Data Protection Information

1. Name and Contact Details of the Controller

2. Contact Details of the Data Protection Officer

3. Purposes of the Data Processing, Legal Bases and Legitimate Interests pursued by the Controller or by a Third Party, and Categories of Recipients

3.1. Access to our Websites / Applications

3.1.1. Log Files

3.1.2. Cookies, Tracking, Social Media Plug-Ins

3.1.3. Consent Management

3.2. Creation, Execution and/or Termination of a Contract

3.2.1. Data Processing on Conclusion of the Contract

3.2.2. Creditworthiness and Transmission to Credit Agencies

3.2.3. Data Use for Fraud Prevention Purposes

3.2.4. Data Transmission to Transport Service Providers

3.2.5. Data Transmission to Partner Enterprises

3.3. Data Processing for Advertising Purposes

3.3.1. Postal Advertising

3.3.2. Newsletter

3.3.3. Product Recommendations by Email

3.3.4. Competitions

3.4. Online Presence and Service Optimization

3.4.1. Google Analytics

3.4.2. Floodlight

3.4.3. Wingify Pvt Ltd. (VWO)

3.5. Online Marketing

3.5.1. Adjust

3.5.2. Google Marketing Platform

3.5.3. Google Ads Remarketing

3.5.4. Google Conversion Tracking

3.5.5. Google AdSense

3.5.6. Criteo

3.5.7. Facebook Retargeting und Conversion

3.5.8. Pinterest Retargeting (Pinterest Tag)

3.5.9. Localytics

3.5.10. emetriq

3.5.11. RTB House

3.5.12. Tracdelight

3.5.13. Taboola

3.5.14. Visual Media

3.5.15. Channelpilot

3.5.16. intelliAd Tracking

3.5.17. Snap Inc. (Snap Pixel and Website Custom Audiences)

3.5.18. Other Advertising Networks & Affiliates

3.6. Customer and/or User Account

3.7. Contact

3.10. Payments

3.10.1. Paypal

4. Processors

5. Storage Duration and Data Deletion

6. Recipients outside the EU

7. Your Rights

7.1. Overview

7.2. Right of objection

7.3. Right of Withdrawal

7.4. Fan Pages

8. Overview of Cookies and other Technologies

The present data protection information applies to any data processing carried out by the company

About You SE & Co. KG
Domstraße 10
20095 Hamburg
Germany
Phone Number: 1800 200 691
email: [email protected]

represented by: ABOUT YOU Verwaltungs SE, which in turn is represented by Tarek Müller (Managing Director), Sebastian Betz (Managing Director), and Hannes Wiese (Managing Director)
Chairman of the Supervisory Board: Sebastian Klauke
Website: www.aboutyou.ie

for the following websites/applications: www.aboutyou.ie, ABOUT YOU App

You can contact the operational data protection officer(s) of the Data Controller at

About You SE & Co. KG
To the Attention of Mr Sebastian Herting - Data protection law firm
Domstraße 10
20095 Hamburg Germany

email: [email protected].

3.1. Access to our Websites / Applications

3.1.1. Log Files

At every single access to the Services, an information is sent to the server of our service by the respective internet browser of your respective terminal device and is temporarily stored in log files. The data records stored during this process contain the following data stored until their automatic deletion: access date and time, name of the page accessed, IP address of the requesting device, referrer URL (URL from which our service has been accessed by you), amount of transferred data, loading time, as well as product and version information of the browser which has been used in each case and the name of your access provider. The legal basis for the processing of the IP address is Article 6 para. 1(f) GDPR. Our legitimate interest results from

• Ensuring a smooth connection,
• Guaranteeing a comfortable use of our Services,
• Evaluating the security and stability of the system.

A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. The information will be stored and automatically deleted after the achievement of the aforementioned purposes. The standard deletion periods depend on the criterion related to necessity.

3.1.2. Cookies, Tracking, Social Media Plug-Ins

On various pages we use cookies or similar technologies to make the visit to our Services attractive and to enable the use of certain functions as well as to record the use of our Services statistically. Cookies are small text files which are automatically created by your browser and stored on your respective device (laptop, tablet, smartphone or similar) during your visit and/or use of our Services. Cookies do not cause any damage to your device, and do not contain viruses, trojans, or other malware. The information stored in the cookie is related to the specific terminal device used. However, this does not mean that we can obtain direct knowledge of your identity and/or draw conclusions about your person. The majority of the used cookies (the so-called session cookies) will be deleted at the termination of the browser session. These cookies put us into the position to offer e.g. the cross-page shopping cart display where you can see the number of items currently included in your shopping cart and the amount of the current purchase value. Other cookies (the so-called permanent or session-spanning cookies) remain on your end device by putting us into the position to recognize your end device during your next visit. Especially this kind of cookies serves to make our offer user-friendly, more effective, and safer. Due to these technologies, you may, for example, receive information about our Services which is specifically tailored to your interests.

On the one hand, we use cookies and similar technologies on the basis of Article 6 para. 1 point f) GDPR (legitimate interest in the optimization of our service offers). Certain cookies and similar technologies are used exclusively on the basis of your consent (according to Article 6 para. 1 point a) GDPR). According to their purpose, we basically divide cookies and similar technologies into three categories:

Necessary Cookies and Technologies

This category of cookies or similar technologies are necessary for the functioning of our Services. This concerns, for example, cookies or similar technologies storing log-in information after the registration in our online store so that the user remains logged in to our online store even after switching to another page, or to cookies ensuring that a user-specific configuration of service features (selected language, etc.) will be maintained over sessions. Furthermore, this kind of cookies or similar technologies contribute to a safe and proper use of our Services. The legal basis for the use of these technologies is Article 6 para. 1 point f) GDPR.

Analysis & Functional Cookies and Technologies

These cookies facilitate extended functionalities and personalization. They can be set by us or by third parties whose services are used by us in our Services. If you do not allow these cookies, a part or the totality of these services may not work correctly. In addition, this kind of cookies enables us to count visits and traffic sources to measure and improve the performance of our Services. They help us answer questions about which pages are the most or least used, and in which manner visitors navigate our Services. All information collected by these cookies is aggregated and, as a consequence, it is anonymous. If you do not allow these cookies, we will not be able to know when you use / visited our Services. The legal basis for the use of these technologies is Article 6 para. 1 point a) GDPR.

Marketing

We or our partners may set this kind of cookies or similar technologies through our website to show you a relevant content / advertising on both our and third-party websites. This way, the so-called profiles based on your interests can be created. A direct identification of a person is usually impossible with this kind of information, as there is an exclusive use of a pseudonymous browser and/or device information. If you do not allow these cookies or similar technologies, you will experience less relevant content/advertising tailored to your interests. The legal basis for the use of these technologies is Article 6 para. 1 point a) GDPR.

In the extent we make use of your information on the basis of your consent, you give this consent by clicking on the "Ok" button on the banner appearing as soon as you visit our Services, or, if necessary, after you will have made certain settings:

---

By clicking on "Ok" you agree to the use of cookies and other kinds of technologies for the processing of your data, including the transfer of your data to our marketing partners (third parties). Our partners use cookies and other technologies as well to personalise, measure and analyse advertising.

---

Note on Right of Withdrawal

You can entirely or partially revoke your consent at any time with effect for the future by changing your settings in our preference centre here.

---

Browser Settings

Of course, you can set up your browser to avoid the storing of cookies on your end device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser inform you when you receive a new cookie or how to delete all cookies already received and block them for all others. Please proceed as follows:

In Internet Explorer:

1. In the "Tools" menu, select "Internet Options".
2. Click on the "Privacy" tab.
3. Now you can make the security settings for the internet zone. Here you will set whether and which cookies should be accepted or rejected.
4. You confirm the setting with "OK".

In Firefox:

1. In the "Tools" menu, select “Settings”.
2. Click on "Privacy".
3. In the drop-down menu, select the entry "Create according to user-defined settings".
4. Now you can set whether to accept cookies, how long you want to keep them and add exceptions to which websites you always or never want to allow the use of cookies.
5. You confirm the setting with "OK".

In Google Chrome:

1. Click on the Chrome menu in the browser toolbar.
2. Now select "Settings".
3. Click on "Show advanced settings".
4. Under "Privacy" click on "Content Settings".
5. Under "Cookies" you can make the following settings related to cookies:
• Delete cookies
• Block cookies by default
• Delete cookies and website data by default after closing the browser
• Allow exceptions for cookies from certain websites or domains

We would like to point out that in this case not all functions of our Services can be used to their full extent.

Overview of Cookies and other Technologies

Here you can find an overview of the cookies and other technologies used on our website.

3.1.3 Consent Management

For the purposes of the management of your settings and the documentation of the consents of users of our Services, we will make use of a consent management tool (hereinafter referred to as "OneTrust") provided by the company OneTrust, LLC (UK headquarters: Cannon Green, 27 Bush Lane, London EC4R 0AA, UK and US headquarters: 1350 Spring Street NW, Suite 500, Atlanta, Georgia 30309, USA ). Among other things, OneTrust is used for the purpose of storing the cookie settings for the whole website. OneTrust stores information about the categories of cookies used by the site and whether users have given or revoked their consent to the use of each category. This operation allows us to prevent cookies from being set in each category in the user's browser if the respective consent is not given. OneTrust uses cookies having a normal lifetime of one year for information storage, so to store the preferences of returning visitors.

The legal basis for these data processing operations is Article 6 para. 1 point c) and point f) GDPR.

3.2. Creation, Execution and/or Termination of a Contract

3.2.1. Data Processing on Conclusion of the Contract

If you register for one of our Services and/or conclude another contract with us (e.g. by purchasing a product), we will process the data required for the conclusion, execution or termination of the contract, including the following:

• Title
• First and last name
• Invoice and delivery address
• Email address
• Billing and payment data
• Date of birth
• Phone number
• Shop settings

The legal basis for this operation is Article 6 para. 1 a) and b) GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer / user account, processing of a sales contract) between you and us. In addition, we are legally obliged to process your email address in the event of a purchase via our websites / applications to send you our electronic order confirmation (according to Article 6 para. 1 c) GDPR).

We store the data collected for the contractual processing - unless we use it for our own marketing purposes - for the respective contractual duration and until the expiry of the respective statutory or possible contractual warranty and guarantee rights. After the expiry of the said period, we will retain the information required under commercial and tax law regarding the contractual relationship for the legally specified periods. For this period, the data will be reprocessed only in case of a review by the tax authorities.

For the processing of a sales contract via our Services, the following additional data processing is required:

The payment data will be transferred to the payment service providers commissioned by us for the payment(s) processing. We transfer information on the delivery address to logistics companies and shipping partners commissioned by us for the purpose of the order delivery. To ensure the delivery of goods according to your wishes, we may transfer your email address and, if applicable, your phone number to the logistics company and/or shipping partner commissioned by us to take care of delivery. They may contact you before the delivery to coordinate the delivery details. The respective data will be transmitted solely for the respective purpose. After delivery, they will not be used for other purposes and will be deleted after the expiry of the existing commercial and tax law obligations to keep records.

3.2.3. Data Use for Fraud Prevention Purposes

The information provided by us during your order placement can be used to check whether there is a so-called atypical ordering process (e.g. simultaneous ordering of many goods to the same address by using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis of processing is Article 6 para. 1 point f) GDPR.

3.2.4. Transmission of Information to Transport Service Providers / Dispatch Partners

For the purpose of delivering ordered goods we cooperate with logistics service providers / transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivering the ordered goods or announcing the shipment: first name, surname, postal address and, if applicable, email address and, if applicable, phone number. The legal basis of processing is Article 6 para. 1 point b) GDPR.

3.2.5. Transmission of Information to Partner Enterprises

Through our Services you can take advantage of offers made by third parties. In these cases, you may conclude a contract directly with one of our partners, to whom the data required for the execution of the contract will be transmitted (e.g. first name, surname, billing and delivery address, email address, billing and payment data, date of birth, phone number). Such advantageous offers of our partners are recognizable and marked as partner offers.

3.3. Data Processing for Advertising Purposes

3.3.1. Postal Advertising

We have a legitimate interest in using certain information for marketing purposes to provide you with relevant offers. In this context, we process the following information for postal advertising for our own marketing purposes as well as for third parties’ marketing purposes: first and last name, postal address, year of birth.

We are also entitled to store your additional personal information collected in compliance with legal requirements for our own and third parties’ marketing purposes. Objective is to provide you with advertising which is solely oriented towards your actual or supposed needs / interests and to avoid bothering you with advertising which is not relevant to you.

The additionally stored data will not be transferred to third parties. In addition, About You pseudonymizes / anonymizes personal data collected about you for the purpose of using the pseudonymized / anonymized data for its own as well as third parties’ (advertisers’) marketing purposes.

The pseudonymized / anonymized data may also be used for applications related to individualised online advertising, whereby the advertising can be delivered by third party service providers and/or agencies. The legal basis for the use of personal data for marketing purposes is Article 6 para. 1 point f) GDPR.

---

Note on Right of Objection
You can, at all times, free of charge, resist against the use of your personal information for the aforementioned marketing purposes with effect for the future by writing to [email protected].

If you file an objection, your data will be blocked for any further commercial data processing. We would like to point out that, in exceptional cases, advertising material may still be sent out temporarily even after our receipt of your objection. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

---

3.3.2. Newsletter

As part of our Services we offer you the opportunity to subscribe to our newsletter. To ensure that no mistakes are made when entering your email address, we use the so-called Double-Opt-In-Procedure (DOI Procedure): After you have entered your email address in the registration field and have given your consent to receive our newsletter, we will send you a confirmation link to the email address provided by you. Only when you click on this confirmation link, your email address will be added to our mailing list for sending our newsletter. The legal basis for this data processing is Article 6 para. 1 point a) GDPR.

---

Note on the Right of Withdrawal
You can revoke your consent at any time with effect for the future by sending a message to [email protected] or by unsubscribing at the end of each newsletter.

---

3.3.3. Product Recommendations by Email

As an existing customer you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter or not. We will use the email address provided by you during the purchasing process to promote our own goods and/or Services or similar to those you have already purchased from us. The legal basis for this data processing is Article 6 para. 1 point f) GDPR.

---

Note on the Right of Objection
You can object, at all times, free of charge, to our product recommendations with effect for the future by sending a message to [email protected] or at the end of each product recommendation email.

---

3.3.4. Competitions

If you register for / participate in competitions organised by ABOUT YOU (hereinafter referred to as „Participation“), we will use the data provided by you during the respective Participation for the purpose of implementing the Participation Agreement, in particular for notification of winnings and, if applicable, for advertising our and/or our competition partners’ offers. You will find detailed information in the respective participation conditions of the respective competition. The legal basis for this data processing is Article 6 para. 1 a), b) and f) GDPR.

3.4. Online Presence and Service Optimization

3.4.1. Google Analytics

For the purpose of designing our pages to meet your needs and for their continuous optimization, we use Google Analytics, a web analysis service of Google Inc. (hereinafter referred to as "Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and enable an analysis of your website use. In this context, pseudonymized user profiles are created, and cookies are used. The information generated by the cookie about your use of this website such as

• Browser type / version,
• Used operating system,
• Referrer URL (the previously visited page),
• HHost name of the accessing computer (IP address),
• Time of the server request

On behalf of the operator of this website, Google will use this information to evaluate your website use, to compile reports on the website activities and to provide further services to the website operator in connection with the website and internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that in this case you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your website use (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie is set to prevent future collection of your information during your visit of this website. The opt-out cookie is valid only in this browser and only for our website and will be stored on your device. If you delete the cookies in this browser, you will need to reset the opt-out cookie. On the Google Analytics website you can find further information on data protection in connection with Google Analytics.

3.4.2. Floodlight

On our website, we make use of "DoubleClick Floodlight", a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google stores and processes information about your user behaviour on our website. We use DoubleClick Floodlight for marketing and optimization purposes, especially to analyse the use of our website and to continuously improve individual functions and offers and the user experience.Through the statistical user behaviour evaluation, we can improve our offer and make it more attractive for you as a user. This is also our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis is Article 6 para. 1 sentence 1 point f) GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating their storage in your web browser settings. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the aforementioned information by Google by setting an opt-out cookie on one of the following linked websites: http://optout.networkadvertising.org/#!/

http://optout.aboutads.info/?c=2#!/

http://www.youronlinechoices.com/de/praferenzmanagement/

We would like to point out that this setting is deleted when you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of such data by deactivating the execution of JavaScript in your browser. You can also prevent the entire execution of JavaScript code by installing a JavaScript blocker (e.g. https://noscript.net/" or https://www.ghostery.com"). We would like to point out that in this case you may not be able to use all functions of our website to their full extent.

You can find further information from the third-party provider on data protection on the following website: https://www.google.com/intl/de/policies/privacy/"

3.4.3. Wingify Pvt Ltd. (VWO)

The present site carries out user behaviour analyses via so-called A/B testing. We can show you our websites with slightly different contents, according to a profile assignment. This allows us to analyse our offer, improve it regularly and make it more attractive for you as a user. The legal basis for the use of A/B testing is Article 6 para. 1 sentence 1 point f) GDPR.

For this evaluation, cookies from our service provider, TOP FLOOR (14th), KLJ TOWER NORTH B-5, NETAJI SUBHASH PLACE, PITAMPURA DELHI North West DL 110034 IN are stored on your computer. The information collected in this way will be automatically stored on a server in Germany. Before the analyses are carried out, the IP addresses will be further processed in a shortened form; therefore, it will not be possible to make a direct personal reference. The IP address transmitted by your browser will not merged with other data collected by us. You can object to the use of A/B testing by entering the Internet address of our website in the field on the following website of the provider Wingify (VWO) and by activating the link generated afterwards: https://vwo.com/opt-out/ or by using our Preference Centre.

3.5. Online Marketing

On our pages, we use various information for marketing purposes. Our objective is to exclusively show you advertising oriented to your actual or supposed interests so that you do not have to deal with advertisements which are not of your interest. For this purpose, we use various forms of advertising (e.g. retargeting) and technologies of ABOUT YOU and third companies (third parties), some of which process data as processors for us, but also some of which process data as responsible parties. A processor is a natural or legal person, authority, institution, or other body processing personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out data processing exclusively on the data controller’s behalf. This enables us to target users with online advertising not only on our websites but also on the websites of our partners, who have already shown interest in our shop and our products. As a result of studies, we know that the insertion of personalised, interest-based advertising is more attractive for the internet user than advertising without such personal reference.

3.5.1. Adjust

We make use of the usage evaluation and analysis technology Adjust of adjust GmbH, Saarbrücker Str. 36, 10405 Berlin, Germany. The Adjust service has been tested and certified according to the ePrivacyseal (European Seal for your Privacy) (see https://www.eprivacy.eu/kunden/vergebene-siegel/). Adjust collects data for the interaction with our advertising material, installation, and app event data and provides them as anonymous evaluations. We use this information to measure the success of our app marketing campaigns, for our own market research and to optimize the app. For these evaluations, Adjust uses your IDFA or Android ID and your anonymized IP and MAC address. The collected information is additionally forwarded to corresponding providers for the execution and optimization of our app advertising campaigns. In the respective sections of our privacy policy, you can find out the details of the providers used. The legal basis for data processing is Article 6 para. 1 point a) GDPR.

The data collection, evaluation and use can be deactivated for the future at https://www.adjust.com/opt-out/ for the websites. You can revoke your consent at any time in our Preference Center .

3.5.2. Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing one and the same ads more than once. Google uses a cookie ID to help identify which ads are being served on which browser, and to prevent them from being shown more than once.

In addition, GMP can use cookie IDs to record so-called conversions relating to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase from that website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and therefore inform you as follows according to our state of knowledge: Through the GMP integration, Google receives the information that you have called up the corresponding part of our website or that you have clicked on one of our advertisements. If you are registered with a Google service, Google will be able to assign the visit to your account. Even if you are not registered with Google or are not logged in, it will be possible that the provider will find out your IP address and save it. The GMP use can also result in a transmission of personal data to the servers of Google LLC. in the USA.

Here you can find more information about the Google GMP privacy policy: www.google.de/policies/privacy/.

In the extent it is legally required, we have obtained your consent for your data processing according to the aforementioned description in accordance with Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Centre.

3.5.3. Google Ads Remarketing

Our website uses the features of Google Ads Remarketing enabling us to promote our websites in Google search results, as well as on third party websites. The provider of this service is the company Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). For this purpose, Google places a cookie in your device's browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages visited by you.

Any further data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize ads viewed by you on the web. In this case, if you are logged in to Google during your visit on our website, Google will use your information in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/.

Further information and the privacy policy regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/.

In the extent it is legally required, we have obtained your consent for your data processing according to the aforementioned description in accordance with Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Centre.

3.5.4. Google Conversion Tracking

Furthermore, we use so-called conversion tracking in the context of the use of the Google AdWords service. When you click on an ad placed by Google, a conversion tracking cookie will be placed on your computer/device. These cookies expire after 30 days, do not contain any personal data, and are therefore not used for personal identification. The information collected by using the conversion cookie is used to compile conversion statistics for AdWords customers having opted for conversion tracking.

The legal basis for this data processing is Article 6 para 1 a) GDPR.

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case not all functions of our Services may be fully available. In addition, you can deactivate interest-based ads on Google and on the web (within the Google display network) in your browser by activating the "Off" button at www.google.de/settings/ads or by deactivating them at www.aboutads.info/choices/ . You can find more information about your options for setting this option and Google's privacy policy at www.google.de/intl/de/policies/privacy/?fg=1. You can revoke your consent at any time in our Preference Centre .

3.5.5. Google AdSense

We make use of the online advertising service Google AdSense through which it is possible to present advertising tailored to your interests. We pursue the interest to show you advertisements which may be of interest for you to make our Services more attractive for you. For this purpose, we collect statistical information about you which will be processed by our advertising partners. These advertisements can be identified by the reference "Google Ads" in the respective ad.

Google receives the information that you have visited our website. For this purpose, Google uses a web beacon to place a cookie on your computer. If you are logged in with your Google account, your data can be directly assigned to it. This data may be transferred to contractual partners of Google, third parties and authorities. The legal basis for your data processing is Article 6 para. 1 sentence 1 point a) GDPR.

Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options to protect your privacy can be found here: https://www.google.de/intl/de/policies/technologies/ads.

3.5.6. Criteo

The present website integrates the retargeting technology of Criteo SA, 32 Rue Blanche, 75009 Paris. By using this technology, it is possible to display on third party sites (so-called publisher sites) advertisements of products viewed by you on this website. Criteo collects information about your use of this website by using tracking cookies and similar technologies placed in your browser by using Ad IDs in non-cookie environments such as apps. These technologies allow Criteo to analyse trends and identify individual users' interests in websites and apps. Criteo uses these technologies to identify visitors to its partners' websites and apps. Users identified by Criteo are assigned a technical ID. At no time does Criteo collect personally identifiable information such as names or addresses. Criteo only analyses the products viewed or searched for and the pages visited on the website of the partner Criteo provides advertising for. To deliver personalized advertising to you and provide you with a seamless online experience, Criteo may synchronize the IDs of the various browsers used by you. ("ID Synchronization"). Criteo's ID synchronization technology enables it to deliver the most relevant ads to you regardless of the browser or device used by you, without the need for Criteo to collect and process personal information such as names or addresses. For the said purpose, Criteo uses precise linking methods based on the technical information collected through Criteo's technologies - such as the IDs of our advertising partners or encrypted email addresses partners provide Criteo with. For more information about Criteo's privacy practices, please visit the website https://www.criteo.com/de/privacy/ .

The legal basis for this data processing is Article 6 para. 1 point a) GDPR.

You can revoke your consent to Criteo's pseudonymous analysis of your surfing behaviour by using the following unsubscribe link: https://www.criteo.com/de/privacy/ or revoke your consent in our Preference Center .

3.5.7. Facebook Retargeting und Conversion

We make use of the pixel of Facebook Ireland Limited (Website Custom Audience Pixel). Through this pixel, information about the use of this website (e.g. information about items viewed) is collected by ABOUT YOU and Facebook Ireland Limited in joint responsibility and transmitted to Facebook Ireland Limited. This information may be associated with you using other information stored about you by Facebook Ireland Limited, for example, because you have an account on the social network "Facebook". The information collected through the pixel may be used to show you interest-related advertising in your Facebook account (retargeting). The pixel information may also be aggregated by Facebook Ireland Limited. The aggregated information may be used by Facebook Ireland Limited for its own and third parties’ promotional purposes. Facebook Ireland Limited may for example infer certain interests from your surfing behaviour on this website and use this information as well for the promotion of third parties’ offers. Facebook Ireland Limited may also combine the information collected through the pixel with other information Facebook Ireland Limited has collected about you through other websites and/or in connection with your use of the social network "Facebook", so that a profile about you can be stored at Facebook Ireland Limited. This profile can be used for advertising purposes. Facebook Ireland Limited is solely responsible for the permanent storage and the displayed further processing of tracking data collected through the website custom audience pixel used on this website.

As part of the Facebook pixel function, we have also activated the automatic advanced matching (hereinafter referred to as "Advanced Matching"). This pixel feature allows us to send hashed emails, name, gender, city, state, zip code and date of birth or phone number to Facebook as additional information, given you have provided us with this information and given your consent. This activation enables us to tailor advertising campaigns on Facebook even more precisely to people interested in our Services or products.

The legal basis for this data processing is Article 6 para. 1 point a) GDPR.

You can find more information on data protection at Facebook Ireland Limited on the website https://www.facebook.com/policy.php. Here you will also find the opportunity of asserting your rights (e.g. your deletion right) against Facebook Ireland Limited. You can revoke your consent at any time in our Preference Center.

3.5.8. Pinterest Retargeting (Pinterest Tag)

We use the pixel (Pinterest Tag) of Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). This pixel is used to collect information about usage (e.g. information about items viewed) under the joint responsibility of Pinterest Europe Limited and ABOUT YOU and to transmit this information to Pinterest Europe Limited. The further processing of the data transmitted to Pinterest Europe Limited is the sole responsibility of Pinterest Europe Limited according to the data protection law. This information transmitted to Pinterest Europe Limited may be associated with you by means of other information that Pinterest Europe Limited has stored about you, for example because you have an account on the social network "Pinterest". The information collected about the pixel may be used to retarget your Pinterest account to display interest-based advertisements. Pinterest Europe Limited may also aggregate the information collected about the pixel. Pinterest Europe Limited may use the aggregated information for its own and third parties’ promotional purposes. Pinterest Europe Limited may for example infer certain interests from your surfing behaviour on this website and may also use this information for the promotion of third parties’ offers. Pinterest Europe Limited may also combine the information collected through the pixel with other information Pinterest Europe Limited has collected about you from other websites and/or in connection with your use of the "Pinterest" social network so that Pinterest Europe Limited may store a profile about you. This profile may be used for advertising purposes. The legal basis for this data processing is Article 6 para. 1 point a) GDPR.

For more information on data protection at Pinterest Europe Limited, please visit the website https://policy.pinterest.com/de/privacy-policy .

Here you can also assert your data subject rights (e.g. your deletion right) concerning the data Pinterest Europe Limited processes as data controller. You can revoke your consent at any time in our Preference Center

3.5.9. Localytics

Localytics is an analysis tool offered and operated by the company Char Software Inc. based in Boston MA, USA. Localytics records data generated during the use of our apps. This includes user actions in relation to the app use (e.g. opening the app, calling up offer pages) as well as the interaction (view, click) with advertising material delivered via Localytics (push and in-app messages). Based on the collected data, Localytics carries out a user segmentation serving as basis for the delivery of in-app advertising and push messages. In this manner, during your use of the app, Localytics enables us to present content and offers which are more and more appropriate to your usage habits. For the measurement and optimisation of the success of the delivered advertising material, Localytics records data on purchases (product, price) within the app. As soon as a user logs in or registers in the app, this will be recorded as well. The information is linked to the so-called "Unique Installation ID", a label for the individual installation set by Localytics itself. For more information on data protection at Localytics, please visit https://www.localytics.com/privacy-policy/ . The legal basis for this data processing is Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Center.

3.5.10. emetriq

This website makes use of pixels from emetriq GmbH, Vorsetzen 35, 20459 Hamburg, Germany, enabling us to target internet users with advertisements who have already shown an interest in our shop and products. For this purpose, during your visit to our and other operators’ websites, information on your usage behaviour (e.g. pages called up, articles viewed, etc.) will collected and summarised under an ID in the cookie. Based on the shop movement data and, if applicable, on the data displayed on the emetriq banners seen and clicked on in our shop, an individual number will be calculated as user "value" and stored by emetriq. Based on these ratings, emetriq will control our campaigns by providing tailored banners to the users. However, in this context, your IP address will not be saved.

You can revoke your consent to the pseudonymous analysis of your surfing behaviour by emetriq at any time by using the following link to unsubscribe: https://www.emetriq.com/opt-out/ or by revoking your consent at any time in our Preference Center .

3.5.11. RTB House

On our website we make use of the technology owned by the company RTB House S.A., 61/101 Złota Street, 00-819 Warsaw, Poland. This technology enables us the use of pixels and cookies to point you to additional content within our or third parties’ websites which may be of your interest as well (retargeting). In this context, cookies will be used. The recommendations integrated by RTB House will be determined on the basis of the content you have seen so far. RTB House will technically control and deliver the said contents automatically. The display will be carried out on a pseudonymous basis.

The information related to your use of this website, generated by the cookie, such as browser type/version, operating system used, referrer URL (the previously visited page), time of the server inquiry, will be transferred to the RTB House server of RTB for storage.

For more information about RTB House's privacy policy, please visit the website: https://www.rtbhouse.com/privacy/ .

You can object to the tracking for the display of interest-based recommendations by RTB House at any time by using the "Opt-out" field within the RTB House’s privacy policy or revoke your consent in our Preference Center .

3.5.12. Tracdelight

Our website is a member of the affiliate network "tracdelight", operated by the company Tracdelight GmbH, Arabellastr. 23, 81925 Munich, Germany (hereinafter referred to as "tracdelight"). As soon as you click on a product integrated on a third-party website, tracdelight will set a cookie. In case of a product purchase at a later stage, this will enable the allocation to the respective affiliate to permit the attribution of the commission due to the mediating partner. The assignment of transactions using tracking is needed for the correct invoicing of the advertising service. Neither profile formation nor processing for advertising purposes will take place. Details on data collection, processing and use by tracdelight can be found in the tracdelight privacy policy on the website https://www.tracdelight.com/privacy .

The legal data processing basis is Article 6 para. 1 sentence 1 point f) GDPR. Our legitimate interest results from the aforementioned data collection purposes.

3.5.13. Taboola

On our website, we set a cookie of the company Taboola Inc. ("Taboola", Oneustonsq, 40 Melton Street, 13th Floor, London, NW1 2FD). Through Taboola, we can recommend content matching your personal interests and thus create an individual offer for you. Taboola uses cookies to determine which websites you visit frequently and how you move around our website. You can find more information about Taboola at https://www.taboola.com/privacy-policy . You can also use the opt-out function of Taboola here.

The legal basis for data processing is Article 6 para. 1 point a) GDPR.

3.5.14. Visual Meta

On our website, we use a cookie of the company Visual Meta GmbH ("VM", Alexanderstraße 1-5, 10178 Berlin, Germany), the operator of the portals LadenZeile and ShopAlike. This cookie is executed on the user's device in case of the completion of an order process. During this process, anonymous data related to the order process (e.g. shopping cart value) will be transferred to your device and from there to VM which will record your IP address in pseudonymized form. This is done with a legitimate interest to assign sales, for marketing purposes and, if applicable, to exercise civil law claims. VM will delete the data as soon as they are no longer needed for these purposes. For this purpose, we refer to VM's privacy policy at https://www.ladenzeile.de/datenschutzerklaerung.html . SIf you do not agree with tracking, you can prevent it in your browser by using the do-not-track setting or by clicking here .

The legal basis for data processing is Article 6 para. 1 point a) GDPR.

3.5.15. Channelpilot

This website uses ChannelPilot, an online marketing tool of Channel Pilot Solutions GmbH (Überseeallee 1, 20457 Hamburg, Germany). On our behalf, Channel Pilot uses information (browser type/version, referrer URL (the previously visited page), host name of the accessing computer (IP address), server request time, to evaluate the performance of connected online marketing channels (e.g. price search engines). You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to ChannelPilot and the processing of this data by ChannelPilot by using the opt-out option available under the following link: www.channelpilot.de/optout. In this case, an opt-out cookie will be set to prevent future collection of your information during your visit of this site. The opt-out cookie only applies to the last browser used. If you delete the cookies in that browser, you will need to reset the opt-out cookie. For more information about ChannelPilot’s privacy policy, please visit https://www.channelpilot.de/datenschutz .

The legal basis for the data processing is Article 6 para. 1 point a) and point f) GDPR.

You can also prevent the interest-based advertising of our advertising partners by setting your browser to refuse cookies or by clicking here . The legal basis for data processing is Article 6 para. 1 point a) GDPR.

3.5.16. intelliAg Tracking

This website makes use of the web analysis service with bid management of diva-e Products GmbH, Sendlinger Str. 7, 80331 Munich, Germany. For the demand-oriented design and optimization of this website, anonymized usage data will be collected and stored in aggregated form and user profiles will be created from this data by using pseudonyms. When using intelliAd tracking, cookies will be stored locally. The anonymised usage data and profiles can be used by the website operator as well as by other customers of intelliAd to identify usage interests, without the option to deduce your identity as website visitor. Legal basis of the data processing is Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Centre .

3.5.17. Snap Inc. (Snap Pixel and Website Custom Audiences)

We use the so-called “Snap Pixel” of the social network Snapchat, operated by the company Snap Inc., Market Street, Venice, CA 90291, USA (hereinafter referred to as “Snapchat”), to analyse and optimise our website and Services. With the help of the snap pixel, Snapchat will be able to determine the visitors of our website as a target group for the display of ads (so-called “Snapchat Ads”). Accordingly, we use the Snapchat Pixel to display the Snapchat Ads we place only to those Snapchat users having shown an interest in our website or having certain characteristics (e.g. interest in certain topics or products determined by the websites visited) we submit to Snapchat (so-called “Custom Audiences”). In addition, we want to use the Snap Pixels to ensure that our Snapchat Ads match the potential users’ interest and are not annoying. The snap pixel also helps us to monitor the effectiveness of Snapchat ads for statistical and market research purposes by showing us whether users are redirected to our website after clicking on a Snapchat ad (so-called “Conversion”).

The processing of data by Snapchat is governed by Snapchat's Data Use Policy which can be found at https://www.snap.com/en-US/privacy/privacy-center/.

The legal basis for data processing is Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Centre.

3.5.18. Other Advertising Networks & Affiliates

If you use our app, our ad networks and affiliates can use so-called device identifiers to create an anonymous profile of your click behaviour for mobile advertising. In our app, we cooperate with various mobile advertising partners, including the following companies:

Apple Search Ads (location USA)

Glispa (location Germany, adequate data protection level)

These cookies and device IDs can be used to display personalised advertising. In addition, a profile will be created based on similar information obtained by Google, Facebook, and other third-party ad networks from your visits to other sites or apps on their networks.

The legal basis for data processing is Article 6 para. 1 point a) GDPR. You can revoke your consent at any time in our Preference Centre or follow the instructions below:

Deactivation of personalised advertising in the app

You can deactivate personalised advertising through the settings of your device:

Android
In Android, this option is located in the app for Google Preferences. Depending on the device it is called "Google Preferences" or just "Preferences". Under the menu item "Google" -> "Ads" you will find the option "Disable interest-based advertising" or, depending on the device, the option "Disable personalised advertising" which can be used to disable personalised advertising.

iOS
In iOS, this option can be found in the “Settings” app. Under the menu item “Privacy” -> “Advertising” you will find the option “No Ad-Tracking”. By selecting it you can deactivate personalised advertising.

3.6. Fanpages

ABOUT YOU maintains social media profiles on the social networks Facebook and Instagram („Fan Pages“)which are services of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland („Facebook“), on which we regularly publish and share content and offers. During YOUR interaction with our Fan Pages or other Facebook or Instagram sites, the social networking sites will use cookies and similar technologies to track your user behaviour. ABOUT YOU may view general statistics about the users’ interests and demographic characteristics (such as age, gender, region) for its fan pages. If you use social networks, the type, scope, and purposes of data processing in social networks will be primarily determined by the social network operators. One exception hereto are the so-called page insights explained below, we are jointly responsible for with Facebook.

Processing of your Data by Facebook

Facebook also processes your data during the use of fan pages for its own purposes, which are not shown in this privacy policy and we have no influence over. You can find more information on this in the respective social networks:

Facebook's Privacy Notice

Instagram's Privacy Notice

Usage Analysis (Page Insights)

During your interaction with our fan pages, Facebook uses cookies and similar technologies to record your user behaviour. In this context, ABOUT YOU receives “Page Insights” including statistical, depersonalised (anonymised) visitor information. We are not able to assign this information to your person. The selection and preparation of Page-Insights information is carried out exclusively by Facebook. Page-Insights help us to understand the way of use of our fan pages, the types of interests of visitors and the particularly popular topic and content types. We use this information to offer our fan page visitors relevant content and to better respond to their interests and user habits.

ABOUT YOU and Facebook are jointly responsible for processing your data for the provision of page views (according to Article 26 GDPR). There is an agreement between ABOUT YOU and Facebook determining which company fulfils which data protection obligations according to the GDPR with regard to Page-Insights data processing.

The agreement with Facebook is available here .

Facebook has summarised the main contents of this agreement (including a list of Page-Insights data) here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Insofar as you have consented to the creation of Page-Insights vis-à-vis Facebook as described above, the legal basis will be Article 6 para. 1 point a) GDPR. Otherwise, the legal basis will be Article 6 para. 1 point f) GDPR, whereby our legitimate interest results from the aforementioned purposes.

3.7. Social-Media-Plug-Ins

o increase the acquaintance level of our company, we can use social plug-ins of the social networks Facebook and Twitter in our Services according to Article 6 para. 1 point a) GDPR. The respective providers must guarantee their responsibility for data protection-compliant operation.

The purpose and scope of the data collection and the further processing and use of the data by the respective provider as well as your rights in this regard and setting options for your privacy protection can be found in the respective data protection notices of the provider we will link to in the following.

Facebook

On some websites, we use plug-ins from the social network facebook.com, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). You can find the link to Facebook's Privacy Policy here.

Twitter

On some websites, we use plug-ins of the social network Twitter, operated by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”). You can find the link to Twitter's Privacy Policy here.

If plug-ins are enabled, your web browser will connect directly to the web servers of the respective social network and the content of the plug-in will be transmitted from the social network directly to your web browser and integrated into our website. Through the integration of the plug-ins, the social network receives the information that you have accessed the corresponding page of our website and can collect device and access data. If you are logged in to the social network, your visit can also be assigned to the account you have on the respective social network. By logging out of the social network pages and deleting cookies, you can prevent social networks from associating the information collected about you with your account on the social network during your visit to www.aboutyou.ie. If you do not want social networks to associate the information collected through our website directly with your profile, you must log out of the relevant social networks before your visit to our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the ScriptBlocker “NoScript” which can be found at www.noscript.net.

3.7.1. Facebook Connect / Login

ABOUT YOU offers the user the option to log in to the service with his Facebook access (so-called Facebook Connect function). Facebook-Connect is a service offered by the social network Facebook, operated by Facebook Inc (1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). In this case, an additional registration with ABOUT YOU will not be required. For registration, the user is redirected to the Facebook website, where he can log in with his usage data and which links the Facebook profile and the ABOUT YOU service. Through the link, ABOUT YOU automatically receives the information from Facebook that the user has consented to receive (e.g. first name, cash on delivery, email address, profile picture, gender, list of friends). We use this information to identify you when you use ABOUT YOU.

The legal basis for this data processing is Article 6 para. 1 point a) GDPR.

For more information about Facebook Connect and privacy settings, click here: Facebook’s Privacy Notice.

3.8. Customer / User Account

To provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer/user account.

The creation of the customer account is basically voluntary. If you create a customer account, the processing of your data collected here will be based on Article 6 para. 1 point b) GDPR. After the creation of a customer account, no new data entry will be required. In addition, you can view and change the data stored about you in your customer account at any time.

Only if you want to place orders through our website / application, the opening of a customer account will be mandatory for contract processing.

In addition to the data requested during the order placement, you must enter a password of your own choice to create a customer account. Together with your email address, this password will be used to access your customer account. Please treat your personal access data confidentially and do not make them available to unauthorised third parties. Please note that even after leaving our website you will remain logged in automatically unless you actively log out.

You can delete your customer account at any time. However, please note that this does not mean that the data visible in the customer account will be deleted after your order placement with us. The deletion of your data is carried out automatically after the expiry of the commercial and tax retention obligations applicable to us. The legal basis for this further data processing is Article 6 para. 1 point c) and point f) GDPR.

3.9. Contact

You can get in touch with us in several ways: by email, phone, chat, or mail. If you contact us, we will use the personal data you voluntarily provide us with in this context solely for the purpose of contacting you and processing your request.

We make use of the CRM system Zendesk to process customer enquiries. The provider is Zendesk, Inc, 1019 Market Street in San Francisco, CA 94103 USA (“Zendesk”). We use Zendesk to process your inquiries quickly and efficiently. Zendesk will only process your personal data on our behalf and for no other purpose. For more information, please see the Zendesk’s Privacy Policy.

The legal basis for this data processing is Article 6 para. 1 points a), b), c) and f) GDPR.

3.10. Payments

We process your payment information for the purpose of payment processing, e.g. if you purchase or use a product and/or service through www.aboutyou.ie. Depending on the payment method, we may forward your payment information to third parties (e.g. in the case of credit card payments to your credit card provider).

The legal basis for this data processing is Article 6 para. 1 points a), b), and f) GDPR.

3.10.1. Paypal

If you pay via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) within the payment processing framework. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” via PayPal. The result of the credit assessment with regard to the statistical probability of non-payment shall be used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the credit report result, they will be based on a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the score values calculation. Further information on data protection, including information on the credit agencies used, can be found in PayPal's Privacy Policy.

7.1. Overview

In addition to the right to revoke your consent granted, you are entitled to the following additional rights if the respective legal requirements are met:

• the right to obtain information about your personal data stored by us (according to Article 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients your data has been or will be disclosed to, the planned storage period, the origin of your data, if it has not been collected directly from you;
• the right to rectify incorrect or to complete correct data (according to Article 16 GDPR),
• the right to erase your data stored with us (according to Article 17 GDPR), as long as we have not to comply with legal or contractual retention periods or other legal obligations or rights for further storage,
• the right to restrict the processing of your data (according to Article 18 GDPR) if you dispute data accuracy, the processing is unlawful but you refuse the deletion; if the Data Controller no longer needs the data but you need it to assert, exercise or defend legal claims or if you have lodged an objection to the processing according to Article 21 GDPR,
• the right to data portability according to Article 20 GDPR, i.e. the right to have selected data stored by us about you transferred in a structured, machine-readable format, or to demand its transmission to another data controller
• the right to appeal to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.

You can assert the aforementioned rights you are entitled to at [email protected].

7.2. Right of Objection

Under the conditions of Article 21 para. 1 GDPR, data processing may be objected to for reasons arising from the specific situation of the data subject.

The aforementioned general right of objection applies to all processing purposes described in this Privacy Policy processed on the basis of Article 6 para. 1 point f) GDPR. In contrast to the special right of objection aimed at data processing for advertising purposes, according to the GDPR we are only obliged to implement such a general right of objection if you indicate reasons of overriding importance (e.g. a possible danger to life or health).

7.3. Right of Withdrawal

Insofar as we process data based on your consent, you are entitled to revoke the consent given at any time. The consent revocation does not result in the ineffectiveness of the consent-based data processing carried out up to the time of revocation.

7.4. Fanpages

For the processing of your Pages Insights information jointly with Facebook, we have agreed with Facebook that Facebook will be primarily responsible for providing you with information about the processing of your Pages Insights information and for enabling you to exercise your privacy rights (e.g. right of objection). For more information about your privacy rights in connection with Pages Insights and how you can exercise them directly with Facebook, please click here.

If you assert your rights against ABOUT YOU, we will forward your request to Facebook.