Data protection

For us, the Bijou Brigitte fashion accessories AG, the protection and confidentiality of the data of our customers and users is an important concern.
This privacy statement is intended to inform you of the nature, scope and purpose of the processing of your personal information by us. Furthermore, you will receive information about your rights. With regard to the terms used, we refer to the definitions in Article 4 of the General Data Protection Regulation (DSGVO), unless defined in the context of this privacy policy.
We have implemented reasonable technical and organizational measures to protect against unauthorized or unlawful processing of this data and its accidental loss, destruction and damage.

Who is responsible for data processing and whom can I contact?

Responsible within the meaning of the GDPR is:
Bijou Brigitte fashion accessories AG
Poppenbütteler Bogen 1
22399 Hamburg
Germany
Tel .: +49 (40) 60 60 90
E-Mail: service@bijou-brigitte.com
Website: https://bijou-brigitte.com

Corporate Data Protection Officer:
Mr. Michael Blümke
Bijou Brigitte fashion accessories AG
Poppenbütteler Bogen 1, 22399 Hamburg
Phone: +49 - (0) 40/60 60 90
E-Mail: datenschutz@bijou-brigitte.com

What is personal data?

Personal data are all information that relates to an identified or identifiable natural person (Article 4 No. 1 GDPR). This includes information such as your name, e-mail address, I-P address, postal address, phone number, and user behavior. Information that is not directly related to your identity, such as: As the number of users of an Internet presence, do not fall under this.

Which sources and data do we process and for what purpose?

Call our website
Our website www.bijou-brigitte.com collects a series of general information each time you call it. This general information is stored temporarily in the so-called log files of our server. Among other things, each access is recorded:

1. Information about the browser used and about the operating system
2. visited page on our website
3. Date and time of access
4. IP address of the requesting computer

This information is processed by us to ensure a smooth connection and convenient use of our website, to evaluate system security and system stability and for other administrative purposes. The information of the server log files is stored separately from all personal data provided by an affected person. In no case do we use the data collected for the purpose of drawing conclusions about you.

A complete storage of your IP address is only for the traceability of technical errors and hacker attacks and for the recording of consent. Your IP address will be deleted within 30 days of your visit, with the exception of logging for consent.

The legal basis for data processing is our legitimate interest in accordance with Art. 6 (1) S.1 f DSGVO. Our legitimate interest follows from the aforementioned purposes for data collection.

Contact form / E-Mail contact / telephone contact

On our website is a contact form available, which can be used for electronic contact. If you exercise this possibility, the personal data entered by you in the input mask (name, e-mail address) will be transmitted to us by clicking on the "Send" button and saved. In addition, we save the date and time of your contact to prevent misuse of our contact form and to ensure the security of our information technology systems

Alternatively, contact via the provided e-mail address online-shop@bijou-brigitte.com and by phone.

The personal data transmitted to us in connection with the contact will be stored by us. This is done exclusively for the purpose of your request and then to contact you. We delete the data that arises in this context after the storage is no longer required, or limit the processing if there are statutory retention requirements.

The data processing for the purpose of contacting us by means of the contact form takes place in accordance with Art. 6 para. 1 p. 1 a DSGVO on the basis of your voluntarily granted consent. You have the right to revoke your consent to the processing of personal data at any time. The revocation can be explained by e-mail to service@bijou-brigitte.com or by a message to the contact details given in the imprint. For the processing of data that you have sent us by e-mail, the legal basis is Art. 6 para. 1 f. DSGVO. Our legitimate interest is to process your request. If you request a quotation via the contact form or have questions regarding an existing contractual relationship, the data processing is based on Art. 6 para. 1 sentence 1 b DSGVO.

There is no disclosure of this personal data to third parties.

Links to social networking services

Our website contains links to social networking services Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA), Instagram (Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA), Pinterest (Pinterest Inc.). , 808 Brannan Street, San Francisco, CA 94103, USA) and the video portal Youtube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA). We have integrated the button of the corresponding social network as a link on our website.

If you visit our website and click on the button of one of the social network services, you will be redirected to our page at the respective network service. Your information will only be transferred to the corresponding page of the respective social network by clicking on the corresponding button and forwarding. If you are logged in and logged in to one of the social network services, you also have the option of sharing articles with our friends by clicking on the corresponding "Share button". These buttons were integrated by us by means of a link on our website, so that your information will be transmitted only by clicking on the corresponding button. Before clicking the button, the social networks can not collect data from you.

Please note that we have no control over how the social networking services process your personal information and whether it complies with our privacy policy when processing your personal information. We do not review the social networking services and we are not responsible for the processing of your personal information there.

The legal basis for the use of the link to the social network services is Article 6 (1) sentence 1 f DSGVO. Our legitimate interest is in the advertising purpose of making our company better known in this way.

Google Analytics

If you have given us your consent, we will use Google Analytics, a web analytics service provided by Google Inc. ("Google"), on our website. The legal basis for this is Art. 6 para. 1 a DSGVO.

Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. In order to guarantee the anonymized collection of IP addresses (so-called IP-Masking), we have extended the code "gat._anonymizeIp ();" for this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

We have a contract processing contract with Google Inc. Google processes on our behalf the information generated by the cookies set in order to evaluate your use of the website, to compile reports on the website activities and to provide further services related to the use of the website and the internet to the website operator. Google is under no obligation to merge the IP address provided by Google Analytics within your browser with other Google data.

You may revoke your consent to use Google Analytics at any time. The revocation can be explained by e-mail to service@bijou-brigitte.com or by a message to the contact details given in the imprint. Please note that the legality of the processing based on your consent until the revocation is not affected by the revocation.

For more information about Google Analytics Terms of Service and Privacy, please visit www.google.com/analytics/terms/en.html or visit www.google.com/intl/en/policies/.

How long will my data be stored?

We process and store your personal data as long as and to the extent necessary to fulfill our contractual and legal obligations. We respect the principle of storage limitation, which means that we will erase your data as soon as we no longer need it and are not legally required to keep it.

Who gets my data

Within our organization, only those entities gain access to your data, which they need to fulfill our contractual and legal obligations.

In principle, we do not pass personal data on to third parties. In particular, we waive any commercial disclosure of your data to third parties.

A transfer of your personal data to third parties is only to the extent necessary and only for the purposes set out above. In this case, the third parties process your personal data on our behalf. In the context of order processing, we have carefully selected the processors and are obliged to trust our personal data and to respect data protection in accordance with the statutory provisions of Art. 28 GDPR. In addition, the processing of your personal data takes place exclusively in accordance with the instructions of Bijou Brigitte. For example, in the following areas, we will submit your personal information to the processor for the purpose of conducting the business relationship with you: IT IT application support / maintenance, archiving, payment card processing (debit cards / credit cards), marketing, hosting providers, delivery service providers, payment service providers, website management, contractors

Other data recipients may be public bodies (eg tax authorities, Federal Central Tax Office) if there is a legal obligation to disclose your data.

Data logged when accessing the Internet offer will be transmitted to third parties only to the extent that we are required by law or court decision, or the disclosure in the event of attacks on our company's Internet infrastructure for legal or criminal prosecution is required.

Other data recipients may be those for whom you have given your consent to data collection.

Is data transmitted to a third country?

A transfer of data to countries outside the EU or the EEA (so-called third countries) does not take place, unless it is explicitly mentioned in this privacy policy.

Which data protection rights do I have?

Right to information according to Art. 15 GDPR:
You have the right to ask for confirmation of the processing of your personal data; If this is the case, you have a right to be informed about this personal data and to the information listed in detail in Art. 15 GDPR.

Right to correction of incorrect personal data or to completion according to Art. 16 GDPR:
You have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.

Right to cancellation ("Right to be forgotten") according to Art. 17 GDPR:
You also have the right to demand that personal data relating to you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 DSGVO applies, eg. For example, when the data is no longer needed for the purposes pursued.

Right to restriction of processing according to Art. 18 GDPR:
You have the right to demand the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, eg. For example, if you have filed an objection against processing in accordance with Art. 21 GDPR, for the duration of a possible examination of whether our legitimate interests outweigh yours.

Right to object to the processing according to Art. 21 GDPR:
Are data based on Art. 6 para. 1 sentence 1 lit. (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons that arise from your particular situation. We then no longer process the personal data unless there are evidently compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

Right to data portability according to Art. 20 GDPR:
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transmission of this data to a third party.

Right of revocation of your granted consent pursuant to Art. 7 (3) sentence 1 DSGVO:
You have the right to revoke your consent at any time with effect for the future, without affecting the legality of the processing based on the consent to revocation,

Complaint right with a supervisory authority acc. Art. 77 GDPR:
You have gem. Art. 77 DSGVO the right to complain to a supervisory authority if you believe that the processing of your data violates data protection regulations. In particular, the right of appeal may be invoked by a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.

If you want to exercise your right of revocation or objection, please send an e-mail to service@bijou-brigitte.com.

Existence of an obligation to provide data

You only need to provide us with the personal information required to complete and execute a contract. There is no obligation to provide personal data.

Does an automated case decision including profiling take place?

In principle, we do not use automatic decision-making or profiling according to Art. 22 para. 1 and para. 4 DSGVO for the establishment and implementation of the business relationship.

Change of privacy policy

Bijou Brigitte reserves the right to change this privacy policy in accordance with the data protection regulations. The current version can be found here or another corresponding, easily findable point on our website.

As of May 2018