Privacy Policy

1. General information

The security and confidentiality of your personal data is very important to us. Below you will find information on the scope in which we process your data and the measures taken to protect your privacy as a user of this site. All data collected here is treated strictly confidential within our area of responsibility in accordance with the provisions of the European General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to us, such as the new Federal Data Protection Act (BDSG neu) or the Digitale-Dienste-Gesetz (DDG, Digital Services Act in Germany). The processing is carried out either pursuant to Art. 6 (1)(a) GDPR on the basis of your consent, pursuant to Art. 6 (1)(b) GDPR for the performance or initiation of a contract with you, pursuant to Art. 6 (1)(c) GDPR to fulfill a legal obligation on our part, or on the basis of Art. 6 (1)(f) GDPR to protect our legitimate interests.

2. Responsible entity

German eTrade GmbH
Antonstr. 3c
01097 Dresden

E-mail: shop(at)felgenoutlet.de
Phone: +49 351 89 570 100

If you have any questions, suggestions, or comments, please contact our Data Protection Officer:

Kerstin Herschel
External Data Protection Officer
PRODATIS CONSULTING AG
Landhausstr. 8
01067 Dresden

Phone: +49 351 266 23 30
E-mail: dsb(at)prodatis.com

3. Collection and processing of personal information

Personal data is any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that are an expression of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The processing of personal data can take place with or without the aid of IT systems and includes the following activities: collection, recording, organization, structuring, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, erasure, or destruction.

We process your personal information, which you provide to us through our website, only for the purpose of corresponding with you and only for the purpose for which you have made the data available to us.

Each time you access our website, we automatically and temporarily collect and store information in a so-called log file, which your browser leaves behind during your use of our website and each time a file is requested. Specifically, the following data is stored about each access/request:

• IP address
• Date and time of the request
• Page called up/name of the file accessed
• Web browser and requesting domain
• Data volume transmitted
• Message confirming whether the access was successful

The processing is carried out pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

4. Use of the “MailChimp” application for newsletter dispatch

Our newsletters are sent via “MailChimp.” This is an application provided by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The e-mail addresses of our newsletter recipients are stored on the servers of Rocket Science Group in the USA for this purpose. The “MailChimp” application uses this information to send the newsletters on our behalf. In addition to our existing agreements with this provider, we have entered into a “Customer EU Data Processing Addendum.” The provider Rocket Science Group states that it is certified under the US-EU Privacy Shield and is committed to complying with EU data protection requirements and, in particular, not sharing the data with third parties. For more information on Rocket Science Group’s privacy policy, please click here: https://mailchimp.com/about/security/.

5. E-mail advertising with newsletter subscription

If you subscribe to our newsletter, we will use the data required for this purpose or data separately provided by you to regularly send you our e-mail newsletter based on your consent pursuant to Art. 6 (1) sentence 1(a) GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

E-mail: newsletter(at)felgenoutlet.de
Phone: +49 351 89 570 100

6. Use and disclosure of personal information

Your personal data (e.g., name, first name, phone number, address, e-mail address, date of birth) that you provide to us via this website, for example via our contact form, will only be used for correspondence with you, for processing your request, or for the purpose for which you have provided the data.

No other analysis of the data is carried out except for statistical purposes and then only in anonymized form.

Insofar as we make use of service providers to perform or fulfill tasks on our behalf, the contractual relationships are regulated in writing in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the new Federal Data Protection Act (BDSG neu). This affects the following categories of recipients:

• IT service providers to ensure security and confidentiality
• Financial service providers for the execution of business activities and compliance with legal requirements
• Transport service providers
• Suppliers for handling direct shipments

Additionally, we may share anonymous data with partners to perform statistical analyses. All these parties are prohibited from using your personal information unless it is used for our offering.

7. User registration and ordering in our online shop

We collect and process your personal data in the context of an order process in our online shop so that we can provide you with the selection and ordering of the chosen products and services, as well as enable payment and delivery. This data includes, among other things, information such as your name, first name, date of birth, delivery and billing address, telephone number, e-mail address, and details of the payment method you have chosen. The data collected here is always transmitted to us in encrypted form and, if necessary for the process, to service providers contractually bound by us, such as transport and/or payment service providers.

Our website offers you the opportunity to register by providing personal data. Registration serves to provide better service to you as a user, to carry out pre-contractual measures, and for the fulfillment and billing of a contract. Upon termination of the user account, your data will be deleted with regard to the user account, unless there are commercial, tax, or administrative retention periods to be observed.

In our online shop, we use session cookies to store the contents of your shopping cart, as well as persistent cookies to store the login status. We only disclose your data to third parties for the purpose of delivery, payment, or within the scope of legal permissions and obligations to legal advisors and authorities. A disclosure and processing of your data in third countries only takes place if it is necessary for the fulfillment of the contract.

8. Retention period of your data

Your personal data that has been provided to us through our website will only be stored for as long as is necessary to fulfill the purpose for which it was entrusted to us and for as long as storage is required. If commercial, tax, or administrative retention periods are to be observed, certain data may be stored for up to 6 or 10 years.

9. Your data protection rights

As a data subject whose data we process, you have extensive rights under the EU General Data Protection Regulation. You have the right to obtain information about your personal data processed by us, in particular the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, and the planned retention period or the criteria for determining the retention period. If you no longer agree with the processing or storage of your personal data or if your data is incorrect, you have the right to rectification, erasure, or restriction of processing. Upon your corresponding request or revocation, we will make the necessary corrections or arrange for the deletion or restriction of processing of your data, insofar as this is permissible under applicable law. Furthermore, if consent has been given, you have the right to object to processing at any time for the future, the right to data portability, and the right to lodge a complaint with a supervisory authority.

10. Data encryption

In order to protect the confidentiality of your data, we use current state-of-the-art encryption methods (e.g., SSL) via HTTPS when transmitting your data.

11. Cookie usage

To make visiting our website user-friendly and also to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are downloaded by the websites you visit to your computer or mobile device. This allows the website to recognize your device when you use the website and also when you return at a later time. This helps to facilitate the use of the site and make it more personalized. By using cookies, we collect and process certain user information from you to the individual extent of the text files, such as browser and location data, as well as IP address. Cookies are automatically deleted after a predetermined period, which may differ depending on the cookie. If you do not disable cookies or use the opt-out function, we assume that you accept the use of cookies.

12. Use of script libraries – Google Webfonts

In order to display the content of our website correctly and in a graphically appealing manner across different browsers, we use script and font libraries such as Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are transferred to your browser’s cache to avoid multiple loading. If your browser does not support Google Webfonts or blocks access, content will be displayed in a default font.

When script or font libraries are called up, a connection is automatically established to the operator of the library. It is theoretically possible, although currently unclear whether and if so for what purpose, that the operator of such libraries also collects data.

You can find the data protection policy of the library operator Google here: https://www.google.com/policies/privacy/

13. Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of the website is generally transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data held by Google. We have also expanded Google Analytics on this website with the code "anonymizeIP," which ensures that your IP address is masked, so all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of our website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and Internet usage to the website operator. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to fully use all functions of this website.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

We also use Google Analytics to evaluate data from DoubleClick cookies and AdWords for statistical purposes. If you do not want this, you can disable it via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=en).

14. Google AdWords Conversion-Tracking

Our websites use the online marketing program “Google AdWords” for conversion tracking, also known as Google AdWords Conversion-Tracking. This is an analysis service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

If you click on an ad placed by Google, a conversion-tracking cookie is placed on your computer. These special cookies have a limited validity, do not contain personal data, and are not used for personal identification.

If you are redirected to our website from one of these ads and the cookie in your browser has not yet expired, Google and we can recognize that someone clicked on the ad and was redirected to our site.

The information obtained with the help of the Google AdWords conversion cookies is used to compile statistics.

You can deactivate personalized advertising for you in Google’s ad settings. Instructions can be found here: https://support.google.com/ads/answer/2662922?hl=en

For more information, please refer to Google’s privacy policy under the following link: https://www.google.com/intl/en/policies/privacy/

15. Use of Google reCAPTCHA

Our website uses the web analysis program “reCAPTCHA v3.” This is an analysis service by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

With the help of reCAPTCHA v3, information for risk analysis is obtained and is used exclusively for protecting our online shop, e.g., against spam or misuse. For more information, please refer to Google’s privacy policy under the following link: https://www.google.com/intl/en/policies/privacy/

16. Bing Ads Conversion-Tracking

We use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, on our pages. A cookie is placed on your computer by Microsoft Bing Ads if you reached our website via a Microsoft Bing ad. Microsoft Bing and we can thus recognize that someone clicked on an ad, was redirected to our website, and reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information regarding the identity of the user is disclosed.

If you do not want Microsoft to use information about your behavior as explained above, you can refuse the cookie required for this – for example via a browser setting that generally disables the automatic setting of cookies. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website, as well as Microsoft’s processing of this data, by declaring your objection at the following link: http://choice.microsoft.com/en-US/opt-out. For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit Microsoft’s website at https://privacy.microsoft.com/en-us/privacystatement.

17. Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins to display these videos is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit a page containing a YouTube plugin, a connection to YouTube’s servers is established. YouTube is notified which page you are visiting. If you are logged into your YouTube account (Google account), YouTube can assign your browsing behavior to you personally. You can prevent this by logging out of your YouTube account (Google account) beforehand.

When a YouTube video is started, Google uses cookies that collect information about user behavior. If you have disabled the storage of cookies for the Google Ads program, you should not encounter such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you can do so in your browser settings.

For more information about data protection at “YouTube,” please see the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy/

18. Personalized advertising

Our website uses the remarketing function within the online advertising program Google AdWords from Google Inc. (“Google”) with cross-device features such as Google DoubleClick. This allows us to present ads based on your interests to users of our website on other websites in the Google Display Network, such as “Google Ads” on Google or on third-party websites. For this purpose, your interaction on our website is analyzed, e.g., which products were clicked on, to be able to display targeted advertising to you on other pages even after visiting our website. Google sets cookies for this purpose, which record your visits. These cookies serve only to uniquely identify a web browser on a particular computer and are not used to identify a person. No personal data is stored in the process.

This data may also be transferred to the USA. There is an adequacy decision from the European Commission for data transfers to the USA.

You can disable cross-device remarketing by Google by downloading and installing the plugin provided by Google at www.google.com/settings/ads/plugin or by deactivating it under the following link: https://www.google.com/settings/ads/onweb/

Further information on Google Remarketing and Google’s privacy policy can be found under the following link: www.google.com/privacy/ads/.

19. Use of social media plugins

We use plugins from various social networks on our website. When you access our website, these plugins cause data such as your IP address to be transmitted to the providers’ servers, and possibly which pages of our site have been or are being accessed. Since we have no influence on how these plugins collect, store, and further process the data, we refer you to the respective providers’ privacy statements.

• Google: https://policies.google.com/privacy?hl=en
• Instagram: https://help.instagram.com/
• Twitter: https://twitter.com/en/privacy
• Facebook: https://en-gb.facebook.com/policy.php

To prevent plugin providers from collecting the data mentioned above through your visit to our website and linking it directly to your provider account, please log out of your accounts with these providers before visiting our site.

20. Use of Facebook plugins and components

This website uses so-called social plugins (“Plugins”) from the social network Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the words “Social Plugin from Facebook” or “Facebook Social Plugin.” An overview of Facebook plugins and what they look like can be found here: http://developers.facebook.com/plugins.

If you call up a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the webpage. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a server operated by Facebook in the USA and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or leaving a comment, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and displayed to your Facebook friends. Facebook may use this information for the purposes of advertising, market research, and designing Facebook pages to meet user needs. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website regarding the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website. For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, please refer to Facebook’s privacy notice: http://www.facebook.com/policy.php.

21. Use of review platforms

Integration of the Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to protect our overriding legitimate interests, within the scope of a balancing of interests, in an optimal marketing of our offer by enabling a safe purchase, pursuant to Art. 6 (1) sentence 1(f) GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is provided by a CDN (Content Delivery Network) provider as part of processing on behalf of Trusted Shops GmbH. Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. You can find more information on the data protection of Trusted Shops GmbH here: https://www.trustedshops.de/impressum/#datenschutz

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of the call, the amount of data transferred, and the requesting provider (access data), and documents the call. Individual access data is stored in a security database for the analysis of security anomalies. Log files are automatically deleted no later than 90 days after creation.

Additional personal data is transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. It is checked automatically using a neutral parameter, the e-mail address hashed by cryptological one-way function, whether you are already registered for product use. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before being transmitted. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfillment of our and Trusted Shops’ overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional rating services in accordance with Art. 6 (1) sentence 1(f) GDPR. Further details, including how to object, can be found in the above-mentioned Trusted Shops privacy policy, which is also linked in the Trustbadge.

shopauskunft.de

On our website, we use shopauskunft.de, a review service by Shopauskunft.de GmbH & Co. KG, Habichthorst 38a, 22459 Hamburg, Germany.

Shopauskunft.de provides you with a feedback form about our website and allows you to leave a review about your user experience and our product quality. All information you enter here is voluntary. Your feedback is then published on https://www.shopauskunft.de. Product reviews can additionally be published on our website and may also appear in Google search results.

Your data entered on shopauskunft.de may be transferred to countries outside the European Union, such as the USA or other third countries that guarantee adequate protection of these data. For more information, please refer to the privacy policy of shopauskunft.de: https://www.shopauskunft.de/datenschutz.

Trustpilot

On our website, we use Trustpilot, a review service by Trustpilot, Inc, 245 5th Avenue, 5th floor, New York, NY 10016, USA.

Trustpilot provides you with a feedback form about our website and allows you to leave a review about your user experience and our product quality. All information you enter here is voluntary. Your feedback is then published on https://www.trustpilot.com. Product reviews can additionally be published on our website and may also appear in Google search results.

Your data entered on Trustpilot may be transferred to countries outside the European Union, such as the USA or other third countries that guarantee adequate protection of these data. For more information, please refer to the privacy policy of Trustpilot: https://de.legal.trustpilot.com/end-user-privacy-terms.

22. Product reviews and comments

If you submit a review of products or post comments, we process and store your IP address on the basis of our legitimate interest pursuant to Article 6 (1)(f) GDPR. This is done for legal reasons, in particular in the event of a violation of the law through your review (e.g., unlawful content or insults). We reserve the right to delete reviews and comments if they are unlawful in any way or if third parties complain that they are unlawful.

We also store the data you voluntarily provide to us when submitting your review either via the form or another method. The reviews are published on our website. In the review form, the mandatory fields are marked separately. You may use a pseudonym instead of your real name. We carry out an internal assignment of your review to your customer account.

The legal bases for the storage and processing of your data are Article 6 (1)(a) – consent, Article 6 (1)(b) – contract performance, and (f) – legitimate interests GDPR. You may revoke your consent at any time by sending us a message with your revocation request via our contact form at https://www.felgenoutlet.de/de/kontakt. The legality of any data processing that has already taken place remains unaffected by the revocation.

The following personal data is processed when you submit a review:

• Overall rating (star rating)
• Optional ratings such as workmanship, image fidelity, etc. (star rating)
• Your entry in the “Displayed name” field
  (Note: Pseudonyms can be used here.)
• Photos
• Heading of your review
• Your comment / product review text

The data you provide for the product review is stored until you revoke your product review or request its deletion.

23. Use of AI-powered chat

We offer an AI-powered chat function on our online shop to provide you with efficient and modern customer support. We use technology from OpenAI, with the provider Forge42 UG acting as an integration service provider.

Provider of the AI technology

The AI-powered chat is provided by:

Forge42 UG
Kötzschenbroder Straße 140A
01139 Dresden, Germany

We use technology from OpenAI to provide the AI chatbot. OpenAI processes the data you enter solely on our behalf and in accordance with our instructions (processor under Art. 28 GDPR). OpenAI is based in the USA. We have concluded the necessary data processing agreements with OpenAI and ensure that an adequate level of data protection is guaranteed by appropriate safeguards (e.g., standard contractual clauses pursuant to Art. 46 GDPR).

OpenAI, L.L.C.
Regarding: Privacy
3180 18th St
San Francisco, CA 94110, USA
OpenAI Privacy Policy: click here

Type of data processed

When using the AI chat, only anonymized data is processed:

• Anonymized chat ID for technical functionality
• Anonymized chat histories for service optimization
• Contextual information from our e-commerce system, e.g., viewed products
• Technical metrics in anonymized form for analysis and improvement of chat performance

No personal data such as name, address, or email is processed. If users voluntarily provide personal data in the chat, it is only used for discussing the issue and is not stored or further processed.

Purpose of data processing

Data processing takes place for the following purposes:

• Provision and technical functionality of the AI-powered chat
• Context-based optimization of responses to customer inquiries
• Improvement of service quality through anonymized analyses

Legal basis

The data is processed on the basis of our legitimate interest under Art. 6 (1)(f) GDPR to optimize customer service.

Insofar as consent is obtained, processing is carried out solely based on your consent under Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, which can be revoked at any time.

Storage and deletion of data

• Anonymized chat data is stored for a maximum of 6 months and then automatically deleted.
• Personally submitted data is not stored or further processed.

Place of data processing

• The primary processing is carried out on servers in Germany by Forge42 UG.
• The AI processing is carried out by OpenAI in the USA.
• Due to complete anonymization, no standard contractual clauses (SCCs) are required.
• Technical and organizational measures have been implemented to ensure data remains anonymous.

Cookies and tracking

• The chat uses technically necessary session cookies to ensure its functionality.
• These cookies are integrated into our existing cookie banner.
• No additional tracking is performed via the chat function.

Your rights

Even though no personal data is processed, you still have the right to:

• Be informed about the data processing
• Object to the use of the chat
• Request a restriction of processing

For more information about your rights, please see our complete privacy policy.

Consent and revocation

Using the chat is voluntary. When you start the chat, you will see a notice indicating you are communicating with an AI. The privacy policy is also provided in the chat window via a link.

• Before use, you may be asked to give consent via our cookie banner or a separate checkbox.
• You can revoke this consent at any time by deactivating the chat function or contacting us directly.

Security measures

To ensure a high level of data protection, we use various security measures, including:

• Public/Private Key Encryption
• JWT session tokens
• Row Level Security (RLS)
• CORS origin support
• Rate limiter integration

24. Data protection notices according to the EU General Data Protection Regulation

In addition to these website-specific data protection notices, the data protection notices according to the EU General Data Protection Regulation also apply.

• Information obligations for customers (pdf link)
• Information obligations for suppliers (pdf link)

25. Disclaimer

We occasionally refer to third-party websites. Although we carefully select these third parties, we cannot assume any warranty or liability for the accuracy or completeness of the content and the data security of third-party websites. Nor does this privacy policy apply to linked third-party websites. All information contained on this website has been checked with great care. However, we do not guarantee that the content of our own websites is always correct, complete, and up to date. Substantial changes to this privacy policy will be updated online here in a timely manner.

26. Legal validity of this data privacy statement

This data privacy statement is to be regarded as part of our website offering. If sections or individual terms of this text no longer or not fully comply with current legal requirements, the remaining sections of the text shall remain unaffected in their content and validity.

© 11/2021 German eTrade