Data protection is particularly important to us.
Unless otherwise specified below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide has no consequences. This only applies if no other information is given in the subsequent processing operations. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
"Personal data" within the meaning of the General Data Protection Regulation (GDPR) are all information relating to an identified or identifiable natural person ("data subject"). Responsible within the meaning of the GDPR, other data protection laws applicable in the member states of the European Union and other provisions with data protection character is:
SUPERIOR SHOPPING GmbH
Represented by its Managing Director Thomas Felber
Lychener Strasse 76
You can reach our data protection officer at the e-mail address: firstname.lastname@example.org.
General Information on the Processing of Personal Data
Scope of Processing Personal Data
We generally only collect and use the personal data of our users insofar as this is necessary to provide a functional website as well as our content and services and to implement our corporate purpose. The personal data of our users is collected and used regularly only with the user's consent. Exceptions apply in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Purpose and Legal Basis for Processing Personal Data
We only process personal data to fulfill our contractual obligations or to protect our overriding legitimate interests. Our legitimate interests are based on the implementation of our corporate purpose.
Insofar as we obtain the data subject's consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data.
In the processing of personal data, which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 S.1 S.1 lit. c GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 sentence 1 lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) sentence 1 lit. f GDPR as the legal basis for processing.
We pass on personal data for the implementation of our corporate purpose to our business partners and service providers. We typically use the contact and address data of our customers and business partners to implement our corporate purpose. We typically receive the personal data directly from the person concerned or, with the consent of the person concerned, in exceptional cases from third parties.
Unless otherwise stated in the following sections, your data will not be transmitted to third parties unless we are legally obliged to do so, or the data transfer is necessary to carry out the contractual relationship or you have expressly given your prior consent to the transfer of your data.
External service providers and partner companies such as Online payment providers or the partner commissioned with the delivery will only receive your data if this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the minimum required. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of data protection laws in the same way. Please also note the respective data protection notices of the providers.
The respective service provider is responsible for the content of third-party services, whereby we will check the services for compliance with the legal requirements within the scope of reasonableness.
Transmission to third countries In principle, we do not pass on personal data to recipients in third countries (i.e. countries outside the EU). If the data is passed on to recipients in third countries, we ensure that, in addition to the permission required for the transfer, the third country recipient also ensures an adequate level of data protection (or there is an exception in accordance with Art. 49 (1) GDPR).
Duration of Storage
After completion of the contract, the data will be stored for the duration of the warranty period, then taking legal, in particular tax and commercial, retention periods into account and then deleted after the deadline, unless you have consented to further processing and use.
Call up the Website
You can visit our website without providing any personal information. Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider through your Internet browser and stored in log data (so-called server log files). These stored data include e.g. the name of the page accessed, date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. f GDPR based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
When opening a customer account, we collect your personal data to the extent specified there. After registration, you will receive a personal, password-protected access and can view and manage the data you have stored.
Data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. Your customer account will then be deleted.
When using the contact form, we only collect your personal data (name, e-mail address, message text) to the extent that you provide. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
We use your e-mail address only to process your request. Your data will then be deleted unless you have consented to further processing and use.
As an alternative to the contact form, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be saved.
You can subscribe to our newsletter on our website. In the newsletters we will inform you about our offers, current news and services from Superior Fashion.
We use the so-called double opt-in procedure and the confirmed opt-in procedure to register for our newsletter. The double opt-in procedure means that after you have given your e-mail address, we will send you a confirmation e-mail to the specified e-mail address, in which we ask you to confirm that you would like the newsletter to be sent . If you do not confirm this, the data provided will be deleted automatically. If you confirm your wish to receive the newsletter, we will save your email address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. Furthermore, we save your IP addresses and the times at registration and confirmation in order to prevent misuse of your personal data.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent until the withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
The newsletter is sent by the shipping service provider "Newsletter2GO". You can view the data protection regulations of the shipping service provider here: https://www.newsletter2go.de/datenschutz/. It will not be passed on to other third parties.
When ordering, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to make this available means that no contract can be concluded.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. b GDPR and is required for the performance of a contract with you.
Your data will be passed on, for example, to the shipping companies you have chosen or the business partners sending them, payment service providers, service providers for order processing and IT service providers.
In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.
Payment Service Provider
As an external payment service provider, we use PayPal (PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal 2449 Luxemburg), which users and we can use to make payment transactions.
The ordered goods are shipped by the seller (designer or design store), who in turn hires a shipping service provider. We therefore pass on your data relevant for shipping (name, ordered goods, delivery address, email address for contacting) to the seller as part of the contract processing.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the lawfulness of the processing carried out based on your consent until you revoke it.
For the size recommendations, we have implemented the technology of Virtual Retail, a company based in Siegen/Germany, a technology provider for artificial intelligence and computer vision.
In order to get the size recommendations, a QR code is scanned by smartphone, which establishes the connection to the Virtual Retail web app. The body is scanned within the web app using a front image and a side image.
The service is completely anonymous. Virtual Retail does not need or store user-related information. As soon as the photos reach Virtual Retail’s server, a neural network extracts silhouettes from the photos and the photos are removed immediately. Another neural network then calculates body measurements exclusively on the basis of the silhouettes. After all, the only data that is stored for a scan is a randomly generated ID and a series of body measurements that cannot be traced back to a specific person.
The Virtual Retail service is hosted with the highest standards of security and reliability. To further strengthen data protection, Virtual Retail ensures that the data is only stored on servers in Germany.
We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place serves the purpose of optimizing advertising for our products.
When integrating social plug-ins, a link is established between your computer and the servers of the providers of the social network, and the plug-in is displayed on the page by notifying your browser if you have expressly agreed to this. Your IP address and the information about which of our pages you have visited are transmitted to the provider server. This applies regardless of whether you are registered or logged in to the social network. A transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
Data processing is based on Art. 6 Para. 1 S.1 lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent until the withdrawal.
The social networks listed below are integrated on our website using a social plug-in. You can find more information on the scope and purpose of the collection and use of the data as well as your rights and options to protect your privacy in the linked data protection notices of the providers.
Plug-ins from the social network Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA are integrated on our website. If an affected person lives outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
You can recognize the Facebook plug-in by the “Facebook button” on our website. If you click the "Facebook button" while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. We would like to point out that we have no knowledge of the content of the transmitted data or their use by Facebook.
Plug-ins from the social network Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”) are integrated on our website.
You can recognize the Instagram plug-in by the “Instagram button” on our website. If you click the “Instagram button” while you are logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Instagram to associate your visit to our website with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or their use by Instagram.
Plug-ins of the social network Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest") are integrated on this website.
You can recognize the Pinterest plug-in by the “Pin it button” on our website. If you click the Pinterest “Pin it button” while you are logged into your Pinterest account, you can link the content of our pages to your Pinterest profile. This enables Pinterest to associate your visit to our website with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or their use by Pinterest.
Under the following links you can find out how you can manage cookies in the most important browsers (including deactivating them):
Chrome browser: https://support.google.com/accounts/answer/61416?hl=de
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
In addition to the aforementioned necessary cookies, we would like to use other unnecessary cookies ("convenience functions" and "statistics & tracking") in order to optimize our own marketing and analyze web traffic. You can turn this off.
Processing takes place on the basis of Art. 6 Para. 1 S.1 lit. f GDPR based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right for reasons that arise from your particular situation, at any time according to Art. 6 Para. 1 S.1 lit. to object to processing based on the GDPR relating to your personal data.
We use the web analysis service Google Analytics from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. Among other things, The following information is collected: IP address, date and time of the page visit, click path, information about the browser and device you are using, pages visited, referrer URL (website through which you accessed our website) ), Location data, buying activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. This will shorten your IP address from Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases.
Data processing, in particular the setting of cookies, takes place on the basis of Art. 6 Para. 1 S.1 lit. f GDPR based on our predominant legitimate interest in the needs-based and targeted design of the website. You have the right for reasons that arise from your particular situation, at any time according to Art. 6 Para. 1 S.1 lit. to object to processing based on the GDPR relating to your personal data.
You can prevent Google from collecting the data generated by Google Analytics and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must perform the opt-out on all systems and devices used for this to have a comprehensive effect. If you delete the opt-out cookie, inquiries will be sent to Google again.
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must perform the opt-out on all systems and devices used for this to have a comprehensive effect. If you delete the opt-out cookie, inquiries will be sent to Google again. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
Rights of Those Affected
Rights of the Data Subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability.
In addition, according to Art. 21 Para. 1 GDPR you have a right to object to processing based on Art. 6 Para. 1 f GDPR and processing for the purpose of direct advertising.
Contact us on request at: email@example.com.
Right to lodge a Complaint with the Supervisory Authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
Right to object
The personal data processing listed here is based on our legitimate interest according to Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.
After the objection has been processed, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
If the personal data processing takes place for the purposes of direct advertising, you can object to this processing at any time by notifying us.
After the objection has been made, we stop processing the data concerned for the purpose of direct advertising.
As of July 2020