DATA PROTECTION STATEMENT - FENIX OUTDOOR E-COM AB
1 INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA
(1) The following information concerns the collection of personal data while using this website. Personal data are all data that can be personally related to you, e.g. name, address, email addresses, user behaviour.
(2) The responsible officer pursuant to Article 4 (7) EU General Data Protection Regulation (GDPR) is Fenix Outdoor E-Com AB, Brogatan 141, 894 35 Själevad, Sweden, firstname.lastname@example.org (see our legal notice), below called the “Company”. You can contact the Company’s data protection manager at email@example.com or at our postal address (Fenix Outdoor Ecom AB, Hemvärnsgatan 15, 171 54 Solna, Sweden) with the addition “Data protection manager”.
(3) When you contact us by email or using a contact form, the data you give us (your email address, your name and phone number if applicable) is stored by us in order to answer your question. When storage is no longer necessary, we will delete the applicable data or restrict the processing of it if legal retention requirements apply.
(4) If we use contracted service providers for individual functions of our web-based services, or if we wish to use your data for advertising purposes, we will inform you below in detail about the respective processes, naming the defined criteria for storage duration.
2 YOUR RIGHTS
(1) You have the following rights towards us with regard to your personal data:
– Right to information, – Right to correction or deletion, – Right to restriction of processing, – Right to refusal of processing, – Right to data portability
(2) You also have the right to lodge a complaint about our processing of your personal data with a data protection regulatory body.
3 COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE
(1) If you are only using the website for information and do not register or transmit information to us in any other way, we only collect the personal data which your browser transmits to our server. If you wish to view our website, we collect the following data that are technically necessary for us to display our website to you and guarantee its stability and security (the legal basis is Article 6 (1) sentence 1 lit. f GDPR):
– IP address – Date and time of the enquiry – Time zone difference from Greenwich Mean Time (GMT) – Content of the request (specific page) – Access status / HTTP status code – Quantity of data transferred in each case – The website from which the request comes – Browser – Operating system and its interface - Language and version of the browser software.
(2) In addition to the data mentioned above, cookies are stored on your PC when you use our web-site. Cookies are small text files that are saved on your hard drive in association with the browser you use and through which particular information is transmitted to the location setting the cookie (in this case by us). Cookies cannot run programmes or transmit viruses to your computer. They serve to make the internet presence more user-friendly and effective in general.
A cookie is a small file with letters and numbers placed on your local unit when you visit our website. If you have not adjusted your browser settings to not accept cookies, a cookie will be placed on your local unit when you visit our website. There are two types of cookies, which type of cookie is decided by the time the cookie is stored on your local unit. The types of cookies are: Persistent cookies and transient cookies. In addition, cookies from a first party (our domain) is different from cookies from a third party.
Persistent cookies are deleted automatically after a set period, which can vary according to the cookie. You can delete the cookies at any time in the security settings of your browser.
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. They save a so-called session ID that links different enquiries from your browser to a common session. This means that your computer can be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
The Flash cookies used are not captured by your browser but by your Flash plug-in. We also use HTML5 storage objects which are stored on your terminal device. These objects save the necessary data independently of the browser you use, and have no automatic expiry date. If you do not wish the Flash cookies to be processed, you must install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to the private mode. We also recommend that you regularly manually delete your cookies and your browser history.
Cookies from a first party (first party cookies) is placed by the website you are visiting (e.g. cookies placed by our domain to optimize the website usage).
Cookies from a third party (third party cookies) are cookies placed on your computer by another domain than the website you are visiting. If you visit a website and cookie from another domain is placed on your computer, it is a third party cookie.
Information from third party cookies and pixels may be shared with other companies within the Fenix Outdoor group for analysis and statistical purposes but may also be used to show you advertisements from other companies within the Fenix Outdoor group, which we believe might be of interest to you. For more information about the companies within the Fenix Outdoor group, please visit www.fenixoutdoor.com.
b) Your consent By accepting cookies in your browser and visit our website you consent to our and out service providers’ usage of cookies on our website.
c) Can I withdraw my consent? Yes. If you wish to withdraw your consent you have to remove the cookies stored on your local unit in your browser settings. If you want to prevent cookies from being stored on your local unit, you need to change your browser settings to not accept cookies. Please be advised, if you choose to not accept cookies you may not be able to use all the functions of this website or the website may not function at all.
4 OTHER FUNCTIONS AND OFFERS ON OUR WEBSITE
(1) As well as the purely informational use of our website, we offer various services that you may use if they interest you. To do so, you must generally provide further personal data, which we use in order to provide the respective service and to which the above-mentioned principles of data processing apply.
(2) We sometimes use external service providers to process your data. They have been carefully selected and commissioned by us, are bound to our instructions and are regularly monitored.
(3) We can also pass your personal data on to third parties if we offer special offer participation, lotteries, contract conclusions or similar services together with partners. You can find more information about this if you enter your personal data or below in the description of the offer.
(4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.
5 USE OF OUR WEBSHOP
(1) If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide personal data that we require in order to process your order. Mandatory fields for the conclusion of contracts are specially marked; other information is voluntary.
(2) In order to process your order, we work with the following service provider(s), who fully or partially support us in concluding contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract, as far as this is required for the delivery of the goods. We provide your payment details to the credit institution in question as part of the payment process, insofar as this is necessary for the payment process. We can also pass your payment details on to our company bank. As long as payment service providers are used, we will inform you explicitly about this below. Legal basis for the transmission of data is Art. 6 (1) lit. b GDPR.
(3) Use of payment service providers (payment services)
If you opt for a payment type of the payment service provider Adyen (credit and debit card), the payment process will take place via the payment service provider Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands, whom we will provide - in addition to your order information – with other information (address, IBAN, BIC, invoice amount, currency and transaction number) according to Art. 6 (1) lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment settlement with the payment service provider Adyen and only to the extent that it is required for this
You can voluntarily set up a customer account through which we can save your data for other, subsequent purchases. When setting up an account under “My account”, the data you provide are revocably stored. You can delete all further data, including your user account, at any time in the customer area.
We can also process the data provided by you in order to inform you about other interesting products in our portfolio or to send you emails with technical information.
(4) Due to commercial and tax law requirements, we are obliged to save your address, payment and order data for the duration of ten years. However, after three years we restrict processing, i.e. your data are only used to comply with legal requirements.
(5) To prevent unauthorised access by third parties to your personal data, especially financial data, the order process is encrypted by TLS technology.
(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers about our goods and services.
(2) To register for our newsletter, we use the so-called double-opt-in process. This means that after you register, we send an email to the email address you gave asking for confirmation that you wish to receive the newsletter. If you do not confirm your registration you will not receive our newsletter and we will not store your e-mail address. In addition, we save the IP addresses you used and the times of registration and confirmation. The purpose of the process is to prove your registration and, if necessary, to investigate possible misuse of your personal information.
(3) The only obligatory information for transmission of the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6 (1) sentence 1 lit. a GDPR.
(4) You can revoke your consent to transmission of the newsletter and unsubscribe to the newsletter at any time. You can revoke it by clicking on the link provided in every newsletter email or by sending a message to the contact point given in the legal notice.
(5) Please note that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels which display one-pixel image files which are saved on our website. For the evaluations, we link the files named in § 3 and the web beacons with your email address and an individual ID. Using the data obtained, we create a user profile in order to customise the newsletter to your individual interests. To do so, we record when you read our newsletters and which links you click in them, and we draw conclusions about your personal interests from this. We link this data with the actions carried out by you on our website.
You can revoke this tracking at any time by clicking on the special link that is provided in every email or inform us through another communication channel. The information is saved as long as you have subscribed to the newsletter. After logging out, we only save the data for statistical purposes and anonymously. This tracking is also not possible if you have deactivated the display of images as standard in your email programme. In this case, the newsletter will not be shown completely and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking occurs.
7 REVOCATION OR WITHDRAWAL OF CONSENT TO THE PROCESSING OF YOUR DATA
(1) If you have agreed to the processing of your data, you can revoke this at any time. After you have pronounced it to us, the revocation influences the permissibility of processing your personal data.
(2) If we base the processing of your personal information on consideration of interests, you can revoke your consent to processing. This is the case, in particular, if processing is not necessary for fulfilment of a contract with you, which is always outlined by us in the subsequent description of the functions. When exercising the right of revocation, we ask you to cite the reasons why we should not process your personal information as we have previously done. In the case of a justified revocation, we will examine the situation and either stop or adjust the data processing or convey to you our protection-worthy and necessary reasons for continuing the processing.
(3) Of course, you can revoke consent to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your advertising revocation by sending a message to the contact information given in the legal notice.
8 WEB ANALYTICS
Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and which enable an analysis of your use of the website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be shortened by Google within member states of the European Union or other contracting member states of the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports about website activities and to pro-vide further services connected with website use and internet use for the website operator.
(2) The IP address transmitted from your browser within Google Analytics is not connected with other data from Google.
(3) You can prevent the storage of cookies by configuring your browser software accordingly; please note, however, that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent the capture of data generated by the cookie and related to your use of the website (incl. your IP address) for Google and the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This ensures that IP ad-dresses are further processed in shortened form, which excludes the possibility of personal association. Any personal connection to the data collected about you will therefore be immediately excluded and the personal data will be immediately deleted.
(5) We use Google Analytics in order to analyse use of our website and regularly improve it. We use the statistics obtained to improve our products and make them more interesting to you as a user. For the exceptional cases in which personal data are transmitted to the USA, Google has committed itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6 (1) sentence 1 lit. f GDPR.
(7) This website also uses Google Analytics for a cross-device analysis of visitor flows which is carried out by means of a user ID. You can deactivate the cross-device analysis of your use if you click on the link Opt out from Google tracking, which also can be found at the bottom of the website.
- Doubleclick by Google - Adform - Google Adwords - Facebook - Google analytics
9 SOCIAL MEDIA
Use of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter. We use the so-called two-click solution for this. This means that when you visit our site, fundamentally no personal data will be initially transmitted to the providers of the plug-ins. You can recognise the provider of the plug-in via the label on the box above its initial letters or the logo. We offer you the possibility of communicating with the provider of the plug-in directly via the button. The plug-in provider only receives the information that you have called up the corresponding page of our online presence if you click on the demarcated field to activate it. The data named under § 3 of this statement are also transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. When the plug-in is activated, your personal data are therefore transmitted to the respective plug-in provider and stored there (in the USA in the case of US providers). Since the plug-in provider carries out data capture using cookies in particular, we recommend that you delete all cookies before clicking on the greyed-out box above the security settings of your browser.
(2) We have no influence on the data captured or the data processing procedures, nor do we know the entire scope of data collection, the purpose of processing or the retention periods. We also have no information about the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of their website. Such an evaluation takes place, in particular (even for users who are not logged in) to provide needs-based advertising and in order to inform other users in the social network about your activities on our web-site. You have the right to revoke the creation of these user profiles, although you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our website presence and make it more interesting for you as a user. The legal basis for the use of plug-ins is Article 6 (1) sentence 1 lit. f GDPR.
(4) Data transmission takes place regardless of whether you have an account with the plug-in provider and are logged on there. If you are logged on to a plug-in provider, your data collected by us are directly associated with the account you have with the plug-in provider. If you click on the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that after using a social network, you regularly log out, but in particular before activating the button, since this enables you to avoid association with your profile by the plug-in provider.
(5) You can find more information about the purpose and scope of data collection and pro-cessing by the plug-in provider in their data protection statements, which are given below. You can also find further information there on your rights in this regard and the setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URLs with their data protection notices:
a) [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.