Data protection

The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

The GreenOutfitter
At Scheirer Feld 13
85640 Putzbrunn

Your data subject rights
You can exercise the following rights at any time using the contact details provided for our data protection officer:

• Information about your data stored by us and their processing (Article 15 GDPR),
• Correction of incorrect personal data (Article 16 GDPR),
• Deletion of your data stored by us (Article 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Article 18 GDPR),
• Objection to the processing of your data by us (Article 21 GDPR) and
• Data transferability if you have consented to data processing or have concluded a contract with us (Article 20 GDPR).

If you have given us your consent, you can revoke this at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. B. to the competent supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible body.

You can find a list of the supervisory authorities (for the non-public area) with their addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when visiting our website Type and purpose of processing:
If you access our website, ie if you do not register or otherwise submit information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.

In particular, they are processed for the following purposes:

• Ensuring trouble-free connection establishment of the website,
• Ensuring smooth use of our website,
• Evaluation of system security and stability as well
• for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this type may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis:
The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

Provision prescribed or required:
The provision of the aforementioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

cookies
Type and purpose of processing:
Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred to your hard drive by a website server. As a result, we automatically receive certain data, e.g. B. IP address, browser used, operating system and your connection to the Internet.

Cookies cannot be used to start programs or deliver viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable our websites to be displayed correctly.

Under no circumstances will the data we collect be passed on to third parties or be linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can disable the use of cookies at any time through your browser settings. Please use the help functions of your internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Duration of storage and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

2 years

Insofar as these cookies can (also) affect personal data, we will inform you about this in the following sections.

You can delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how these cookies can be deleted or how their storage can be blocked in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Provision of paid services
Type and purpose of processing:
In order to provide services that are subject to a charge, we will ask for additional data, such as payment details, in order to be able to carry out your order.

Legal basis:
The processing of the data required for the conclusion of the contract is based on Article 6 (1) (b) GDPR.

Recipient:
Recipients of the data may be processors.

Storage duration:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to the content and services we offer.

Newsletter
Type and purpose of processing:
Your data will only be used to send you the subscribed newsletter by e-mail. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances that are relevant to the service or the registration (e.g. changes to the newsletter offer or technical circumstances).

For an effective registration we need a valid e-mail address. In order to check that the owner of an e-mail address is actually registering, we use the "double opt-in" procedure. To do this, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the response requested here. Further data is not collected. The data will only be used to send the newsletter and will not be passed on to third parties.

Legal basis:
On the basis of your expressly given consent (Art. 6 Para. 1 lit. a DSGVO), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option given at the end of this data protection notice.

Recipient:
Recipients of the data may be processors.

Storage duration:
The data will only be processed in this context as long as the corresponding consent has been given. After that they will be deleted.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid email address and your name. This is used to allocate the request and then to answer it. Providing further data is optional.

Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

Recipient:
Recipients of the data may be processors.

Storage duration:
Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code and delete your data after these periods have expired.

Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

Use of Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses so-called "cookies", i.e. text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purpose of the data processing is to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are then to be provided.

Legal basis:
The data is processed on the basis of the user’s consent (Article 6 (1) (a) GDPR).

Recipient:
The recipient of the data is Google as the processor. For this we have concluded the corresponding order processing contract with Google.

Storage duration:
The data will be deleted as soon as they are no longer required for our recording purposes.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. We have also concluded standard data protection clauses with Google for the use of Google Analytics.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Withdrawal of consent:
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Browser add-on to deactivate Google Analytics.

In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by clicking on this link. An opt-out cookie will be installed on your device. This will prevent future detection by Google Analytics for this website and for this browser as long as the cookie remains installed in your browser.

Profiling:
With the help of the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and their interests analyzed. For this purpose we create a pseudonymous user profile.
Use of script libraries (Google Webfonts)

Type and purpose of processing:
In order to display our content correctly and graphically appealing across browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter "Google") to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).

Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently also unclear whether and, if so, for what purposes - that the operator collects Google data in this case.

Storage duration:
We do not collect any personal data through the integration of Google Webfonts.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:
The provision of personal data is neither required by law nor by contract. However, without the correct representation of the content of standard fonts, it cannot be made possible.
Withdrawal of consent:

The programming language JavaScript is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this can lead to functional restrictions on the website.

Using Adobe Typekit
Type and purpose of processing:
We use Adobe Typekit for the visual design of our website. Typekit is a service provided by the Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter "Adobe") that gives us access to a font library. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. This gives Adobe the information that our website was accessed from your IP address. You can find more information about Adobe Typekit in Adobe's privacy policy, which you can access here: https://www.adobe.com/de/privacy/policy.html

Legal basis:
The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Article 6 (1) (a) GDPR).

Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. Information about the use of your data by Adobe Typekit Web Fonts can be found at https://typekit.com/ and in the Adobe Typekit data protection declaration: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage duration:
We do not collect any personal data through the integration of Adobe Typekit Web Fonts.

Third country transfer:
Adobe is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy) . Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).

Recipient:
Calling up YouTube automatically triggers a connection to Google.

Duration of storage and revocation of consent:
Anyone who has deactivated the storage of cookies for the Google Ad program will not have to reckon with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Google AdWords
Type and purpose of processing:
Our website uses Google Conversion Tracking. The operator of the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you came to our website via an ad placed by Google, Google Adwords will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).

Recipient:
Every time you visit our website, personal data, including your IP address, is sent to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

Storage duration:
These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:
If you do not wish to participate in the tracking, you can reject the setting of a cookie required for this - for example by means of a browser setting that generally deactivates the automatic setting of cookies or set your browser so that cookies from the "googleleadservices.com" domain are blocked.

Please note that you may not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

Use of Google Remarketing
Type and purpose of processing:
This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter "Google").

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they access websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that refer to content that the visitor has previously accessed on websites that use Google's remarketing function.

Legal basis:
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).

Withdrawal of consent:
According to its own statements, Google does not collect any personal data during this process. If you still do not want Google's remarketing function, you can always deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising through the Ad Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

SSL encryption
In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Processors used

Change to our privacy policy
We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. B. when introducing new services. The new data protection declaration will then apply to your next visit.

Questions to the data protection officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:

Florian Gries
florian.gries@green-outfitter.com

Country/region

Language

Data protection

Contact form