Privacy policy
Data
collection on our website
1. General Notes
The following information provides a simple overview of what happens
to your personal data when you visit our website. Personal data is any
data that can be used to identify you personally. Detailed information
on the subject of data protection can be found in our data protection
declaration listed below this text.
Who is responsible for the data collection on this
site?
The controller within the meaning of the European General Data
Protection Regulation (GDPR) for data processing on this website is
Teamdress Holding GmbH
Brandstücken 27
22549 Hamburg
Germany
Phone: + 49 40 800 905 01
e-mail: datenschutz@teamdress.de
Internet: https://www.teamdress.de
We respect your personal rights. We recognise the importance of the
personal data that we receive from you as a user of our website. We
respect the protection of your personal data and will process all data
obtained exclusively in accordance with the relevant data protection
regulations within the scope of our business purpose.
What is personal
data?
Personal data means any information relating to an identified or
identifiable natural person. An identifiable natural person is one who
can be identified, directly or indirectly, in particular by reference to
an identifier such as a name, an identification number, location data,
an online identifier or to one or more factors specific to the physical,
physiological, genetic, mental, economic, cultural or social identity of
that natural person.
Legal basis of
the processing
Insofar as we obtain your consent for the processing of personal
data, Art. 6 para. 1 sentence 1 lit. a of the European General Data
Protection Regulation (GDPR) serves as the legal basis.
The processing of personal data required for the fulfilment of a
contract with you is based on Art. 6 para. 1 sentence 1 lit. b GDPR.
This also applies to processing operations that are necessary for the
performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a
legal obligation to which we are subject, this is done within the
framework of Art. 6 para. 1 sentence 1 lit. c GDPR.
If the processing is necessary to safeguard a legitimate interest of
us or a third party and if your interests, fundamental rights and
freedoms do not outweigh the legitimate interest, Art. 6 para. 1
sentence 1 lit. f GDPR serves as the legal basis for the processing. If
information is stored on your end device, e.g. by means of cookies (see
also sections 5.2 and 5.6 in particular), the permissibility of data use
is additionally governed by Section 25 (1) TDDDG (consent) or, in the
case of mandatory storage processes, by Section 25 (2) No. 1
(communication process) or No. 2 (provision of a telemedia service)
TDDDG. Unless otherwise stated, the legitimate interest of our company
lies in the ongoing optimisation of our services and presentations in
order to continuously develop our services with due consideration of
your interests.
Data
erasure and storage duration
Your personal data will be deleted or blocked as soon as the
legitimate purpose of storage no longer applies. Data may also be stored
if this has been provided for. The data will also be blocked or erased
if a prescribed storage period expires, unless there is a need for
further storage of the data for other legal reasons, which we must
prove, e.g. due to legitimate interests in the defence of legal
claims.
Collection of
personal data
When you visit our website, we only process personal data if this is
necessary to provide a functional website and our content and services
or if consent has been given. This does not apply if the processing of
the data is required by law.
2.1 Hosting of the
website
The website is hosted by KCS-Internetlösungen Kröger
GmbH, Sierichstraße 20, 22301 Hamburg https://www.kcs.info.
The hoster receives the above-mentioned data as a processor on the basis
of an agreement in accordance with the requirements of Art. 28 GDPR.
2.2 Server log files
Each time our website is accessed, the user's access data required to
enable use is stored in a log file, which your browser automatically
transmits to us.
These are:
Browser type/ browser version
Operating system used
Date and time of the server request
IP address of the computer requesting the website;
Website from which the access was made (referrer URL)
accessed files;
amount of data transferred.
The log file is stored for the following purposes:
The legal basis for this data processing is Art. 6 para. 1 sentence 1
lit. f GDPR. Our legitimate interest follows from the above-mentioned
purposes for data collection. Under no circumstances do we use the data
collected for the purpose of drawing conclusions about your person. We
do not merge this data with other data sources. This data is
automatically deleted within one month, unless there are special
indications for longer storage in individual cases.
2.3 Required cookies
When our website is accessed, so-called "cookies" are stored on the
user's computer. Cookies are small text files stored in a dedicated file
directory on the computer. This file is used to identify the user's
computer for the duration of the session. These cookies cannot be
manipulated on the user's end device and can be deleted manually at any
time - most easily in the browser.
You can customise the handling of cookies in your Internet browser so
that cookies are rejected or only accepted after confirmation. Cookies,
in this case so-called "session cookies", serve the purpose of extending
the functionality of our website and making it as convenient as possible
for you to use. Please note that if you reject cookies, not all
components of our application may function properly.
The processing of the data by cookies is necessary for the purposes
mentioned for the provision of our service (offer of the website) in
accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, § 25 para. 2
TDDDG.
If you send us enquiries via the contact form, your details from the
form or via the e-mail address provided for contacting us, including the
contact details you provide there, will be stored by us solely for the
purpose of processing the respective enquiry and in the event of
follow-up questions. We will not pass this data on to third parties
without your consent. The corresponding data is used on the basis of
Art. 6 para. 1 sentence 1 lit. b GDPR.
2.5 Webshop
If you wish to place an order in our webshop, it is necessary for the
conclusion of the contract that you provide personal data that we
require for the processing of your order. Mandatory information required
for the processing of contracts is marked separately, other information
is voluntary. We process the data you provide to fulfil your order. The
legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
We may also process the data you provide in order to inform you about
other interesting products from our portfolio or to send you e-mails
with technical information.
Due to commercial and tax law requirements, we are obliged to store
your address, payment and order data for a period of ten years. However,
we restrict processing after two years, i.e. your data will only be used
to fulfil legal obligations.
To prevent unauthorised access by third parties to your personal
data, in particular financial data, the order process is encrypted using
TLS technology.
We also transmit your address data to the shipping service providers
we use for the purpose of processing your order. The legal basis for
this is Art. 6 para. 1 sentence 1 lit. b GDPR, as shipping is not
possible without the use of a shipping service provider. Furthermore, we
may also transmit your email address to the shipping service provider
for the purpose of informing you about the shipping status. In this
respect, the shipping service provider is obliged to use the e-mail
address exclusively for the purpose of notifying you. The legal basis
for this is our legitimate interest in ensuring that you receive your
shipment as easily as possible and receive the best possible service
from us, Art. 6 para. 1 sentence 1 lit. f GDPR.
3. Services from third-party
providers
The use of third-party services, in particular tracking tools and the
cookies set in this context, takes place - unless expressly stated
otherwise in the description of the service - on the basis of Art. 6
para. 1 sentence 1 lit. a GDPR / § 25 para. 1 TDDDG through your
consent, which can be revoked at any time. In this way, we want to
ensure a needs-based design and the ongoing optimisation of our website
(through statistical evaluations, the improvement of the retrievability
and presentation of content and the integration of requested
services).
3.1 Use of Matomo
We use the open source software Matomo to analyse and statistically
evaluate the use of the website. Cookies are used for this purpose (see
above). The information generated by the cookie about website use is
transmitted to our servers and summarised in pseudonymous user profiles.
The information is used to analyse the use of the website and to enable
a needs-based design of our website. The information is not passed on to
third parties. The IP address is not associated with other data relating
to the user. The IP addresses are anonymised so that they cannot be
associated (IP masking). Your visit to this website is currently
recorded by Matomo web analytics . Information from the third-party
provider on data protection can be found at Matomo
Cloud Privacy Policy - Matomo Analytics and Privacy
Policy - Analytics Platform - Matomo
3.2 Use of Google Maps
On this website we use the map function Google Maps from Google
Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4,
Ireland, which allows us to display interactive maps directly on the
website for your convenience.
By visiting the website, Google receives the information that you
have accessed the corresponding subpage of our website. In addition, the
above-mentioned data (5.1) is transmitted. The information collected in
this way is stored on servers, possibly also in the USA. This occurs
regardless of whether Google provides a user account through which you
are logged in or whether no user account exists. If you are logged in to
Google, your data will be assigned directly to your account. If you do
not wish your data to be associated with your Google profile, you must
log out before activating the button. Google stores your data as usage
profiles and uses them for the purposes of advertising, market research
and/or customising its website. Such an analysis is carried out in
particular (even for users who are not logged in) to provide customised
advertising and to inform other users of the social network about your
activities on our website. You have the right to object to the creation
of these user profiles, whereby you must contact Google to exercise this
right.
Further information on the purpose and scope of data collection and
its processing by the plug-in provider can be found in the provider's
privacy policy. There you will also find further information on your
rights in this regard and setting options to protect your privacy: https://policies.google.com/privacy?hl=de.
Our website uses the Consent Management Tool. We use this data to
ensure the full functionality of our website and to inform the user
about the use of cookies on our website and to obtain and record the
user's consent in accordance with the law
In order to obtain your valid consent to the use and storage of
cookies in the browser you use to access our website and to properly
document this, we use a consent management platform:
CookieFirst. This technology is provided by
Digital Data Solutions BV, Plantage Middenlaan 42a,
1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com
The legal basis for data processing is Art. 6 para. 1 lit. c GDPR in
conjunction with § 25 para. 2 no. 2 TDDDG. Only with an appropriate
mechanism for granting and managing consent can we comply with the legal
requirements. CMT is used to obtain the legally required consent for the
use of cookies
When you access our website, a connection is established with the CMT
server to enable us to obtain your valid consent to the use of certain
cookies. The cookies authorised by the user (cookie status), which
serves as proof of consent. CMT then stores a cookie in your browser in
order to be able to activate only the cookies to which you have
consented and to properly document this. The processed data will be
stored until the specified storage period expires (up to 12 months) or
you request the deletion of the data. Notwithstanding this, certain
statutory retention periods may apply.
The following data is automatically transmitted to the provider /
technical service provider of our CMT:
Anonymised IP address of the user;
The date and time of your visit to our website
Information about your browser
Information about your device
The URL of the website on which you have saved or updated your
consent settings
The approximate location of the user who has saved their consent
preferences
A universally unique identifier (UUID) of the website visitor who
clicked on the banner cookie
You can prevent the collection and processing of your data by our CMT
by deactivating the execution of script codes in the settings of your
browser or by installing a script blocker in your browser. Further
information on the scope of data processing by the CMT can be found in
the privacy policy of our CMT provider at
https://cookiefirst.com/legal/cookie-declaration/
https://cookiefirst.com/legal/privacy-policy/
4. Your rights
If we process your personal data on our website, you are a "data
subject" within the meaning of the GDPR. You have the following rights
vis-à-vis us:
You can request confirmation from us as to whether we are processing
your personal data. If such processing is taking place, you can request
the following information from us:
the purposes for which the personal data are processed;
the categories of personal data that are processed;
the recipients or categories of recipients to whom your personal
data have been or will be disclosed;
the planned duration of the storage of your personal data or, if
specific information on this is not possible, criteria for determining
the storage period;
the existence of a right of appeal to a supervisory
authority;
all available information about the origin of the data if the
personal data is not collected from you;
the existence of automated decision-making including profiling in
accordance with Art. 22 (1) and (4) GDPR and - at least in these cases -
meaningful information on the logic involved and the scope and intended
effects of such processing for you.
Furthermore, you have the right to request information about whether
your personal data is transferred to a third country or to an
international organisation. In this context, you may request to be
informed about the appropriate safeguards pursuant to Art. 46 GDPR in
connection with the transfer.
4.2 Right to rectification
You have the right to obtain from us the rectification and/or
completion of your personal data if your processed data is incorrect or
incomplete. If this is the case, we will make the correction
immediately.
4.3 Right to restriction of
processing
You have the right to request the restriction of the processing of
your personal data under the following conditions if
you contest the accuracy of your personal data for a period
enabling us to verify the accuracy of the data;
the processing is unlawful and you oppose the erasure of your
personal data and request the restriction of their use instead;
we no longer need your personal data for the purposes of
processing, but you need it for the establishment, exercise or defence
of legal claims, or
you have objected to the processing pursuant to Art. 21 (1) GDPR
and it is not yet certain whether our legitimate reasons outweigh your
reasons.
If you have requested the restriction of the processing of your
personal data, this data - apart from its storage - may only be
processed with your consent or for the establishment, exercise or
defence of legal claims or for the protection of the rights of another
natural or legal person or for reasons of important public interest of
the Union or of a Member State. You will be informed by us before the
restriction is lifted.
4.4 Right to cancellation
You can demand that we delete your personal data immediately. We are
obliged to delete this data immediately if one of the following reasons
applies:
Your personal data are no longer necessary for the purposes for
which they were collected or otherwise processed.
You revoke any existing consent on which the processing was based
pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 sentence
1 lit. a GDPR and there is no other legal basis for further
processing.
You object to the processing pursuant to Art. 21 (1) GDPR and
there are no overriding legitimate grounds for the processing.
You object to processing for direct marketing purposes pursuant
to Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The deletion of your personal data is necessary to fulfil a legal
obligation under Union law or the law of the Member States to which we
are subject.
Your personal data was collected in relation to information
society services offered in accordance with Art. 8 para. 1
GDPR.
If we have made your personal data public and we are obliged to
delete it in accordance with Art. 17 para. 1 GDPR, we will take
appropriate measures, taking into account the available technology and
the implementation costs, to inform the data controller(s) that you have
requested the deletion of all links to this personal data, copies or
replications.
You do not have the right to erasure if the processing is
necessary
to exercise the right to freedom of expression and
information;
for compliance with a legal obligation which requires processing
by Union or Member State law to which we are subject or for the
performance of a task carried out in the public interest or in the
exercise of official authority vested in us;
for reasons of public interest in the area of public health
pursuant to Art. 9 para. 2 sentence 1 lit. h and i and Art. 9 para. 3
GDPR;
for archiving purposes in the public interest, scientific or
historical research purposes or statistical purposes in accordance with
Art. 89 para. 1 GDPR, insofar as the right referred to in para. 1 is
likely to render impossible or seriously impair the achievement of the
objectives of that processing, or
for the assertion, exercise or defence of legal claims.
If you have asserted your right to rectification, erasure or
restriction of processing against us, we are obliged to notify all
recipients to whom your personal data has been disclosed of this
rectification or erasure of the data or restriction of processing,
unless this proves impossible or involves a disproportionate effort.
You have the right to ask us to inform you about these
recipients.
4.6 Right to data portability
You have the right to receive your personal data, which you may have
provided to us, in a structured, commonly used and machine-readable
format. You also have the right to transmit this data to another
controller without hindrance from us, provided that
the processing is based on consent pursuant to Art. 6 para. 1
sentence 1 lit. a GDPR or Art. 9 para. 2 sentence 1 lit. a GDPR or on a
contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and
the processing is carried out using automated
procedures.
Furthermore, you have the right in this respect to obtain the
transfer of your personal data directly from us to another controller,
insofar as this is technically feasible. The rights and freedoms of
other persons must not be affected by this.
The right to data portability does not apply to the processing of
personal data necessary for the performance of a task carried out in the
public interest or in the exercise of official authority vested in
us.
We do not currently assume that data subject to the right to data
portability is processed within the scope of our website.
4.7 Right of objection
You have the right to object, on grounds relating to your particular
situation, at any time to processing of your personal data which is
based on point (e) or (f) of Article 6(1) GDPR, including profiling
based on those provisions.
We will then no longer process your personal data unless we can
demonstrate compelling legitimate grounds for the processing which
override your interests, rights and freedoms, or the processing serves
the establishment, exercise or defence of legal claims.
If your personal data is processed for the purpose of direct
marketing, you have the right to object at any time to the processing of
your personal data for the purpose of such marketing; this also applies
to any profiling in connection therewith.
If you object to processing for direct marketing purposes, your
personal data will no longer be processed for these purposes.
Notwithstanding Directive 2002/58/EC, you have the option of
exercising your right to object in connection with the use of
information society services by means of automated procedures that use
technical specifications.
4.8 Right
to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data
protection law at any time. The withdrawal of consent does not affect
the lawfulness of processing based on consent before its withdrawal.
Renew or change your cookie consent here teamdress.
4.9 Automated
decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on
automated processing, including profiling, which produces legal effects
concerning you or similarly significantly affects you. We do not carry
out such processing.
4.10 Right
to lodge a complaint with a supervisory authority
Without prejudice to any other rights to lodge a complaint, you have
the right to lodge a complaint with a supervisory authority, in
particular in the Member State of your habitual residence, place of work
or place of the alleged infringement if you consider that the processing
of your personal data infringes the GDPR.
5. Responsibility for linked
content
We may also use links to websites of other providers on our website.
In this respect, this privacy policy does not apply. If personal data is
collected, processed or used when using the websites of these other
providers, please refer to the data protection information of the
respective providers. We are not responsible for their data protection
practices.
6. Disclosure of
personal data to third parties
Your personal data is stored exclusively on our servers or on servers
used on our behalf. Access to and use of the data is only possible for
an authorised group of employees or service providers and is limited to
the data required to fulfil the respective task.
Your data will not be transferred to third parties without your
consent. Data is not transferred to third countries (countries outside
the European Economic Area - EEA), unless otherwise stated in this
privacy policy, and is not intended to be transferred in the future.
7. Data security
To protect your personal data, we have taken technical and
organisational measures to ensure that your data is protected against
accidental or intentional loss, destruction or manipulation and against
access by unauthorised persons. Our protective measures are reviewed at
regular intervals and adapted to technical progress where necessary.
8. Data Protection Officer
If you have any further questions regarding the processing of your
personal data, please contact our data protection officer:
compolicy GmbH, Schwedenkai 1, 24103 Kiel,
info@compolicy.de
9. Changes to the privacy
policy
We reserve the right to amend this data protection declaration at any
time if necessary and in consideration of the data protection
regulations applicable at the time of amendment.
Status: November 2024