Your Browser is Old and requires an Update
X
0

Privacy Policy

Introduction

This privacy policy informs you about the type, scope and purpose of the collection and use of personal data on this website www.qalo.de by QALO Inc. and QALO Europe GmbH (hereinafter called “we” or “us”). We are collectively responsible for all personal data collected on this website, unless this privacy policy expressly states that only one of the companies is responsible or provides different information.

 

QALO Europe GmbH is a European subsidiary of QALO Inc. and responsible for distribution of QALO goods in the German market. QALO Europe GmbH thus has access to QALO Inc. economic system and becomes your contractual partner ordering goods on this website.

 

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes your name, e-mail address or telephone number. In addition, however, purely technical data that can be traced back to a person must also be regarded as personal data.

Contact details of the data controllers

 

 

QALO Inc

3011 S Croddy Way

Santa Ana, CA 92704

USA

Tel.: +1 714-464-3252

E-Mail: support@qalo.com

 

 

QALO Europe GmbH

Magnusstraße 13

50672 Köln

Tel.: XXX

E-Mail: info@qalo.eu

 

 

 

Your Rights

On request, you have the right to obtain free information on your stored personal data. Additionally, you have the right to obtain the rectification of inaccurate personal data, the right to obtain a restriction of excessively processing of personal data as well as the right to obtain the erasure of unlawful processed personal data or data which is stored too long (as far as there are no legal obligations to store the data). Furthermore you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller (right to data portability), as far as you have handed over the data to us within the framework of a declaration of consent or for the fulfillment of a contract.

 

 

Insofar you have also a right to object in individual processes, this is dealt within the description of the individual process.

 

In order to exercise your rights you can write an e-mail to support@qalo.eu.

 

In addition, you have the right to lodge a complaint with a supervisory authority.

 

Voluntary Provision of Data

 

The provision of your personal data on this website is generally neither required by law nor by contract. You are not obliged to disclose personal data on this website. However, the provision of the functions of this website requires the processing of your personal data.

 

Data recipients

Generally, we do not transfer personal data to other entities, except mentioned in this Privacy Policy. Nevertheless, this website is hosted by our service provider Shopify  Inc, a Canadian corporation with offices at 150 Elgin Street, Suite 800, Ottawa, ON, K2P 1L4, on behalf of itself and its Irish affiliate Shopify International Ltd. (“Shopify”)

 

Within this hosting services Shopify automatically process the abovementioned personal data. This is done exclusively in accordance with our instructions and on our behalf according to a processing contract, Art. 28 GDPR. As part of providing the services, personal data may be transferred to other regions, including to Canada and the United States. Shopify is responsible for all onward transfers of personal information to third parties in accordance with the EU-U.S. Privacy Shield Framework. Further information are provided in the Shopify privacy policy available under https://www.shopify.com/legal/privacy.

 

The transfer of personal data to the above mentioned service provider is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in the use of special service providers that realise hosting better than we do. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to us.

 

Information on Cookies

 

Cookies are small text files which are stored on your terminal device by the browser used when you access our website. In this way you can "recognize" individual services of a website and "remember" which settings you have made. This serves on the one hand the user-friendliness of web pages and thus the users (e.g. storage of login data). On the other hand, cookies are used to collect statistical data on website use and to use the data thus obtained for analysis and advertising purposes.

 

Some cookies are automatically deleted from your terminal device as soon as you leave the website (so-called session cookie). Other cookies are stored for a certain period of time, which does not exceed two years in each case (persistent cookies). We also use so-called third party cookies, which are managed by third parties in order to offer certain services.

 

You can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. However, it is pointed out that the use and especially the comfort of use are limited without cookies.

 

Overview about the Processes

 

Personal data are processed on this website in the context of the following processes:

 

  1. Presentation of Products and Contacting
  2. Registration on Website and Web-Shop
  3. Newsletter
  4. Execution of a Contract
  5. Payment Functions
  6. Server-Logfiles
  7. Web Analysis
  8. Login with Third Providers
  9. DoubleClick
  10. Facebook Plugins
  11. Google Tag Manager
  12. Remarketing Tools

 

 

1.    Presentation of Products and Contacting

 

The main purpose of the website is to display and offer our goods. When you visit our website, we may process your personal data. In order to direct you to our local website with the respective language, we use the service "Geotagging" of MaxMind Inc., 14 Spring Street, 3rd Floor, Waltham, MA 02451, USA. MaxMind is certified by the EU-US Privacy Shield.

 

When you contact us (for example by e-mail or by using the contact form), the information provided by you will be stored for the purpose of processing the request and in the event that further questions arise.

 

Legal Basis

 

The processing of personal data within the frame of contacting is based on Art. 6 (1) lit. a GDPR where you have given your consent and otherwise on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in the processing of the contact information and to direct you to your respective local website. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to us.

 

Storage Period

 

The personal data stored within the scope of establishing contact will be deleted if the request has been completely clarified and it is also not to be expected that the concrete contacting will become relevant again in the future.

 

2.    Registration on Website and Web-Shop

 

You can register on our website to use further functions. As part of creating a user account, you will be asked to enter a range of personal data. Required are last name, first name, e-mail address, Street, ZIP-Code, City and Country, as we need this information in order to execute a contract with you. Optionally, you can specify the preferred method of payment and further information.

 

If you order goods on our website, we will refer to your previously saved personal data in your registration account.

 

We store this data in order to carry out the contracts concluded with you. You can always view, change and delete the data under the heading "User account". You can also delete the entire user account at any time.

 

Your date of birth serves the age verification. In addition, we save your shopping history to give you and us an overview of your sales completed.

 

Legal Basis

 

Account and order details are processed on the basis of Art. 6 (1) lit. b GDPR. According to Art. 6 (1) lit. b GDPR the processing of personal data is lawful if it is necessary to perform a contract or to take steps at the request of the data subject prior entering into a contract.

 

Storage period

 

Personal data in concrete purchase contracts and respective invoices are stored for 10 years after the year of financial statement for legal tax reasons. Other personal data in registered accounts will be deleted, if customer closes account.

 

3.    Newsletter

 

We use your e-mail address to provide you with our newsletter. Before we will send a newsletter, you have to register on the website as set out in Sec. 2 and give your consent to receive the newsletter.

 

To send the newsletter we use MailChimp. This is an online service of the Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA.

 

MailChimp uses so called “reporting tools” to export general email marketing data. MailChimp may automatically collect certain information about your device and usage of the services. MailChimp use cookies and other tracking technologies such as pixels and web beacons to collect some of this information. Web beacons in emails track certain behaviour such as whether the email sent through the services was delivered and opened and whether links within the email were clicked. They also allow to collect information such as the recipient’s IP address, browser, email client type and other similar details. MailChimp use this information to measure the performance of our email campaigns, and to provide analytics information and enhance the effectiveness of our services.

 

Legal Basis

 

Processing your data to send the newsletter  is based on a consent which you have given by registering for the newsletter. According to Art. 6 (1) lit. a GDPR the processing of personal data is lawful if the data subject has given consent to the processing of his or her data for one or more specific purposes. Within the frame of registering for the newsletter you have given the following consent:

 

“Within the frame of this newsletter XYZ GmbH regularly informs about new products and offers. I can withdraw my consent at any time with effect for the future. In order to do so you can write an e-mail to

 

The processing of personal data within the frame of MailChimp is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in analyses of our newsletter and optimize the effectiveness. You can prevent the transmission of data generated by unsubscribing from our newsletter at any time.

 

Storage Period

 

Data which is stored within the frame of the newsletter registration will be deleted if you have successfully unsubscribed from the newsletter. You have the possibility to withdraw the given consent at any time.

 

4.    Execution of an order

 

If you order goods on our website, you close a contract with QALO Europe GmbH who will use the data stored in your customer account (see above Sec.. 2).

 

In the context of the execution of an order, we pass on your personal data to logistics service providers and, depending on the desired payment method, to payment service providers or your bank.

 

For most shipments and logistic services we work with our e-commerce logistics Provider Active Ant B.V., Zeelandhaven 6, Nieuwegein, PL 3433, Netherlands. For Delivering your goods, your personal data will be transmitted to Active Ant B.V. to perform the delivery. We are not responsible for further processing of data by Active Ant B.V.

 

Legal basis

 

The information provided in connection with the order for goods is processed based on Art. 6 (1) lit. b GDPR as we need the data to execute the contract.

 

Duration of data storage

 

We are legally obliged to keep transaction-related data for ten years for legal tax reasons, as already mentioned above.

 

5.    Payment Functions

 

In our web shop you can chose between various payment methods:

 

Stripe

 

For most online transactions we use the online payment services of the platform “Stripe” a service of Stripe Inc. 510 Townsend Street, San Francisco, CA 94103, USA.

 

Using Stripe you can choose between various payment methods such as credit card, Directbanking, Giropay and iDEAL.

 

Choosing one of these payment methods, your personal data subject to the payment will be transmitted to the respective financial service provider and you agree that Stripe and the respective financial service provider processes your data in order to perform the payment.

 

We are not responsible for further processing of data by the financial service Provider and Stripe. You can find further Information regarding the purposes of processing and the scope of your data processed by the service provider on the respective privacy note, available under: https://stripe.com/de/privacy.

 

PayPal

 

In addition we offer the payment method PayPal. This is a financial service of PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter called „PayPal“).

 

If you chose PayPal, your financial data will be transmitted to PayPal.

 

We are not responsible for further processing of data by PayPal. You can find further Information regarding the purposes of processing and the scope of your data processed by PayPal in their privacy note, available under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

 

Apple Pay

 

We also offer Apple Pay, a service of Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. Personal information is controlled by Apple Distribution International in Ireland, and processed on its behalf by Apple Inc. If you are owner of an Apple device you may choose this function. If you choose Apple Pay, your financial data will be transmitted to Apple Pay. By doing so all the information you provide may be transferred or accessed by entities in third countries, especially USA. Apple uses approved model contractual clauses for the international transfer of personal information collected in the European Economic Area.

 

We are not responsible for further processing of data by any of the Apple entities. You can find further Information regarding the purposes of processing and the scope of your data processed by Apple in their privacy note at: https://www.apple.com/legal/privacy/en-ww/ .

 

Amazon Pay

 

You can also choose to pay with Amazon Pay, a payment function of Amazon Payment Europe S.C.A.,5 Rue Plaetis , 2338 Luxemburg (hereinafter called “Amazon”), if you are a registered Amazon User.

 

If you choose Amazon Pay, your financial data will be transmitted to Amazon.

 

We are not responsible for further processing of data by Amazon. You can find further Information regarding the purposes of processing and the scope of your data processed by Amazon in their privacy note, available under: https://pay.amazon.com/de/help/201751600#1.

 

Legal Basis

 

The transmission of personal data to financial service providers in connection with payment of the ordered goods is based on Art. 6 (1) lit. a and b GDPR. Art. 6 (1) lit a. GDPR allows data processing, if you have given your consent. By choosing the payment method, you give your consent. Moreover, Art. 6 (1) lit. b GDPR allows data processing, if this is necessary for the execution of a contract. Payment related data are necessary to perform the contract.

 

Storage Period

 

We are legally obliged to keep transaction-related data for ten years for legal tax reasons as mentioned above.

 

Storage periods of the financial service providers are not in our scope of influence.

6.    Server Log Files

 

Each time you access the website, we automatically collect a series of technical data (log files), which is personal data.

 

These are:

 

 

This data is not combined with any other personal data that you actively provide on the website. We collect server log files for the purpose of administering the website and to be able to recognize and prevent unauthorized access.

 

Legal Basis

 

The processing of personal data within the frame of the log files is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data Our legitimate interest is the easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. In order to do so you can write an e-mail to us.

 

What is an IP address?

 

The IP address is a worldwide unique sing of numbers which is assigned to each device (e.g. smartphone, tablet, PC) connected to the Internet. The IP address depends on which Internet access your device is currently connected to the Internet. This can be the IP address that your Internet provider has assigned to you, for example, if you are connected to the Internet via your W-LAN at home. It can also be an IP address assigned to you by your mobile phone provider or the IP address of a provider of a public or private W-LAN or other Internet access. In its currently most common form (IPv4), the IP address consists of four number blocks. In most cases, as a private user, you will not use a constant IP address, as this is only temporarily assigned to you by your provider (so-called "dynamic IP address"). With a permanently assigned IP address (so-called "static IP address") a clear assignment of user data is easier in principle. Except for the purpose of tracking unauthorized access to our website, we do not use this data on a personal basis, but only evaluate on an anonymous basis which of our websites are favored, how many accesses are made daily and the like.

 

Our website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also know the following: The IPv6 address consists of eight blocks of four. The first four blocks are, as with the entire IPv4 address, typically assigned dynamically by private users. However, the last four blocks of an IPv6 address (so-called "interface identifiers") are determined by the terminal device that you use to browse the website. Unless otherwise set in your operating system, the so-called MAC address is used for this. The MAC address is a type of serial number that is assigned uniquely for each IP-capable device worldwide. We do not store the last four blocks of your IPv6 address. We generally recommend that you activate the so-called "Privacy Extensions" on your terminal device in order to make the last four blocks of your IPv6 address more anonymous. Most common operating systems have a "Privacy Extensions" function, which, however, is not preset by default in some cases.

 

Storage Period

 

The log files are automatically deleted after 30 days. We reserve the right to store log files longer, if there are facts which suggest that an illegal access has taken place (such as the attempt of hacking or a so-called DOS-attack).

 

7.    Web Analysis

 

We use various web analysis services on our website.

 

This website uses Google Analytics, a web analysis service of Google LLC  ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses several "cookies" (see above) to identify your browser. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, we have activated the IP anonymization function on this website so that Google will shorten your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area previously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website use and internet use. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data. For the exceptional situations in which personal data is transferred in the USA, Google has submitted to the EU-US-Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

Legal Basis

 

The processing of personal data within the frame of Google Analytics is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in analyses of website’s use. You can prevent the transmission of data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

 

Storage Period

 

The personal reference is deleted directly by the partial deletion of the IP addresses, so that only statistical data is stored.

 

Zaius Analytics

In addition, we use the analysis service available through the Zaius Platform. This is a Service of Zaius Inc. 205 Portland Street, 6th Floor, Boston MA 02114, USA (hereafter called “Zaius”). Zaius uses several "cookies" (see above) to identify your browser. The information generated by the cookies about your use of this website is usually transferred to a server in the USA and stored there. Zaius will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services associated with website use and internet use. For the situations in which personal data is transferred in the USA, Zaius has submitted to the EU-US-Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

Legal Basis

 

The processing of personal data within the frame of Zaius is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in analyses of website’s use. You can prevent the transmission of data generated by the cookie and relating to your use of the website using the opt-out method of your browser mentioned above.

 

The purpose and scope of the recording of data and the further processing and use of the data by Zaius as well as the rights and setting options for the protection of users’ privacy can be found in Zaius data protection information at: https://www.zaius.com/privacy-policy/. 

 

8.     Login with other Providers

 

We use login services of third providers listed below. It is a service of the respective third provider, which simplifies your registration process on our website, by connecting the registration process with the respective third provider. Thus, it is not necessary to insert the required personal data to register on our website. If you login with a third provider, the respective third provider receives your data in connection with the use of our website.

 

We use login services of the following third providers.

 

 

Legal Basis

 

This data processing is based on your consent according to Art. 6 (1) lit. a GDPR which you gave to the respective third provider.

 

Storage Period

 

We do not store any data during the login with third provider. Regarding the processing of your data of third provider we refer to the respective privacy policy of the third provider.

 

9.    DoubleClick

 

We use DoubleClick on our Website, an online marketing service provided by Google. DoubleClick uses cookies to display customized advertisement according to your interest and preferences. Your browser receives a pseudonymised identification number (ID) to review which advertisements have been shown on your browser and which advertisement you have followed. The use of the DoubleClick-Cookies enables Google and its partner websites to display customized advertisement on the basis of your browser history.

 

Legal Basis

 

The processing of personal data within Google DoubleClick is based on Art. 6 (1) lit. f GDPR. Our legitimate interest consists in displaying customized advertisement and the analyses of the effectiveness of website’s use. You can prevent the transmission of data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/plugin.

 

Storage Period

 

The Cookies become invalid 60 days upon the last time being used.

 

10. Facebook Plugins

 

We use social plugins ("plugins") provided by the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter called “Facebook”). The plugins are interaction elements that can be identified by the Facebook logo (white “f” on a blue square, or the term "share”). A list with designs of the Facebook Social Plugins is available at https://developers.facebook.com/docs/plugins/.

 

Facebook is certified under the EU-US-Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

 

If a user accesses a function of this online content that contains a plugin of this kind, its device only creates a connection with Facebook’s servers, after clicking “share content” on his Facebook page (2-click-option). After clicking “share content”, the content of the plugin is sent directly from Facebook to the user’s device and incorporated into the website by Facebook.

 

If the user is logged in to Facebook and shares content, Facebook can allocate the visit to the Facebook account. If a user is not a member of Facebook, it is not possible for Facebook to determine and save the user’s IP address. According to Facebook, in Germany only an anonymized IP address is stored.

 

The purpose and scope of the recording of data and the further processing and use of the data by Facebook, as well as the rights and setting options for the protection of users’ privacy can be found in Facebook’s data protection information at: https://www.facebook.com/about/privacy/.

 

If users are Facebook members and do not want Facebook to collect information about them and link it to their data stored with Facebook, they need to log out of Facebook and delete the cookies. Other settings and opt-outs regarding the use of data for advertising purposes are possible within Facebook’s profile settings: https://www.facebook.com/settings?tab=ads or via the US-based website http://www.aboutads.info/choices/ or via the EU-based website http://www.youronlinechoices.com/. The settings are implemented irrespective of the platform, i.e., they apply to all devices, from desktop computer to mobile devices.

 

Legal Purpose

 

Data is processed by social media plugins on the basis of our justified interests (i.e., interest in the analysis, optimization, and economic operation of our website as defined in Art. 6 (1) lit. f GDPR). Moreover, the content and thus your data will only be shared on other platforms, if you actively click the button “share content” so that your personal data is processed based on Art. 6 (1) lit. a GDPR.

 

  1. Google Tag Manager

 

This website uses Google Tag Manager. This is a tool of Google. Google Tag Manager is a solution that allows marketers to manage web page tags through a single interface. The Tool Tag Manager itself (which implements the tags) is a cookieless domain. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. The Google Tag Manager itself does not process any personal data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. By completely disabling tracking in your browser, you are also preventing Google Tag Manager from working.

 

  1. Remarketing Tools

 

Google Remarketing

 

We also use Google Dynamic Remarketing. This is a Remarketing Technology of Google. This Technology enables us to use targeted promotion on other websites in the network of Google partners to customers that have visited our website and have used our online services before.  Visual advertising is embedded by using cookies (see above). By using Cookies a customer’s behaviour can be analysed and is afterwards used for targeted product promotion based on interest.

 

AdRoll

 

We also use remarketing services of the AdRoll Advertising Limited, Level 6, 1 Burlington Plaza, Burlington Road, Dublin 4, Ireland (hereafter called “AdRoll”). This technology aims to make advertising more useful and relevant by showing ads that are best tied to your specific interests. AdRoll shows these ads on websites which rely on advertising revenue to support the content people consume each day. The purpose and scope of the recording of data and the further processing and use of the data by AdRoll, as well as the rights and setting options for the protection of users’ privacy can be found in AdRoll’s data protection information at: https://www.adrollgroup.com/privacy .

 

 

Legal Basis

 

The processing of personal data within Remarketing is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in analyses of website’s use and to use targeted promotion. You can prevent the transmission of data generated by the cookie and relating to your use of the website using the opt-out method of your browser mentioned above.

 

Nosto

 

We also make use of “Onsite Product Recommendations”. This is an online cloud service of Nosto Solutions Limited, Schützenstrasse 6, 10117 Berlin, Germany (hereinafter called “Nosto”). Nosto analyses your browsing and buying history in our store and builds individual customer profiles by implementing respective cookies that collect the required data. This way we can provide individualised recommendations. We also compare your shopping history and search requests to other customers and inform you about products they have purchased or viewed. Nosto may transfer data for sub processing to the USA. Nosto warrants to only process data in USA where standard contractual clauses apply or the company is EU-US Privacy Shield certified.

 

The purpose and scope of the recording of data and the further processing and use of the data by Nosto, as well as the rights and setting options for the protection of users’ privacy can be found in Nosto's data protection information at: http://www.nosto.com/terms/ and http://www.nosto.com/terms/dpa/.

 

Legal Basis

 

The processing of personal data within Nosto is based on Art. 6 (1) lit. f GDPR. According to Art. 6 (1) lit. f GDPR the processing of personal data is lawful if the processing is necessary for the purpose of the legitimate interests pursued by us, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data. Our legitimate interest consists in analyses of your shopping behavior and displaying the most relevant products in real-time to increase our sales. You can prevent the transmission of data generated by the cookie and relating to your use of the website using the opt-out method of your browser mentioned above.