This data protection declaration informs you about how we handle your data. In order to make the processing of your data comprehensible for you, we would like to give you an overview of this processing with the following information. To ensure fair processing, this data protection declaration contains general information about how we handle your data as well as information about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
We will also inform you in detail about
Infinity Brands GmbH (hereinafter referred to as “we” or “us”) is responsible for data processing.
If you have any questions or suggestions about this information or would like to contact us about asserting your rights, please send your request to
Infinity Brands GmbH
Trogerstrasse 40, 81675 Munich, Germany
The term “personal data” under data protection law refers to all information relating to a specific or identifiable person.
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place based on legal permission. We process personal data.
Unless otherwise stated in the following information, we only store the personal data for as long as is necessary to achieve the processing purpose or to fulfil our contractual or legal obligations. Such statutory retention requirements can arise in particular from commercial or tax regulations.
We use contract processors to process your data. These include, for example hosting, maintenance and support of IT systems, the provision of certain services and functions on our website, order processing, marketing measures or the destruction of files and data carrier’s processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out the data processing exclusively for the person responsible and are contractually obliged to guarantee suitable technical and organizational measures for data protection.
In addition, we may transmit your personal data to positions such as postal and delivery services, house bank, tax advisors/auditors or the financial administration.
If your data is transmitted to other recipients, we will inform you under the respective processing procedure.
If you exercise your rights according to Art. 15 to 22 GDPR, we process the transmitted personal data for the purpose of implementing these rights by us and to be able to provide evidence of this. For the purpose of providing information and preparing it, we will only process data stored for this purpose and for purposes of data protection control and otherwise the processing in accordance with Art. 18 GDPR.
This processing is based on the legal basis of Art. 6 Paragraph 1 letter c) GDPR in conjunction Art. 15 to 22 GDPR and Paragraph 34 Section 2 BDSG.
As a data subject, you have the right to assert your rights as a data subject. In particular, you have the following rights:
In accordance with Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on the legal basis of Art. 6 Paragraph 1 letter e) or f) GDPR are based, for reasons that arise from your particular situation to object. If we process personal data about you for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Paragraph 2 and Paragraph 3 GDPR to lodge an objection.
You can reach our data protection officer under the following contact details: firstname.lastname@example.org.
When you use the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically recorded by us during your visit to the website. In data protection law, the IP address is generally considered to be personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
Visiting our website may involve the transmission of certain personal data to third countries, i.e. countries in which the GDPR does not apply. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country.
If there is no such adequacy decision by the European Commission, personal data will only be transferred to a third country if there are suitable guarantees as per Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is given.
Unless otherwise stated below, we use the EU standard contractual clauses as suitable guarantees for the transmission of personal data to processors in third countries: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri= CELEX% 3A32010D0087 .
When using our website for informational purposes, general information is initially stored automatically (i.e. not via registration), which your browser sends to our server. By default, this includes browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing takes place to safeguard our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 letter f) GDPR. This processing serves the technical administration and the security of the website.
The stored data will be deleted after 30 days if there is no justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject based on the stored information. The kind15 to 22 GDPR therefore apply in accordance with Art. 11 Paragraph 2 GDPR does not apply unless you provide additional information that enables your identification to exercise your rights as set out in these articles.
Our website contains a contact form which you can use to send us messages. The transfer of your data is encrypted (recognizable by the “https” in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide it means that we cannot process your request. The provision of further data is voluntary. Alternatively, you can send us a message using the contact e-mail address.
If your request is aimed at concluding or executing a contract with us, Art. 6 Paragraph 1 letter b) GDPR legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with inquiring persons. The legal basis for data processing is then Art. 6 Paragraph 1 letter f) GDPR.
If you order a product via our website, we process personal data for contract processing or in order to be able to provide you with the ordered product. As part of the booking or order process, we only process the data that you have entered in the input mask and, if applicable, payment information if you pay by bank transfer in advance. In order to be able to deliver the ordered products to you, we will transmit the data required for the delivery to one of our shipping service providers as stated in the order.
You also have the option of creating a customer account.
The legal basis for the processing is Art. 6 Paragraph 1 letter b) GDPR. All data fields marked as mandatory are required to process your booking or order. Failure to provide it means that we cannot process your booking or order. The provision of further data is voluntary.
We offer you the option to pay by credit card. Please note that the respective payment information is collected and processed by the respective payment service providers on their own responsibility.
In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.”
5. CUSTOMER ACCOUNT
You can create a customer account on our website and log in as a customer on our website. To do this, you must first register on our website. The information required for this can be found in the registration form. The provision of the information that is marked as mandatory is absolutely necessary so that the registration can be completed.
You can use the customer account to take advantage of shipment tracking and order history, as well as pre-made forms during the checkout for subsequent orders.
The data provided will be processed for the purpose of providing the service. The processing is based on the legal basis of Art. 6 Paragraph 1 letter b) GDPR.
On our website, we offer the option of subscribing to receiving marketing emails such as our newsletter after registration, we will inform you regularly about the latest news about our offers and events remind you of shop items in your shopping cart. A valid email address is required to register. To verify the e-mail address, you will first receive a registration e-mail, which you have to confirm via a link (double opt-in)If you subscribe to the newsletter on our website, we process personal data such as your email address and your name on the basis of the consent you have given.
The processing is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR. You can revoke your consent at any time with effect for the future, for example via the “Unsubscribe” link in the newsletter or by contacting us via the above-mentioned channels. The legality of the use of the data that has already taken place remains unaffected by the withdrawal. When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 Paragraph 1 letter c) in conjunction with Art. 7 Paragraph 1 GDPR).
The newsletters contain a so-called “web beacon”, i.e., a pixel file that is retrieved when the newsletter is opened. When opening, technical information such as your browser and system information, IP address and the time of opening are collected. This data and information is used to technically improve our service based on your reading behaviour. This also means that it is recorded when an e-mail or a newsletter, opened and whether a link was clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. It is not our aim to observe individual users. The statistical collection and analysis of the data enables us to recognize the reading habits of our users and thereby better adapt our content to the users. This also serves to send different content to the users according to the interests of our users.
The legal basis for statistical collection and analysis is Art. 6 Paragraph 1 letter f) GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users.
You can object to the statistical collection and evaluation by unsubscribing from the newsletter a separate revocation of the statistical evaluation is unfortunately not possible.
We use the WooCommerce statistics function on our website. This enables us to measure the reach of our website and receive statistical analysis of visitor behaviour on our website. The data is processed on the servers of WooCommerce Ireland Ltd., which we have commissioned to process.
The legal basis for data processing in connection with the WooCommerce statistics function is Art. 6 Paragraph 1 letter f) GDPR and the processing serve our legitimate interest in the analysis of user behaviour on our website and the possible needs-based design. You can object to this processing at any time in the cookie settings.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by the user’s browser will not be merged with other Google data.
We use the Google Universal Analytics variant. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This enables us to put individual user actions in context and analyse long-term relationships.
The data on user actions are stored for a period of 14 months and then automatically deleted. The data whose storage period has expired is automatically deleted once a month.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 Paragraph 1 letter a) GDPR. You can revoke your consent at any time under “Cookie Settings”.
You can also prevent the storage of cookies by Google Analytics by setting your browser software accordingly. You can also prevent the information generated by the cookie from being recorded by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. Please also note that we document the consent you have given to meet our obligation to provide evidence under Art. 7 Paragraph 1 GDPR. Since we are obliged to do this, this storage is based on the legal basis of Art. 6 Paragraph 1 letter c) GDPR).
We use the Facebook pixel from Facebook Inc. on our website (USA), or if you are based in the EU, Facebook Ireland Ltd (Ireland/EU) (“Facebook”).
The Facebook pixel is triggered by Facebook when you visit our website and can be a so-called Cookie, ie. a small file. This enables us to perform various functions, which we will describe in detail below.
Function: Conversion Tracking
With the help of the Facebook pixel, we can track the behavior of users after they have been forwarded to the provider’s website by clicking on a Facebook ad (so-called “Conversion”)In this way we can also record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we will inform you of based on our level of knowledge. Facebook can connect this data with your Facebook account and also use it for its own advertising purposes, in accordance with the Facebook data usage guidelines https://www.facebook.com/about/privacy/You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can also be stored on your computer for these purposes.
If you then log into Facebook or visit Facebook while logged in, your visit to our online offer will be noted in your profile. The data collected about you are still anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes.
This processing is carried out for the purpose of obtaining information about the effectiveness of the Facebook advertisements. It takes place exclusively with your consent and is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR.
You can revoke your consent by withdrawing your consent under “Cookie Settings” on our website.
You can also object to the collection by the Facebook pixel and the use of your data to display Facebook ads at the following address: https://www.facebook.com/settings?tab=ads .
Function: Custom Audience
We also use the Custom Audience service via the Facebook pixel. Facebook uses the integrated pixel to record visitors to our website and their data as the basis for displaying advertisements (Facebook Ads). The pixel transmits general information about the browser session to Facebook as well as a non-reversible and non-personal checksum (hash value), which is generated from your Facebook ID.
We also use the Custom Audience function in the “Advanced Matching” mode. This causes certain data (email address) that you enter on our website to be transmitted to Facebook in encrypted form as a hash value. Facebook can compare these hash values with the corresponding hash values of data that have already been provided by Facebook users. In this way it is determined which customers are also Facebook users in order to be able to show them targeted advertising on the Facebook platform.
Details on how Facebook handles your data, as well as your rights and setting options to protect your personal data, can be found in Facebook’s data protection information at https://www.facebook.com/privacy/explanation .
This processing takes place for the purpose of marketing our offers via the target group-specific display of advertising and takes place with your consent. It is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR.
You can revoke your consent by withdrawing your consent under “Cookie Settings” on our website.
If, as a Facebook user, you would also like to object to the use of the Facebook Custom Audiences website for the future (“opt out”), you can do so at https://www.facebook.com/ads/Webseite_custom_audiences .
We use the online advertising program Google Ads from Google Ireland Limited (Ireland/EU), through which we place advertisements on the Google search engine. If you reach our website via a Google ad, Google places a cookie on your device (“conversion cookie”) Each Google Ads customer is assigned a different conversion cookie, so that the cookies are not tracked via the websites of different Ads customers. The information obtained with the help of the cookie is used to generate conversion statistics. This is how we find out the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified.
Insofar as personal data are processed in this context, this is done with your consent and this is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR. You can revoke your consent by withdrawing your consent under “Cookie Settings”. You can also object to being included in conversion tracking by preventing cookies from being set in your browser settings.
We use the conversion and tracking tool Bing Ads from Microsoft Corporation (USA) on our website. Microsoft stores a cookie on the user’s computer to enable analysis of the use of our online offering. The prerequisite for this is that the user has reached our website via an advertisement from Microsoft Bing Ads. In this way, Microsoft and we can recognize that someone who clicked on an ad was redirected to our online offer and reached a predetermined target page. We only see the total number of users who clicked on a Bing ad and were then redirected to the target page (“conversions”). No IP addresses are saved. No further personal information about the identity of the user is communicated.
Further information on data protection and the cookies used by Microsoft Bing Ads can be found in Microsoft’s data protection declaration: https://privacy.microsoft.com/de-de/privacystatement .
We only use Microsoft Bing Ads with your consent. The legal basis for using this service is Art. 6 Paragraph 1 letter a) GDPR. You can revoke your consent at any time by declaring the revocation of your consent under the point “Cookie Settings”. If you do not want to participate in the Bing Ads tracking process, you can also object to this at Microsoft: http://choice.microsoft.com/de-DE/opt-out .
We use the Pinterest tag of the provider Pinterest Europe Ltd on our website (Ireland) a. With the help of the Pinterest tag, Pinterest Europe Ltd is able to identify the visitors of our online offer as a target group for the presentation of advertisements on the social media platform Pinterest (so-called “Pinterest Ads”)Accordingly, we use the Pinterest tag in order to only display the Pinterest ads placed by us to Pinterest users who have also shown an interest in our online offer or who have certain features (e.g. Interests in certain topics or products, which are determined based on the websites visited), which we transmit to Pinterest. With the help of the Pinterest tag, we also want to ensure that our Pinterest ads correspond to the potential interest of the users and are not annoying. With the help of the Pinterest tag, we can also understand the effectiveness of the Pinterest advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest advertisement.
The Pinterest tag is integrated by Pinterest when you visit our website with your consent and can place a cookie on your device. This is used to perform the retargeting and conversion measurement described above. If you then log in to Pinterest or visit Pinterest while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about your identity.
The use of the Pinterest tag and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
You can find more information about the processing of data when using Pinterest at https://policy.pinterest.com/de/privacy-policy .
We use services and content provided by third parties on our website (hereinafter collectively referred to as “content”). For such an integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third-party provider.
This data processing takes place in each case to safeguard our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 Paragraph 1 letter f) GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. Such an extension is, for example, the matrix-based uMatrix firewall for the Firefox and Google Chrome browsers. Please note that this can lead to functional restrictions on the website.
We have integrated content from the following services provided by third parties into our website:
We only use certain services provided by third-party providers on our website with your consent. The legal basis for the use of these services is Art. 6 Paragraph 1 letter a) GDPR. You can give your consent for these services in our consent management or manage the cookie settings under the heading “Functional” based on your consent, we use the following services:
We are represented with a company page on several social media platforms. We would like to offer further possibilities for information about our company and for exchange. Our company has corporate pages on the following social media platforms:
If you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile used also regularly represents personal data. This also includes messages and statements made using the profile. In addition, certain information is often automatically collected during your visit to a social media profile, which can also represent personal data.
When you visit our Facebook or Instagram page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller for this processing of personal data is Facebook Ireland Ltd (Ireland/EU -“Facebook”). You can find further information about the processing of personal data by Facebook at https://www.facebook.com/privacy/explanation .
Facebook offers the possibility to object to certain data processing; Relevant information and opt-out options can be found at https://www.facebook.com/settings?tab=ads .
Facebook provides us with statistics and insights for our Facebook and Instagram pages in anonymised form, with the help of which we obtain information about the types of actions that people take on our site (so-called “Page Insights”). These page insights are created on the basis of certain information about people who have booked our site. This processing of personal data is carried out by Facebook and us as jointly responsible. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on this knowledge. The legal basis for this processing is Art. 6 Paragraph 1 letter f) GDPR. We cannot assign the information obtained via the page insights to individual Facebook profiles that interact with our Facebook page. We have reached an agreement with Facebook on processing as jointly responsible, in which the distribution of data protection obligations between us and Facebook is specified. Details about the processing of personal data for creating page insights and the agreement concluded between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_dataWith regard to this data processing, you have the option of asserting your data subject rights (see “Your rights”) against Facebook. Further information can be found in Facebook’s data protection declaration at https://www.facebook.com/privacy/explanation .
Please note that according to the Facebook data protection regulations, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which an adequacy decision by the European Commission according to Art. 45 GDPR or on the basis of suitable guarantees according to Art. 46 GDPR.
The LinkedIn Ireland Unlimited Company (Ireland/EU -“LinkedIn”) is solely responsible for the processing of personal data when you visit our LinkedIn page. You can find more information about the processing of personal data by LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy .
If you visit our LinkedIn company page, follow this page or deal with the page, LinkedIn processes personal data in order to provide us with statistics and insights in an anonymous form. This gives us information about the types of actions that people take on our side (so-called. Page insights). For this purpose, LinkedIn processes data that you have already made available to LinkedIn via the information in your profile, such as:B. Data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. This processing of personal data in the context of page insights is carried out by LinkedIn and us as jointly responsible. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and to improve our company page based on this knowledge. The legal basis for this processing is Art. 6 Paragraph 1 letter f) GDPR. We have reached an agreement with LinkedIn on processing as jointly responsible, in which the distribution of data protection obligations between us and LinkedIn is specified. The agreement is available at:https://legal.linkedin.com/pages-joint-controller-addendumThereafter, the following applies:
Please note that in accordance with the LinkedIn data protection guidelines, personal data is also processed by LinkedIn in the USA or other third countries LinkedIn only transfers personal data to countries for which an adequacy decision by the European Commission according to Art. 45 GDPR or based on suitable guarantees according to Art. 46 GDPR.
In principle, Twitter Inc. is responsible for processing personal data when you visit our Twitter profile (USA) solely responsible. Further information on the processing of personal data by Twitter Inc. are available from https://twitter.com/de/privacy .
In principle, Snap Inc. is responsible for processing personal data when you visit our Snapchat channel sole responsible. Further information about the processing of personal data by Snap Incare available from https://www.snap.com/de-DE/privacy/privacy-policy/ .
In principle, Pinterest Europe Ltd is responsible for processing personal data when you visit our Pinterest profile sole responsible. Further information on the processing of personal data by Pinterest Europe Ltd are available from https://policy.pinterest.com/de/privacy-policy .
Google Ireland Limited (Ireland/EU) is solely responsible for the processing of personal data when you visit our YouTube channel. Further information about the processing of personal data by YouTube. OR you can get Google Ireland Limited at https://policies.google.com/privacy .
We also process information that you have made available to us via our company page on the respective social media platform. Such information can be the username used, contact details or a message to us. We only process this personal data regularly if we have expressly asked you to provide us with this data beforehand, for example in the context of a survey. We are solely responsible for this processing.
We process this data based on our legitimate interest in getting in contact with inquiring persons. The legal basis for data processing is Art. 6 Paragraph 1 letter f) GDPR.
In addition, we may process such communicated data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Paragraph 1 letter f) GDPR and serve our interest to further develop our offer and to inform you specifically about our offers. Further data processing can take place if you have given your consent (Art. 6 para 1 lit. a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 Paragraph 1 letter c) GDPR).
We use software to manage our company pages. If a user asks a question specified in more detail in the software via the comment function on one of our company pages, the text is displayed together with the user name of the user via the software. This data is also transmitted to the software provider. The sent text and the username will be deleted as soon as the request has been answered.
To establish or implement the contractual relationship with our customers, the processing of the personal master, contract and payment data provided to us is regularly required. The legal basis for this processing is Art. 6 Paragraph 1 letter b) GDPR. We also process customer and prospect data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Paragraph 1 letter f) GDPR and serve our interest to further develop our offer and to inform you specifically about offers from Infinity Brands GmbH. Further data processing can take place if you have given your consent (Art. 6 para 1 lit. a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 Paragraph 1 letter c) GDPR).
We can use the email address you provided when registering or ordering to inform you about our own similar products and services from SOJI. The legal basis is Art. 6 Paragraph 1 letter f) GDPR in conjunction§ 7 Paragraph 3 UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do this, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an email to email@example.com.
If you order a product via our order form or by phone, we process personal data for contract processing or in order to be able to provide you with the ordered product. As part of the ordering process, we only process the data that you have provided yourself. In order to be able to deliver the ordered products to you, we will transmit the data required for the delivery to one of our shipping service providers as stated in the order. The legal basis for the processing is Art. 6 Paragraph 1 letter b) GDPR. All data fields marked as mandatory are required to process your order. Failure to provide it means that we cannot process your order. The provision of further data is voluntary.
Status: April 2021