal basis for the data processing described in thus section is our legitimate interest in accordance with Art. 6 (1) (f) GDPR to continuously check the functionality of our CMP and to ensure that user preferences are recorded in accordance with the legal requirements.

Further information on the types of data processed in connection with basic tracking can be found in our CMP under the purpose ‘Performance’.

3.6. Data Processing for success-based Settlement Purposes

We market advertising space on our Services to advertisers whose products you can purchase on our Services that are directly related to your shopping experience on ABOUT YOU or whose products may also be of interest to you. This advertising Service is billed on the basis of so-called impressions (i.e. information on how often the advertisement was seen) and on the basis of interaction with the advertisement (i.e. information on how often the advertisement was clicked on, for example). Therefore, we collect this information in order to be able to bill our performance on a success-based basis. In addition, the information is processed to detect any errors in connection with the billing as well as to prevent them in the future (so-called debugging).

Data that we process in this context does not allow any conclusions to be drawn about our users. Only with your consent do we process the data in order to be able to offer you a user experience that is as personal as possible (see section 3.4), specifically for the following purposes: Personalized Ads and Content (section 3.4.2), Market Research (section 3.4.3) and Product Development (section 3.4.4). If you give us your consent for this, we will establish a personal reference in order to be able to process the data for the purposes you have selected. Detailed information on this data processing can be found in the Section 3.4 and in our CMP.

3.7. Size Recommendations ("Perfect Fit")

Data Processing to measure your Body Shape

You can use our Services to view products that are tailored to your body size and shape. To determine your appropriate size, the Data Processor FitMatch, Inc. 6750 N Andrews Ave, Suite 200, Fort Lauderdale, FL 33309 (FitMatch) will use the LiDAR (Light Detection and Ranging) technology of your end device, provided that you click on the "Perfect Fit" banner within the product detail page and start the scan after giving your consent (Art. 6 (1) (a) GDPR).

LiDAR technology uses lasers to pulse and reflect light off your body, capturing the contours of your body (excluding your face) and creating a 3D shape without taking photos or videos. No biometric data is transmitted to us or FitMatch. Your end device only transmits certain data points in pseudonymised form ("Scan File"), that are generated from the scan to help FitMatch determine the size recommendations. The Scan File is given a unique identifier (user ID, scan ID) so that the size recommendations can then be played back and the appropriate products displayed to you.

Reference to the Right of Withdrawal

You can revoke your consent(s) at any time with effect for the future by deleting your data in your customer account under "Body Scan".

Data Processing to identify returning Users

In order to automatically identify you as a returning user and avoid you having to repeat the scan, the above data is collected and stored via a so-called "SDK". In this case, the recommended products will also be displayed to you directly on the product detail page.

The purpose of the processing described above is to be able to offer you the most suitable products for your selection. You can also find detailed information about this processing in our CMP. We specify the purpose of the processing in the CMP "Personalized Ads and Content" (see also Section 3.4.2.)). The legal basis for this processing is your consent (Art. 6 (1) (a) GDPR).

Independent Data Processing by FitMatch

In addition, after the size recommendations have been played out, the data points are extracted from the Scan File under the sole responsibility of FitMatch and processed exclusively in an anonymous form only for the purpose of improving the FitMatch services. The legal basis for this data processing is your consent (Art. (1) (a) GDPR), which you give when you perform your scan.

For further information on the processing of your data by FitMatch, please refer to the data protection information of FitMatch.

3.8. Advertising (Retargeting)

We use the services of Adform A/S, Silkegade 3B, DK-1113 Copenhagen K, Denmark (Adform) to serve personalised ads across pages and to analyse the effectiveness of our advertising efforts. For this purpose, Adform processes various personal data, including your IP address and thus your approximate location, device and browser information, data about your interactions with our services and other usage data. We also transfer data to Adform that allows Adform to identify and associate the specific process in our shop. This information enables us to show you more relevant ads tailored to your interests and to improve the efficiency of our advertising campaigns by tracking how often certain ads are seen and clicked.

You can also find detailed information about this processing in our CMP. We specify the purpose of the processing in the CMP as "Personalised Ads and Content" (see also Section 3.4.2.). The legal basis for this processing is your consent (Art. 6 (1) (a) GDPR).

Joint Controllers

We and Adform are joint controllers for the collection of personal data and its transfer to Adform by means of the Adform cookie and the IDs. For this reason, we have entered into an agreement which sets out our respective obligations as Joint Controllers. The agreement sets out which of us is responsible for complying with our data protection obligations and for enforcing your data protection rights. To exercise your rights, you can contact Adform here. You can also contact us in this regard (see also Section 8.).

3.9. Advantage and Voucher Offers

Our services give you the opportunity to receive advantage offers at the end of an order, such as free offers for daily newspapers, magazines or product samples ("Advantage Offers") and voucher offers ("Voucher") from third-party companies, provided by Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe ("Sovendus"). Such Advantage or Voucher Offer are recognizable and marked as partner services.

3.9.1. Advantage offers

Personalized selection of Advantage Offers for you

In order to select a current regional Advantage Offer of interest to you, we provide Sovendus with a pseudonymized form of address, year of birth, country, postal code and the hash value of your e-mail address. In addition, Sovendus receives your IP address and thus also your approximate location, browser information, end device data, pages visited and other usage data, as is always the case with communication processes on the Internet. We also transmit data to Sovendus that allows Sovendus to assign and identify the specific transaction to our online shop. After Sovendus has selected the Advantage Offer on the basis of the above data, it will be displayed to you at the end of an order in our online shop.

The purpose of the processing described above is to be able to offer you the most suitable Advantage Offers for your selection. You can also find detailed information on this processing in our CMP. We refer to the purpose of the processing in the CMP as "Personalized ads and content" (see also section 3.4.2.). The legal basis for this processing is your consent (Art. 6 (1) a) GDPR).

Sovendus also uses all of the above types of data under its sole responsibility for the purpose of improving the display of further advantage and voucher offers (pseudonymous customer analyses). Further information on the processing of your data by Sovendus can be found in the Sovendus privacy policy.

Your use of Advantage Offers

Only if you actively select a Advantage Offer will we transmit your name, address and email address to Sovendus to prepare the personal request for the Advantage Offer from the product provider. The legal basis for this data processing is Art. 6 (1) b) GDPR (performance of contract).

3.9.2. Voucher Offers

Personalized selection of Voucher Offers for you

In order to select a Voucher Offer that is currently of interest to you, we will provide Sovendus with your pseudonymized title, country, zip code and the hash value of your e-mail address. In addition, Sovendus receives your IP address, and thus also your approximate location, browser information, end device data, pages visited and other usage data, as is always the case with communication processes on the Internet. We also transmit data to Sovendus that allows Sovendus to assign and identify the specific transaction to our store.

The purpose of the processing described above is to be able to offer you the most suitable Voucher Offers for selection. You can also find detailed information on this processing in our CMP. We state the purpose of the processing in the CMP "Personalized ads and content" (see also section 3.4.2.) The legal basis for this processing is your consent (Art. 6 para. 1 a) GDPR) In addition, the information is processed by Sovendus under its sole responsibility for the purpose of improving the display of further advantage and voucher offers (pseudonymous customer analyses). For further information on the processing of your data by Sovendus, please refer to the Sovendus privacy policy.

Your use of Voucher Offers

Only if you actively select a Voucher Offer we will transmit your name and email address to Sovendus to prepare your personal request for the Voucher Offer from the product provider. In addition, we transmit a pseudonymized order number, currency, session ID (session number) and timestamp of the order to Sovendus for billing purposes. The legal basis for this data processing is Art. 6 (1) (b) GDPR (performance of contract).

3.10. Fanpages

ABOUT YOU maintains social media profiles on the social networks Facebook and Instagram ( „Fanpages“), services of Meta Platforms Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland ( „Meta“), on which we regularly publish and share content and offers. When you interact with our Fanpages or other Facebook or Instagram websites, Meta uses cookies and similar technologies to collect your usage patterns. ABOUT YOU may view general statistics about users' interests and demographic characteristics (such as age, gender, region) for its Fanpages. If you use social networks, the type, scope and purposes of data processing in the social networks are primarily determined by the operators of the social networks. An exception applies to so-called page insights, for which we are jointly responsible with Meta and explain below.

Processing of your Data by Meta

Meta also processes your data when using Fanpages for its own purposes, which are not depicted in this Privacy Policy and over which we have no control. You can find more information about this at the respective social networks:

Facebook privacy notice

Instagram privacy notice

Usage Analysis (Page Insights)

When you interact with our fan pages, Meta records your usage behavior with cookies and similar technologies. In this context, ABOUT YOU receives "Page Insights" that contain statistical, non-personalized (anonymized) information about visitors. It is not possible for us to assign this information to you personally. The selection and processing of Page Insights information is done exclusively by Meta. Page insights help us to understand how our Fanpages are used, which interests the visitors have and which topics and content are particularly popular. We use this information to offer visitors to our Fanpages relevant content and to better respond to the interests and usage habits of our visitors.

ABOUT YOU and Meta are jointly responsible for the processing of your data for the provision of Page Insights (Art. 26 GDPR). There is an agreement between ABOUT YOU and Meta that specifies which company fulfills which data protection obligations in accordance with the GDPR with regard to the processing of Page Insights data.

The agreement with Meta is available here.

The main contents of this agreement (including a list of page insights data) have been summarized by Meta summarized here.

Insofar as you have consented to Meta in relation to the creation of Page Insights described above, the legal basis is Art. 6 para. 1 a) GDPR.

3.11. Facebook Connect / Login

ABOUT YOU offers the user the option to register for the Service with his Facebook access (so-called Facebook Connect). Facebook Connect is a service of the social network Facebook, which is operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland) ( „Meta“). An additional registration with ABOUT YOU is then not required. To register, the user is redirected to the Facebook website, where he can log in with his usage data. This links the Facebook profile and the ABOUT YOU Service. Through the link, ABOUT YOU automatically receives from Meta the information that the user has consented to transmit (e.g. first name, last name, email address, profile picture, gender, friends list). We use this information to identify you when you use ABOUT YOU.

The legal basis for this data processing is Art. 6 para. 1 a) GDPR.

For more information about Facebook Connect and privacy settings, click here: privacy notice from Facebook.

3.12. Login via Apple (“Log in with Apple”)

ABOUT YOU offers the user the possibility to sign up for the Service with his Apple ID ("Log in with Apple"). This login function is a service of Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland („Apple“). An additional registration with ABOUT YOU is then not required.

To register, the user is redirected to the Apple website, where he can log in with his usage data. Here, the Apple ID of the user and our Service are linked with each other. The user has the option of using either the email address stored with Apple ("Share email address") or a pseudonymized email address ("Hide my email address"). If the user selects "Share email address", ABOUT YOU receives the email address and name associated with the Apple ID. With the "Hide my email address" function, Apple enables registration for other services outside of Apple, such as ABOUT YOU, without revealing the email address stored with Apple in plain text. If the user enables this feature when creating a new ABOUT YOU customer account, Apple will generate a random email address with the domain @privaterelay.appleid.com. Anything sent to this address will automatically be forwarded to the email address associated with the Apple ID. If you use the login function, the respective IP address will be transmitted to Apple.

The legal basis for this data processing is Art. 6 para.1 a) GDPR.

You can find more information about data processing by Apple here: privacy notice of Apple .

3.13. Customer Account / User Account

In order to provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer account/user account.

The creation of a customer account is generally voluntary. If you create a customer account, the processing of your data collected here is based on Art. 6 para. 1 b) GDPR. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.

Only if you want to place orders via our website/application, the opening of a customer account is mandatory for the processing of the contract.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This password is used together with your email address to access your customer account. Please treat your personal access data confidentially and do not make them accessible to unauthorized third parties. Please note that you will automatically remain logged in after leaving our website, unless you actively log out.

You have the option to delete your customer account at any time. Please note, however, that this does not mean that the data visible in the customer account will be deleted once you have placed an order with us. Your data will be deleted automatically after the expiry of the commercial and tax retention obligations applicable to us or the applicable limitation periods. Further information on this can be found in Section 6. The legal basis for this further data processing is Art. 6 (1) c) GDPR and Art. 6 (1) f) GDPR. We have a legitimate interest in the assertion, exercise or defense of legal claims.

3.14. Contacting

You have the possibility to contact us in several ways. By email, by phone, by chat or by mail. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request.

We use the CRM system Zendesk to process customer inquiries. The service provider is Zendesk, Inc., 1019 Market Street in San Francisco, CA 94103, USA ( „Zendesk“). We use Zendesk to process your requests quickly and efficiently. We have entered into a Data Processing Agreement (DPA) with Zendesk. Zendesk processes your data when you submit a request to us exclusively on our behalf and not for its own purposes.

The legal basis for this data processing is Art. 6 para. 1 a), Art. 6 para. 1 b), Art. 6 para. 1 c) GDPR and Art. 6 para. 1 f) GDPR. We have a legitimate interest in answering inquiries from our users that are of a general nature and not directly related to a contractual relationship.

3.15. Payments Methods

We process your payment information for the purpose of payment processing, e.g. when you purchase or use a product and/or Service via en.aboutyou.de. Depending on the payment method, we forward your payment information to third parties (e.g. in the case of card payments to your card payment provider).

The legal basis for this data processing is Art. 6 para. 1 a), Art. 6 para. 1 b), GDPR and Art. 6 para. 1 f) GDPR.