Thank you for your interest in our website. The protection of your privacy is very important to us. Therefore, we will process your data carefully, for a specific purpose and on the basis of your consent, and only in accordance with the legal requirements for data protection.
In this data protection policy we inform you about the aspects of data processing within our website and apps.
The responsible body within the meaning of the data protection laws is:
I. When and for what purpose does Villeroy & Boch collect personal data?
It is generally possible to use our websites without submitting personal data.
If you use one of our services (e.g. our newsletter, the Bathroom Planner, our online shop or our contact form), you enter your data voluntarily. We use this data (such as name, address, e-mail address, telephone and fax number) exclusively for the purpose for which you provide it (e.g. for processing contact requests, processing orders and payments, delivery of goods and provision of services such as, in particular, the dispatch of newsletters or bathroom planning) and only for the execution of our own business purposes. Information we receive from you helps us process your order as smoothly as possible, improve our service for you and prevent misuse and fraud.
When you access our website, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and such like. This is only information that does not allow conclusions to be drawn about you. This information is technically necessary in order to correctly deliver the contents of websites requested by you and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us, in order to optimise our internet appearance and the technology behind it.
We do not sell your data, nor do we use it for unspecified purposes.
Your personal data will only be used within the Villeroy &Boch Group and by our business partners who may be commissioned to fulfil your wishes.
Below we inform you in detail about the handling of your data.
II. General information about our services
If you use our services, we will ask you for personal data (at the time of collection, we will explain which information is required and which you may voluntarily provide).
To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.
For users who have signed up for one or more of the following services, it is possible to change or delete the information provided at registration at any time. Of course, we will also provide you with information about the personal data we hold about you at any time. We are happy to correct or delete this at your request, as long as no statutory retention requirements prevent this. To contact us in this context and to revoke your consent, please use the contact details provided at the end of this data protection policy.
III. Our services in detail
In the following, we would like to explain our services to you in detail, and in particular the legal basis for and purpose of the data processing.
1. Shopping in our online shop Our website also offers the possibility of convenient online shopping. We use the data provided by you without your separate consent exclusively for the fulfilment and processing of your order. With complete processing of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after expiry of the tax and commercial regulations, unless you have expressly consented to its further use.
Purpose of data processing:Implementation and processing of the purchase process initiated by you as well as compliance with legal requirements such as, in particular, customs provisions.
Legal basis:Article 6 (1) (b) GDPR (required to fulfil the contract) and Article 6 (1) (c) GDPR (fulfilment of a legal obligation)
For shopping in the online shop, provision of the data is required by you. Without this data no contract can be concluded. Failure to provide the data would result in your being unable to shop on our website.
1.1 With a customer account A free and password-protected customer account gives you the opportunity to take full advantage of our website. When you register to use personalised services via a customer account, some of your personal information is collected, such as your name, address, contact and communications data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we only offer to registered users.
1.2 Without a customer account Of course, you can also use the online shop without a customer account. In this case, you will need to enter the information required to process your order into the ‘Personal Data’ order form integrated on the website. You complete each entry by clicking the ‘Next’ button, which takes you to the payment screen. In order to avoid typing errors and to ensure that you have entered the correct address, the completeness and correctness of your address will be checked during entry.
1.3 Purchase on account / installment purchase In order to be able to offer you the payment methods of Klarna, we pass on your personal contact and order data to Klarna during the ordering process. On this basis, Klarna evaluates and provides the available payment methods. Your transmitted personal data will be processed in accordance with the following provisions Klarna data protection notice. https://www.klarna.com/de/datenschutz/
1.4 Security Your payment details are protected during transmission to our servers through the use of SSL security procedures. You can check the security of the connection using the information in your browser's URL display. If the beginning of the address line changes from ‘http’ to ‘https’, there is a secure connection. In addition, all service providers used for payment processing are certified and comply with the highest safety regulations of e-commerce industry standards.
1.5 Compliance with customs legislation Due to several EU regulations (2580/2001/EC, 881/2002/EC and 753/2011/EC) as well as other legal requirements, we as a company are required to check our customers' data against publicly available foreign trade and embargo lists before concluding a sales contract. We carry out this comparison to fulfil legal requirements. We carry out the comparison only when you order a product in our online shop and are liable to pay. Only the following stock data is compared: First name, surname and address.
2. Personal newsletter If you have specifically subscribed to our newsletter, we will use your information to periodically send you personalised information about new products, promotions, competitions and our many customer services.
For a successful registration we need a valid e-mail address. In order to verify that an application is actually made by the owner of an e-mail address, we use the ‘double opt-in’ procedure. For this purpose we record the order of the newsletter, the dispatch of a confirmation e- mail and the receipt of the requested answer. The data will be used exclusively for the newsletter and will not be shared with third parties.
Your consent to the storage of your personal data and its use for newsletter distribution can be revoked at any time. Each newsletter has a corresponding link for this purpose. In addition, you can unsubscribe at any time via the contact options indicated at the end of this data protection notice. By unsubscribing, we consider your consent to the creation of your personalised user profile and the receipt of newsletters based on it to be revoked.
Purpose of data processing:Regular dispatch of newsletters by e-mail to the e-mail address provided by you.
Legal basis:Article 6 (1) (a) GDPR (consent)
Profiling: We evaluate your use of the sent newsletters and the subsequent visits to our website in order to further improve the newsletter and our website and to optimise those according to your actual interests.
In order to always provide you with a personally tailored offer and to anticipate which products of ours you may be interested in, we will create a customer profile for you based on the information we have about you. We use existing information, such as your shopping history, preferences and interests that you actively share with us via your customer account or that we derive from your recorded interactions with our newsletter. Standard technologies such as cookies or tracking pixels are used in our newsletter. The messages we send you will be personalised and customised according to your individual preferences and interests.
3. My Club As a member of My Club you have chosen to participate in the Villeroy & Boch customer loyalty programme. For this purpose, a corresponding registration is required, stating the requested personal data. We store your password for your My Club account and the purchases you make in addition to the personal data you provide when registering. Your membership gives you many benefits, which you can read about in detail in the My Club’s conditions of participation. In addition, every two months you will receive information about exclusive Privilege Club promotions and events via a special newsletter.
Purpose of data processing:Sending special offers and information about Villeroy & Boch AG products.
Legal basis:Article 6 (1) (a) GDPR (consent)
4. Bathroom Planner and Bathroom Inspirator You can create a plan of your personalised bathroom using the Bathroom Planner area of our website. This plan will then be sent to you by e-mail. In addition, Villeroy & Boch or a retailer of your choice may contact you by telephone or e-mail for the purpose of consulting you on the bathroom you have chosen.You can create a plan of your personalised bathroom using the Bathroom Planner area of our website. This plan will be sent to you by e-mail. You can also have the plan forwarded to the retailer of your choice, who can then consult with you on the bathroom you’ve chosen via e-mail or by phone.
Purpose of data processing:Sending a bathroom plan that you have created, to be contacted by Villeroy & Boch for the purpose of bathroom consulting and sharing your contact information with the retailer of your choice for the purpose of bathroom consulting. Contact can be made by telephone or e-mail.Sending a bathroom plan you’ve created and sharing your contact information with the retailer of your choice for the purpose of bathroom consulting with them via e-mail/phone.
Legal basis:Article 6 (1) (a) GDPR (consent)
5. Bathroom & Wellness claims
If you contact us directly with a claim, we will process your personal data in order to examine your request and ensure that it is handled appropriately. To do this, we usually collect your name, contact details (e-mail address) and information about the product concerned and the reason for the claim.
In order to process your complaint, it may be necessary for us to pass on your data to carefully selected external service providers (e.g. installers). These service providers only receive the data they need to process the respective order and are contractually obliged to process your data exclusively for this purpose and in compliance with data protection regulations.
Your data will be used exclusively for the purpose of processing the complaint and will be deleted once the process has been completed and the statutory retention periods have expired.
Purpose of data processing:Processing and handling of complaints, including disclosure to contracted service providers (e.g. installers) for the performance of inspection, repair or maintenance services.
Legal basis:Article 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures)
6. After-sales service If your porcelain should ever be discontinued, you can have our after-sales service notify you ahead of time — up to 12 months before the series is phased out. This leaves plenty of time to buy replacements or complete the set. You will only receive a message if the decor you’ve registered is expiring.
Purpose of data processing:Information about product cycles and the availability of certain products on the market.
Legal basis:Article 6 (1) (a) GDPR (consent)
7. Sweepstakes and competitions Every so often you will have the opportunity to participate in sweepstakes and competitions on our website.Personal data (e-mail address, name, address and other information as needed) may likewise be collected and stored during these campaigns for the purpose of implementation, depending on the respective terms and conditions of participation that apply. The personal information we collect from you during these campaigns will only be used to run the campaign (e.g. determining the winner of sweepstakes, notifying the winner and sending the prize) and will be deleted after it is finished.
If you have given your express consent as part of the campaign, we will send you our newsletter as described under III. 2. If you choose to revoke your consent later, this will not negatively impact your chances of winning or your participation in sweepstakes.
Purpose of data processing:Implementing and executing the sweepstakes/contest.
Legal basis:Article 6 (1) (a) GDPR (consent)
8. Gift list You have the option to transfer the products available in our online shop to a gift list and manage them there. A customer account must be created in order to do this. You can then send the gift list you created to the people you specify.
Purpose of data processing:Sending a selection of products from Villeroy & Boch AG to a group of recipients defined by you, with your e-mail address as the sender.
Legal basis:Article 6 (1) (a) GDPR (consent)
9. Contact form If you contact us via e-mail or our contact form, the information you provide will be stored for the purposes of processing the request as well as for any follow-up questions and sending you any requested information, if applicable.
Purpose of data processing:Responding to your request.
Legal basis:Article 6(1)(b) of the GDPR (required for implementing pre-contractual measures that are made at the request of the person in question)
Revocation of consent: Consents given by you are always voluntary and can be revoked at any time with effect for the future without giving reasons. For this purpose, you can contact the above address of Villeroy & Boch.
10. CRM system A central CRM database helps us manage our relationships with customers, interested parties and partners to deliver the best possible customer communication. This allows us to have a closer relationship with you and to quickly respond to your queries.
Purpose of data processing:Customer communication management and faster processing in Sales, Service and Marketing.
Legitimate interests: • Fast and efficient handling of queries from customers, interested parties and partners • Support of our Service, Sales and Marketing processes by an experienced and reliable partner as well as reducing our efforts in maintaining the IT infrastructure
Recipient of the data:CRM provider
The technical service provider of the CRM system is located in a third country. The data processing is secured via an order processing contract and the EU standard contractual clauses agreed with the service provider.
11. Click & Meet You also have the opportunity to shop locally at our local stores during the Corona pandemic. The prerequisite for this is that you reserve a corresponding shopping appointment with us. The data you provide when reserving an appointment will be used exclusively for the administration of the visit appointments and to contact you by telephone should you not be on site at the reserved time and other customers are prevented from visiting our store due to their existing reservation.
Purpose of data processing:management and booking of the appointment reservation you have made.
Legal basis:Article 6(1)(b) GDPR (Necessary for the performance of pre-contractual measures, which are carried out at the request of the data subject).
12. Product notifications / wish list alerts If you have explicitly registered for our product notifications and wish list alerts, we will use your data to send you messages about changes in your wish list (prices and availability) and periodic reminders about your wish list.
For an effective registration we need a valid email address. To verify that a registration is actually made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we log the order of the alert, the sending of a confirmation e-mail and the receipt of the response requested herewith. The data is used exclusively for sending product notifications and wish list alerts and is not passed on to third parties.
You can revoke your consent to the storage of your personal data and its use for sending product information at any time. In each product notification and alert you will find a corresponding link. In addition, you can unsubscribe at any time using the contact option provided at the end of this privacy notice.
By unsubscribing, we consider your consent to the creation of your personalized usage profile and the receipt of product information based on it as revoked.
Purpose of data processing:sending product notifications and alerts by e-mail to the e-mail address you have provided.
Legal basis:Article 6(1)(a) GDPR (consent)
13. Right of withdrawal regarding your consent Where you use any of the above services on the basis of consent, the following applies to such consents: Revocation of consent: Consents given by you are always voluntary and can be revoked at any time with effect for the future without giving reasons. To do so, you can contact Villeroy & Boch at the above address.
14. Social plugins We offer you the option of using “social media buttons” on our website. We rely on the “Shariff” solution to protect your data during use of these features. As a result, these buttons are only integrated onto the website as graphics that contain a link to the corresponding website of the button’s provider. Clicking this graphic will redirect you to the respective provider’s services. Your data will not be sent to the respective provider until then. As long as you do not click the graphic, there will be no exchange of any kind between you and the provider of the social media button. Information about the collection and use of your data in social networks can be found in the relevant provider’s respective terms and conditions of use.
We have integrated social media buttons for the following companies on our website: Facebook Inc. (1601 S. California Ave - Palo Alto – CA 94304 - USA) Twitter Inc. (795 Folsom St. - Suite 600 - San Francisco - CA 94107 - USA) Pinterest (808 Brannan Street, San Francisco, CA 94103, USA) Instagram (601 Willow Rd - Menlo Park CA 94025 - USA)
15. Villeroy & Boch Fan Pages on social networks/ platforms We use our fan pages on social networks and platforms for active communication with customers and users. When you visit these fanpages, your data may be collected and stored for market research and advertising purposes in order to create user profiles using pseudonyms. We use these in order to be able to display advertising to you within and outside the platforms, which is based on your presumed interests. For this purpose, cookies are used when visiting our fan pages, which store the usage behavior of the pseudonymous user.
You will find a complete description of the respective processing and the possibilities for objection in the details of the respective providers.
They can also best support you with information requests and the assertion of user rights. Should you require our help in this regard, please do not hesitate to contact us.
16. Customer list synchronization – Custom Audiences
We use Custom Audiences with customer list matching.
This function allows us to transmit an encrypted (hashed, as pseudonym) customer list, consisting of the email addresses of our customers whose consent we have received, to third-party companies, which then compare it with information from users of the platforms that has also been hashed. This allows us to determine which of our customers are also users of these third-party companies.
This information is then used to create so-called "custom audiences", i.e. target groups. These target groups are shown adverts specifically tailored to this target audience.
Purpose: Displaying advertising tailored to target groups
Legal basis: Article 6(1)(a) GDPR.
Consent given by you is always voluntary and can be revoked at any time with effect for the future without giving reasons. To do so, you can contact Villeroy & Boch at the above address or use the Preference Centre, which you can access via the "My interests" link in the newsletter.
Villeroy & Boch is responsible for the processing of personal data by uploading the customer list.
Third-party companies with which we use this process are:
- Meta Platforms Ireland Limited
- Google Inc.
- Pinterest Europe Ltd.
- Criteo GmbH
- Amazon
- TikTok Technology Limited (Ireland)
An adequacy decision by the EU Commission, the Data Privacy Framework (DPF), is in place for the USA. Companies not based in the EU are certified in accordance with the
Data Privacy Framework. In addition, data processing is secured by the contracts agreed with the service provider and the EU standard contractual clauses.
17. Mobile Apps & “Connected Products” in accordance with the EU Data Act 2023/2854
If you use our mobile applications or connected products, we process your personal data only to the extent required for the proper operation and provision of the respective functions. Below we describe the processing activities related to the individual applications and products:
a. ViClean-I 100 & I 200 The ViClean app allows the user to control the product like a remote control. As a user you can also save your wash profiles containing your preferred wash settings within the app.
No product or personal user data is collected by the app itself or shared with any third party. The wash profiles can be deleted at any time either individually, by performing a reset in the app (Settings/Reset), or by uninstalling the app. The profile settings can be saved by the user as screenshots, if desired for further reference.
b. Supreo The Supreo app allows the user to control their product like a remote control.
No product or personal user data is collected by this product or by the app or shared with any third party.
c. Pro App (ProDetect 2.0, ProActive+) The Pro App allows the user to change device settings and save these settings as a profile in the app. The product collects usage statistics that are saved entirely within the product itself, and the app can call and display these statistics. The daily usage statistics are only available for the last 30 days and are not attributed to any individual but are for the product as a whole.
No product or personal user data is collected by the app or shared with any third party.
The settings profiles and statistics can be deleted at any time either individually, by performing a reset in the app or by uninstalling the app
The settings profiles and statistics can be saved by the user as screenshots, if desired for further reference.
d. Zigbee Home Automation Kit(optional for LED lighting in selected mirrors, mirror cabinets and furniture in the series: More To See, My View Now, Subway 3.0)
This product must be integrated into a 3rd party home automation hub or service, eg Philips Hue, which may generate and collect data regarding the products’ usage. Please refer to the Privacy Policy of the relevant 3rd party smart home hub for further information regarding user data.
No product or personal user data is collected or shared with Villeroy and Boch.
IV. Collecting data during your visit to our website
Along with the information that you submit yourself, we collect other data from you during your visit through cookies and tracking. We would like to clarify this in the following.
1. Cookies and other tracking technologies Some of our websites use “cookies”. This standard technology refers to small text files that are stored on the device you use and allow your visit to a website to be made more convenient or more secure, among other things. Via the cookies, we automatically receive certain data about your computer and your internet connection, such as your IP address, the browser used and operating system,. Cookies may also be used to better tailor the offerings on a website to the visitor’s interests or generally improve the site based on statistical analysis.
Cookies cannot be used to start programs or transmit viruses to a computer. Using the information in the cookies, we can make navigation easier for you and allow our web pages to be displayed correctly. Third-party technologies such as scripts, pixels and tags that we embed in our websites for advertising purposes also set cookies on your terminal device. In the following sections, we explain what we use these technologies for and how you can adjust the settings to suit your needs.
2. Cookie categories Depending on the function and purpose, we divide data processing into different categories. The purpose of each category is described in our Consent Management Tool and your consent to these categories can be adjustedhere.
You can decide yourself whether the browser you use permits cookies or not. Please note that website features may be restricted or even suspended if cookies are disabled.
3. Purpose of processing, legal basis and legitimate interests The following applies to the above items:
Purpose of data processing: Secure operation of the website as well as allowing targeted communication with customers.
Legal basis: Article 6(1)(a) GDPR (consent via our cookie consent), in exceptional cases not requiring consent, we base our processing on our legitimate interest under Article 6(1)(f) GDPR
Legitimate interests: • Ensuring proper function of our website • Optimisation of our website
4. Revocation of consent: Consents given by you are always voluntary and can be revoked at any time with effect for the future without giving reasons. Your consent to cookies and other technologies can be adjustedhere.
5. Browser settings You can determine yourself whether the browser you use allows cookies or not. Please note that the functionality of websites may be restricted or even suspended if cookies are not allowed. Here you can find out more about how to set your browser correctly:
6. Location of processing of information collected via cookies Information collected via cookies is primarily processed within the European Union (EU). In some cases, cookie information may also be processed by our contracted service providers or by third-party cookie providers in countries outside the EU that do not offer a comparable level of data protection from an EU perspective. In some countries, such as the USA, there is a particular risk that local authorities may obtain access to cookie information processed there for monitoring purposes and that there are no effective legal remedies against such access. We have implemented appropriate additional safeguards, such as contracts based on the EU standard contractual clauses and the implementation of supplementary technical measures to ensure that information collected via cookies is adequately protected. Where you have given your consent to the use of cookies and other tracking technologies, you also consent to the transfer and further processing of information collected via cookies to countries outside the EU.
V. implemented technologies
Cloudflare
Description of Service
This is a service providing increased security and performance for websites. Cloudflare offers for example a content delivery network („CDN“) to improve the loading times of the website. The use of a CDN enables the user to make content available for retrieval more quickly with the help of regionally or internationally distributed servers.
Processing Company
Cloudflare, Inc.
101 Townsend St. San Francisco, CA 94107
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Security measures
Customer Support
Improvement of service
Providing Service
Authentication
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
APIs
Scripts
Log file
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Contact information
System configuration information
Log file data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Cloudflare, Inc.
Click here to read the privacy policy of the data processor
Name: __cf_bm; This is used for the bot protection solution provided by Cloudflare.; Type: cookie; Duration: 30 minutes;
Name: cf_clearance; This cookie is used to store the proof of challenge passed. It is used to no longer issue a challenge if present. It is required to reach an origin server.; Type: cookie; Duration: 30 minutes;
Name: _cfuvid; This cookie is used for rate limiting rules.; Type: cookie; Duration: 7 days;
Name: cf_chl_cc_XXX, cf_chl_rc_i, cf_chl_rc_ni; This cookie is used by Cloudflare for the execution of challenges. It is not used for tracking or beyond the scope of the challenge.; Type: cookie; Duration: Session;
Name: __cflb; This is used to return an end user to the same customer origin for a specific period of time configured by the customer. ; Type: cookie; Duration: 1 day;
Name: _cfseq; This cookie tracks the sequence and timing of user requests to enable Cloudflare Rules to identify valid or invalid request patterns.; Type: cookie; Duration: 60 minutes;
Name: cf_ob_info, cf_use_ob; These cookies provide information about the origin server’s HTTP status, the Ray ID of failed requests, the data center serving the traffic, and instruct Cloudflare to fetch resources from the Always Online cache on designated ports. They are persistent cookies that expire after 30 seconds.; Type: cookie; Duration: 1 minute;
Name: __cfwaitingroom; This cookie is used to track visitors accessing a host and path combination protected by Cloudflare’s Waiting Room. It helps manage user placement in the queue and estimate wait times.; Type: cookie; Duration: 60 minutes;
Name: __cfruid; This cookie is strictly necessary to support Cloudflare's Rate Limiting by identifying individual clients behind a shared IP address and managing incoming traffic. It helps distinguish legitimate users from potential threats. This cookie is temporary and typically expires at the end of the session.; Type: cookie; Duration: Session;
Cloudflare Turnstile
Description of Service
This service is used for bot and spam prevention.
Processing Company
Cloudflare, Inc.
101 Townsend Street, San Francisco, CA 94107, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Spam prevention
Bot Protection
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
User agent
IP address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Cloudflare, Inc.
Click here to read the privacy policy of the data processor
This is a tag management system. Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager allows to control when a particular tag is triggered.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Tag Management
Marketing
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Website tags
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Aggregated data about tag firing
Diagnostic data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Taiwan
Chile
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google LLC
Click here to read the privacy policy of the data processor
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
maximum of 3 weeks
reCAPTCHA
Description of Service
This is a service that checks whether data is entered by a human or by an automated program.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Bot Protection
Spam prevention
Fraud detection
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Scripts
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser language
Browser plug-ins
Click path
Date and time of visit
IP address
User behaviour
Amount of time spent on a page
User input
Device information
Mouse movements
Geographic location
Device operating system
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc.
Google LLC
Google Ireland Limited
Click here to read the privacy policy of the data processor
Name: _GRECAPTCHA; This cookie is set so that Google can provide risk analyses about the activities observed by Google reCAPTCHA; Type: cookie; Duration: 180 days; Domain: google.com;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Google Fonts
Description of Service
This is a collection of fonts for commercial and personal use.
Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Providing fonts
Improvement of service
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Aggregated usage numbers
Font file requests
Referrer URL
CSS requests
User agent
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
This service protects websites from bots. This service collects and analyzes the interactions a user has on the website and creates a score that indicates suspicious user behaviour.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Bot Protection
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
JavaScript
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Screen resolution
Date and time of visit
IP address
Browser language
Mouse movements
Visitor behaviour
CSS
Form responses
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited
Google LLC
Alphabet Inc.
Click here to read the privacy policy of the data processor
Name: _GRECAPTCHA; This cookie is used to assign an ID to the site visitor and collects statistical data about the site visitor's visits.; Type: cookie; Duration: 365 days;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Google Fonts
Description of Service
This is a collection of fonts for commercial and personal use.
Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin 4, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Providing fonts
Improvement of service
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Aggregated usage numbers
Font file requests
Referrer URL
CSS requests
User agent
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Marketing
Tracking
Creation of Userprofiles
Compliance with legal obligations
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Custom Java Scripts
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
User behavior
Behavior data
unique ID
IP-Address
Device information
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
EU
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
after Session, latest after 50 days
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Salesforce Inc.
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Recommendations
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of visit
Transferred volume of data
Requesting provider
IP address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Germany,Israel,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Log files are deleted 90 days after creation, at the latest.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Israel
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Trusted Shops AG
Click here to read the privacy policy of the data processor
This is a quality seal. It offers the Trusted Shops buyer protection and automatically collects the buyer’s email address to send review invites.
The Trustbadge accesses order information stored in the user’s terminal equipment (order total, order number, product purchased if applicable) and the user’s e-mail address after the order has been completed. The e-mail address is hashed using a cryptological one-way function. This serves to verify whether the user is already registered for Trusted Shops services. If this is the case, further processing will take place in accordance with the contractual agreement between the user and Trusted Shops. If the user is not yet registered for the services or do not give their consent to automatic recognition via the Trustbadge, they will subsequently be given the opportunity to register manually for the use of the services or to conclude the insurance as part of the possibly already existing user contract.
Processing Company
Trusted Shops SE
Subbelrather Str. 15c 50823 Cologne
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Recommendations
Analytics
Buyer protection
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Widgets
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of visit
Transferred volume of data
Requesting provider
IP address
Hashed version of email address
Access provider
Order number
Total spent on order
Payment information
Date of purchase
User agent
Order information
Interactions with plug-in
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be stored for 7 day(s)
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Israel
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Trusted Shops SE
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Compliance with legal obligations
Consent storage
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Local storage
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Opt-in and opt-out data
Referrer URL
User agent
User settings
Consent ID
Time of consent
Consent type
Template version
Banner language
IP address
Geographic location
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. c GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The consent data (given consent and revocation of consent) are stored for one year. The data will then be deleted immediately.
Data Recipients
In the following the recipients of the data collected are listed.
Usercentrics GmbH
Click here to read the privacy policy of the data processor
Name: ucString; This holds the ControllerID and SettingsID, the language, settings version and services with their consent history.; Type: web; Domain: usercentrics.com;
Name: ucData; This holds information about the Google Consent Mode.; Type: web;
Name: uc:analytics:firedEvents:SETTINGSID (if applicable); This is used to ensure the correct functioning of event tracking by preventing events from being triggered more times than intended.; Type: web;
ViAcademy Webshop
Description of Service
With this service, courses can be sold to different target groups on the platform.
This list represents the purposes of the data collection and processing.
Technically necessary to complete the purchase.
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Session Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Random hash
Browser language
All needed user data such as name, company, address etc. specified by Villeroy & Boch
Legal Basis
In the following the required legal basis for the processing of data is listed.
Consent Art. 6 Abs. 1 lit. a GDPR
Contract fulfilment Article 6(1)(b) GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Germany
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
End of the session
Data Recipients
In the following the recipients of the data collected are listed.
Almost all data remains on the webshop platform. Some data is transferred to the connected Avendoo LMS, where the trainings take place.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Retargeting
Marketing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Date and time of visit
Downloads
Advertiser website activity
Customer ID
What page an ad appeared on
Device type
Third party information
Data from advertising partners
Hashed version of email address
Browsing activity
Website activity
Mobile device's unique identifier
How many times an ad has been served
Page views
Amount of time spent on a page
Pseudonymized advertiser identifiers
Cookie ID
Items placed in shopping cart
Views and interactions with content and ads
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Other advertising companies in the digital advertising ecosystem
NextRoll, Inc.
Click here to read the privacy policy of the data processor
Name: __adroll; This cookie is set by AdRoll Group, to identify the device when the users move between different Digital Properties, for the purpose of serving targeted advertisements.; Type: cookie; Duration: 396 days; Domain: d.adroll.com;
Name: __adroll_shared ; The domain of this cookie is owned by Adroll. This cookie is used for collecting user data across website. The collected data is used to serve more relevant advertisement. ; Type: cookie; Duration: 396 days; Domain: .adroll.com ;
Name: __adroll_fpc ; This cookie is set by AdRoll Group to identify the device when the users move between different Digital Properties, for the purpose of serving targeted advertisements. ; Type: cookie; Duration: 365 days;
Name: tluid; This cookie is set by the provider AdRoll.This cookie is used to identify the visitor and to serve them with relevant ads by collecting user behaviour from multiple websites.; Type: cookie; Duration: 91 days;
Affiliate Provider APAC
Description of Service
Commission Factory is an affiliate marketing network that acts as the intermediary between advertisers (also referred to as merchants) and affiliates (also referred to as publishers or partners). Affiliates promote advertisers via their traffic sources and for advertiser conversions driven, the affiliate is rewarded with a Commission rate for the sale. Commission Factory provides the technology used to track and attribute sales to the correct affiliates, as well as facilitating the payment of affiliate commission on behalf of the advertiser.
This service is only being used on www.villeroy-boch.com.au.
Processing Company
Commission Factory Pty Ltd
Suite 401, 32 Martin Place, Sydney NSW 2000
Data Purposes
This list represents the purposes of the data collection and processing.
For conversion attribution purposes only i.e. marketing analysis
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking pixel (GTM integration)
Cookie
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Order ID
Order Amount
Currency
Coupon
Referring partner
Legal Basis
In the following the required legal basis for the processing of data is listed.
Consent Art. 6 Abs. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Australia
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
We will only retain personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Affiliate marketing
Tracking
Reportings
Payment
Cross-device linking
Generating leads
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Journey tags
Device fingerprinting
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Clicked advertisements
Reference
Product information
Geographic location
Identifiers
Hashed IP Address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
AWIN AG
Click here to read the privacy policy of the data processor
Name: bId; Sets a browser-specific ID to identify a new click on the same browser.; Type: cookie; Duration: 365 days; Domain: awin1.com and zenaps.com;
Name: aw*****; Set when you click on one of AWIN's links. Stores IDs for referring website, advertisement on which you clicked, group of advertisements to which the advertisement belongs, time you clicked on it, ID for the type of advertisement, ID for the product and any reference the referring site adds to the click.; Type: cookie; Duration: 30 days; Domain: awin1.com and zenaps.com;
Name: AWSESS; Set when you see an advertisement and used to help AWIN make sure they don't keep showing you the same advertisement. Expires at the end of the session, when you close your browser; Type: cookie; Duration: Session; Domain: awin1.com and zenaps.com;
Name: awpv*****; Set when you see an advertisement. Stores an ID for the website that showed the advertisement and the time you saw the advertisement.; Type: cookie; Duration: 1 day; Domain: awin1.com, zenaps.com;
Name: _aw_m_*****; Stores a reference to an individual click to attribute a sale between publisher and advertiser websites.; Type: cookie; Duration: 365 days;
Name: _aw_j_*****; Stores a reference to an individual user journey to attribute events between publisher and advertiser websites.; Type: cookie; Duration: 91 days;
Name: _aw_sn_*****; Used for Strictly Necessary journeys where the consumer must receive a desired service from the measurement of the journey (cashback or voucher discount). Stores a reference to an individual click to attribute a sale between publisher and advertiser websites.; Type: cookie; Duration: 365 days;
Name: adv_awc, awc, _awc_*****; Stores a reference to an individual click to attribute a sale between publisher and advertiser websites.; Type: cookie; Duration: 365 days;
Name: source, awin_source or _aw_channel (Shopify only); Stores a reference to the traffic channel.; Type: cookie; Duration: 365 days;
Name: _D9J; Used for performance optimisation to match the request containing the the device attribution to the same edge node.; Type: cookie; Duration: 365 days; Domain: the.sciencebehindecommerce.com;
Name: Cookies, Local Storage, Cache; If enabled, an alternative storage medium for the persistance of the Awin click identifier used in the attribution of sales for Advertisers.; Type: cookie; Duration: 365 days;
BazaarVoice
Description of Service
This is a product evaluation and customer survey service to use this customer feedback to develop customizations of our offering.
Processing Company
Bazaarvoice Inc.
10901 Stonelake Blvd., Austin, Texas 78759, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Optimization
Customer surveys
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Web beacons
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Browser information
Usage data
Date and time of visit
Device information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Bazaarvoice Inc.
Click here to read the privacy policy of the data processor
Name: bv_segment, BVImpl<site>; This is used fo client-driven A/B tests.; Type: cookie; Duration: 120 minutes;
Name: bvf_<id>; Identifies items for which a user has submitted feedback, such as Helpfulness vote. ; Type: cookie; Duration: Session;
Name: BVBRANDID; Allows internal Bazaarvoice web analytics to be correlated to the same user for interactions within a particular client domain.; Type: cookie; Duration: 365 days;
Name: BVBRANDSID; Allows internal Bazaarvoice web analytics to be correlated to the same user for interactions within a particular client domain.; Type: cookie; Duration: Session;
Name: bv_metrics; Performance diagnostic events for less than 1/1000th of users.; Type: cookie; Duration: 120 minutes;
Name: NoCookie; Set when a user opts out of tracking or indicates that they are under the age of 13. If the cookie is activated, then existing tracking cookies are unset. This value is honored as long as the cookie exists.; Type: cookie; Duration: 7305 days;
Criteo
Description of Service
This is an advertising service. It is used to create personalized ads for consumers.
Processing Company
Criteo SA
32 Rue Blanche, 75009 Paris, France
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Advertisement
Marketing
Personalisation
Retargeting
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
Click path
Date and time of visit
Device information
Files viewed
Location information
IP address
Mobile advertising IDs
Number of page views
Products viewed
Search terms
Technical IDs
Usage data
Number of ads served
Referrer URL
E-mail address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Technical data is retained for up to 13 months. Cookies expire 13 months after they are last updated.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
Criteo SA
Click here to read the privacy policy of the data processor
Name: r.ack; This is used for identification on Safari.; Type: cookie; Duration: 60 minutes;
Name: ASP.NET_Sessionid; The session ID is used to uniquely identify a browser on the server.; Type: cookie; Duration: Session;
Name: uid; This cookie contains an identifier than enables Criteo to identify the user across different websites.; Type: cookie; Duration: 396 days;
Name: uic; This cookie is used to identify the context of the user, e.g. in which stage of the buying process the user is.; Type: cookie; Duration: 183 days;
Name: evt; This cookie is used to identify the context of the user, e.g. in which stage of the buying process the user is.; Type: cookie; Duration: 183 days;
Name: udc; This cookie contains the information about the last visited page on the customer's website.; Type: cookie; Duration: 183 days;
Name: acdc; This cookie is used for dynamic inventory selection.; Type: cookie; Duration: 183 days;
Name: zdi; This cookie is used for dynamic inventory selection.; Type: cookie; Duration: 183 days;
Name: eid; This cookie contains the user ID of publishers/marketers.; Type: cookie; Duration: 183 days;
Name: cto_tld_test; This cookie is used to find the higher level domain under which a cookie can be written.; Type: cookie; Duration: Session;
Name: cto_bundle; This cookie helps Criteo better manage the tracking solution. This bundle is Criteo’s first-party cookie, enabling personalized marketing by locally storing match keys only for users who have provided appropriate related consent.; Type: web;
Name: criteo_write_test; This cookie is used to check whether Criteo can drop cookies on the current subdomain.; Type: cookie; Duration: Session;
Name: opt; This cookie contains the information whether a user has unsubscribed from the service or from one of the marketers within the network.; Type: cookie; Duration: 365 days;
Name: cto_lwid; This cookie creates an alternative unique Criteo user ID per user and partner, which is used for tracking solutions.; Type: cookie; Duration: 396 days;
Name: cto.idcpy; This cookie is used to create a User-ID.; Type: cookie; Duration: 396 days;
Name: cto_clc; This cookie helps Criteo to better manage the tracking solution.; Type: cookie; Duration: 1 day;
Name: cto_axid; This cookie is created only when the user graph is enabled for the client and supports Criteo's tracking solution.; Type: cookie; Duration: 390 days;
Name: cto_pxsig; This cookie is created only when the user graph is enabled for the client and supports Criteo's tracking solution.; Type: cookie; Duration: 60 minutes;
Name: cto_idfs, cto_sid; This cookie is used to present relevant content and advertising to the visitor.; Type: cookie; Duration: 396 days;
Name: receive-cookie-deprecation; This cookie is required as part of the Privacy Sandbox test phase, in preparation fort he third-party cookies deprecation on Chrome. ; Type: cookie; Duration: 396 days;
Name: browser_data; This cookie helps Criteo better manage the tracking solution. It is enabling personalized marketing in some technical environments by locally storing match keys only for users who have provided appropriate related consent.; Type: cookie; Duration: 396 days;
Name: cto_optout; This cookie helps Criteo identify the opted-out users.; Type: cookie; Duration: 400 days;
Name: criteo_localstorage_check; This cookie is used to check whether Criteo can write to the local storage.; Type: cookie; Duration: Session;
Criteo OneTag
Description of Service
The Criteo OneTag is a JavaScript tag that Criteo uses to track the behavior of users as they browse our site. Criteo helps us to promote our products and services by enabling us to tailor our campaigns and offers to audiences that we want to reach with content that we promote on our websites.
Processing Company
Criteo SA
32 Rue Blanche, 75009 Paris, France
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Tracking
Optimization
Marketing
Advertisement
Personalisation
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Browser information
Usage data
Device information
Date and time of visit
Mobile advertising IDs
Android/Google Advertising ID
iOS identifier for advertisers
Third party information
Cookie ID
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Criteo SA
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Social Media
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Unique user ID
Social media user name
Social media posts
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Bazaarvoice GmbH
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Analytics
Optimization
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
Click path
Cookie information
Date and time of visit
Demographic data
Device identifiers
Location information
Hardware/software type
Internet service provider
IP address
Number of times ads are seen
Serving domains
Interaction data
Page views
Search history
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited, Google LLC, Alphabet Inc.
Click here to read the privacy policy of the data processor
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 365 days; Domain: doubleclick.net;
Name: DSID; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 14 days; Domain: doubleclick.net;
Name: pm_sess; This cookie is used to prevent malicious sites from acting on behalf of a user without their knowledge; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net;
Name: pm_sess_NNN; This cookie is used to prevent malicious sites from acting on behalf of a user without their knowledge.; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net;
Name: aboutads_sessNNN; This cookie is used to store information about a user's preferences regarding online behavioral advertising, specifically whether they have opted out of receiving personalized ads.; Type: cookie; Duration: 30 minutes; Domain: doubleclick.net, google.com;
Name: FLC; This cookie is used for creating targeted ads.; Type: cookie; Duration: 0 minutes; Domain: doubleclick.net;
Name: RUL; This cookie is used to store user consent for cookies and session information; Type: cookie; Duration: 365 days; Domain: Set from partner domain.;
Name: PAIDCONTENT; This cookie is used to track whether a user has paid access for premium content.; Type: cookie; Duration: 30 days; Domain: doubleclick.net;
Name: APC; This cookie is used for remembering user preferences, authenticating users, preventing fraud, and improving website performance.; Type: cookie; Duration: 183 days; Domain: doubleclick.net;
epoq
Description of Service
This is a personalization service.
Processing Company
Epoq internet services GmbH
Willy-Brandt-Straße 3 76275 Ettlingen, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Personalisation
Advertisement
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Usage data
Clicks
IP address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Epoq internet services GmbH
Click here to read the privacy policy of the data processor
Our website uses Product Guides to advice you during your buying decision process and enable an easy product selection.
Processing Company
excentos Software GmbH
Reiterweg 1, 14469 Potsdam, Germany
Data Purposes
This list represents the purposes of the data collection and processing.
Data is collected for provisioning and operation of "Product Guides", which offer digital advice and product search services to users of the Customer. The Product Guides process usage data in order to provide appropriate product recommendations. The Product Guides can optionally be used to collect additional data for marketing and market research purposes and for lead generation.
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
usage data such as the answer options and navigation actions selected by the user as well as interactions with or buying transactions (if eCommerce tracking is enabled) of product recommendations
IP-address
Contact details and other information collected in the course of product consultation
Legal Basis
In the following the required legal basis for the processing of data is listed.
Article 6 (1) (a) GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Germany and Helsinki, Europe
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
infrastructure providers (like Cloudflare) temporarily track the IP address and usage activity of users to enable the server infrastructure to repel cyber-attacks. This is a required precaution measure in order to be able offering our services. This data is only stored temporarily (up to 4 hours) to be able identifying possible cyber- attacks.
Data Recipients
In the following the recipients of the data collected are listed.
For purposes of analyzing the Product Guide’s usage data, the usage data is stored permanently in a web analytics system provided by excentos in anonymous form. The web analytics system is accessible to excentos employees with the required permissions. excentos has no access to the user’s IP addresses.
Facebook Pixel
Description of Service
This is a Tracking technology offered by Facebook and used by other Facebook services. It is used to track interactions of visitors with websites ("Events") after they have clicked on an ad placed on Facebook or other services provided by Meta ("Conversion").
Processing Company
Meta Platforms Ireland Ltd.
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Marketing
Retargeting
Advertisement
Conversion Tracking
Personalisation
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Ads viewed
Content viewed
Device information
Geographic location
HTTP-header
Interactions with advertisement, services, and products
IP address
Items clicked
Marketing information
Pages visited
Pixel ID
Referrer URL
Usage data
User behaviour
Facebook cookie information
Facebook user ID
Usage/click behaviour
Browser information
Device ID
User agent
Browser type
Device operating system
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
United Kingdom
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Meta Platforms Ireland Ltd., Meta Platforms Inc.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Analytics
Conversion Tracking
Measure ad performance
Personalisation
Targeting
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
JavaScript
Web beacons
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Location information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google LLC
Click here to read the privacy policy of the data processor
Name: NID; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 183 days;
Name: __gads; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 396 days;
Name: pm_sess; This is used to make sure that requests come from a user.; Type: cookie; Duration: 30 minutes;
Name: ANID; This is used to show advertisements on websites outside of Google.; Type: cookie; Duration: 396 days;
Name: _gcl_au; This is used to store and track conversions.; Type: cookie; Duration: 90 days;
Name: FPGCLAW; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 90 days;
Name: FPGCLGB; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 90 days;
Name: _gcl_gb; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 90 days;
Name: _gac_gb_<wpid>; This cookie is used to track campaign related information on the user.; Type: cookie; Duration: 90 days;
Name: _gcl_aw; This cookie is set when a user arrives at the website via a click on a Google ad.; Type: cookie; Duration: 90 days;
Name: YSC; This is used to store and track interaction.; Type: cookie; Duration: Session;
Name: 1P_JAR; This is used to collect information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.; Type: cookie; Duration: 30 days;
Name: AID; This is used to link activities on other devices the user has previously logged into with a Google account. ; Type: cookie; Duration: 396 days;
Name: FPAU; This is used to collect information about the users and their activity on the website through embedded elements with the purpose of analytics and reporting.; Type: cookie; Duration: 90 days;
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 365 days; Domain: doublecheck.net;
Google Ads Conversion Tracking
Description of Service
This is a conversion tracking service. This service records what happens after a click on an ad placed by us via Google Ads when users subsequently visit the website. In conversions, we measure whether users, after clicking on an ad placed by us via Google Ads, perform a certain action specified by us on the website (e.g., whether services are ordered). This allows the user to track which keywords, ads, ad groups or campaigns lead to the desired interaction of the users.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Conversion Tracking
Analytics
Measuring the success of marketing campaigns
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Tracking Pixel
Tracking code
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser language
Browser type
Clicked advertisements
Cookie ID
Date and time of visit
IP address
Referrer URL
Web request
User behaviour
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Taiwan
Chile
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited, Google LLC, Alphabet Inc
Click here to read the privacy policy of the data processor
Name: test_cookie; Set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.; Type: cookie; Duration: 15 minutes; Domain: doubleclick.net;
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 365 days; Domain: doubleclick.net;
Name: _gcl_aw; This cookie is set when a user clicks on a Google ad to reach the website. It contains information about which ad was clicked, so that successes achieved, such as orders or contact requests, can be assigned to the ad.; Type: cookie; Duration: 90 days;
Name: _gcl_dc_; This cookie is set when a user clicks on a Google ad to reach the website. It contains information about which ad was clicked, so that successes achieved, such as orders or contact requests, can be assigned to the ad.; Type: cookie; Duration: 90 days;
Google Ads Remarketing
Description of Service
This is a remarketing service. With Remarketing, the user can display ads to users of the website based on their interests on other websites within the Google Displaying Network (e.g. in Google Search or on YouTube). For this purpose, the users' interactions are analyzed, e.g. regarding the products and services a user is interested in. This enables the user to display targeted advertising to the user on other websites even after the visit to the website.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Remarketing
Advertisement
Tracking users' actions
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Tracking Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Duration of visit
IP address
Pages visited
Content user is interested in
Website use
Referrer URL
Advertising identifier
Date and time of visit
Device information
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Taiwan
Chile
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited
Google LLC
Alphabet Inc.
Click here to read the privacy policy of the data processor
Name: IDE; Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.; Type: cookie; Duration: 365 days; Domain: doubleclick.net;
Name: test_cookie; Set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.; Type: cookie; Duration: 15 minutes; Domain: doubleclick.net;
Name: NID; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 183 days;
Name: __gads; This is used to provide advertisements or retargeting.; Type: cookie; Duration: 396 days;
Name: pm_sess; This is used to make sure that requests come from a user.; Type: cookie; Duration: 30 minutes;
Name: ANID; This is used to show advertisements on websites outside of Google.; Type: cookie; Duration: 396 days;
Name: _gcl_au; This is used to store and track conversions.; Type: cookie; Duration: 90 days;
Name: _gcl_gb; This is used to register a unique ID and identify a user. ; Type: cookie; Duration: 91 days;
Name: _gcl_aw; This is used to provide ad delivery or retargeting. ; Type: cookie; Duration: 91 days;
Google Analytics
Description of Service
This is a web analytics service. With this, the user can measure the advertising return on investment "ROI" as well as track user behavior with flash, video, websites and applications.
Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
JavaScript
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Click path
Date and time of visit
Device information
Location information
IP address
Pages visited
Referrer URL
Browser information
Hostname
Browser language
Browser type
Screen resolution
Interaction data
User behaviour
Visited URL
Cookie ID
Device operating system
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The Retention Period depends on the type of the saved data. Each user can choose how long Google Analytics retains data before automatically deleting it.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Chile
Taiwan
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited, Alphabet Inc., Google LLC
Click here to read the privacy policy of the data processor
Name: __utmb; This cookie is used to track the time of the visit.; Type: cookie; Duration: Session;
Name: _ga; This cookie is used to distinguish between users.; Type: cookie; Duration: 731 days;
Name: _gid; This cookie is used to identify the user.; Type: cookie; Duration: 1 day;
Name: IDE; This is used to show personalised ads. ; Type: cookie; Duration: 396 days;
Name: CONSENT; This is used to store the consent choices of the user. ; Type: cookie; Duration: 731 days;
Name: _gat; This is used to read and filter requests from bots.; Type: cookie; Duration: 1 minute;
Name: FPID; This is used to store a value used for setting the Client ID in the request to Google's servers.; Type: cookie; Duration: 731 days;
Name: FPLC; This is used to register a unique ID that is used to generate statistical data about how the visitor uses the website.; Type: cookie; Duration: 1200 minutes;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Google Signals
Description of Service
This is a web analytics service. This service allows Cross Device Tracking.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Optimization
Remarketing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Search terms
Usage data
Device information
Browser information
Content viewed
Geographic location
Anonymised IP address
Demographic data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited
Google LLC
Alphabet Inc
Click here to read the privacy policy of the data processor
This is an analytics service. The service makes it possible to measure traffic and engagement on websites and mobile apps across devices using customizable reports.
Processing Company
Google Ireland Limited
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking code
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Device information
Geographic location
Browser information
Screen resolution
Referrer URL
Interaction data
Date and time of visit
User behaviour
Pages visited
Online identifiers
Shortened IP Address
User ID
Advertising identifier
Purchase information
Device operating system
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data is retained for up to 50 months, depending on the controller’s choice.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Taiwan
Chile
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Analytics
Optimization
Remarketing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Search terms
Usage data
Device information
Browser information
Content viewed
Geographic location
Anonymised IP address
Demographic data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Singapore
Taiwan
Chile
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited
Google LLC
Alphabet Inc
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Displaying Maps
Location identification
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
APIs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of visit
Location information
IP address
URL
Usage data
Search terms
Geographic location
Interaction data
Mobile network information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
Taiwan
Chile
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Google Ireland Limited, Google LLC, Alphabet Inc
Click here to read the privacy policy of the data processor
Name: NID; This cookie is used to store the users preferences.; Type: cookie; Duration: 183 days;
Hotjar
Description of Service
This is a web analytics service. It is used to collects data on users’ behavior. Hotjar can also process provided information from you within surveys and feedback functions incorporated into our website.
Processing Company
Hotjar Limited
Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Feedback
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of visit
Device type
Geographic location
IP address
Mouse movements
Pages visited
Referrer URL
Screen resolution
Unique device identifier
Language information
Browser type
Clicks
Domain name
Unique user ID
Answers given to surveys
Device operating system
Screen recordings
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data about your visit and your activities on the website are generally stored for 365 days and then automatically deleted. This does not apply to information gathered within surveys and incoming feedback. However, data will be deleted in any case as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Hotjar Ltd., Amazon Web Services EMEA SARL, Datadog Inc., Functional Software Inc.
Click here to read the privacy policy of the data processor
Name: _hjClosedSurveyInvites; This cookie is set once a visitor interacts with an External Link Survey invitation modal. It is used to ensure that the same invite does not reappear if it has already been shown.; Type: cookie; Duration: 365 days;
Name: _hjDonePolls; This cookie is set by Hotjar once a visitor completes a survey using the On-site Survey widget. It ensures that the same survey does not reappear for that visitor after it has been submitted.; Type: cookie; Duration: 365 days;
Name: _hjMinimizedPolls; This cookie is set by Hotjar once a visitor minimizes an On-site Survey widget. It ensures that the widget remains minimized as the visitor navigates through the site.; Type: cookie; Duration: 365 days;
Name: _hjShownFeedbackMessage; This cookie is set by Hotjar when a visitor minimizes or completes an Incoming Feedback widget. It ensures that the widget remains minimized if the visitor navigates to another page where it is configured to appear.; Type: cookie; Duration: 365 days;
Name: _hjid; This cookie is set by Hotjar when a user first lands on a page containing the Hotjar script. It is used to persist the Hotjar User ID, which is unique to that site and browser. This ensures that behavior during future visits to the same site is attributed to the same user ID.; Type: cookie; Duration: 365 days;
Name: _hjTLDTest; This cookie is used by the Hotjar script to determine the most generic cookie path that should be applied, allowing cookies to be shared across subdomains where applicable. To achieve this, the script attempts to store the _hjTLDTest cookie using various URL substring alternatives until it fails. Once the check is complete, the cookie is removed.; Type: cookie; Duration: Session;
Name: _hjUserAttributesHash; This cookie caches User Attributes sent through the Hotjar Identify API for the duration of the session, allowing the system to detect when an attribute has changed and needs to be updated.; Type: cookie; Duration: Session;
Name: _hjCachedUserAttributes; This cookie stores User Attributes which are sent through the Hotjar Identify API, whenever the user is not in the sample. These attributes will only be saved if the user interacts with a Hotjar Feedback tool.; Type: cookie; Duration: Session;
Name: _hjLocalStorageTest; This cookie is used to check if the Hotjar Tracking Script can use local storage. If it can, a value of 1 is set in this cookie. The data stored in_hjLocalStorageTest has no expiration time, but it is deleted almost immediately after it is created.; Type: cookie; Duration: Session;
Name: _hjIncludedInPageviewSample; This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's pageview limit.; Type: cookie; Duration: 30 minutes;
Name: _hjIncludedInSessionSample; This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's daily session limit.; Type: cookie; Duration: 30 minutes;
Name: _hjAbsoluteSessionInProgress; This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie.; Type: cookie; Duration: 30 minutes;
Name: _hjFirstSeen; This cookie is set to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.; Type: cookie; Duration: Session;
Name: hjViewportId; This cookie is set to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.; Type: cookie; Duration: Session;
Name: _hjRecordingEnabled; This cookie is added when a Recording starts and is read when the recording module is initialized to see if the user is already in a recording in a particular session.; Type: cookie; Duration: Session;
Name: _hjSessionUser {site_id}; This cookie is set when a user first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.; Type: cookie; Duration: 365 days;
Name: _hjSession{site_id}; This cookie holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session.; Type: cookie; Duration: 30 minutes;
Name: _hjSessionTooLarge; This cookie causes Hotjar to stop collecting data if a session becomes too large. This is determined automatically by a signal from the WebSocket server if the session size exceeds the limit.; Type: cookie; Duration: Session;
Name: _hjSessionRejected; If present, this cookie will be set to '1' for the duration of a user's session, if Hotjar rejected the session from connecting to the WebSocket due to server overload. This cookie is only applied in extremely rare situations to prevent severe performance issues.
; Type: cookie; Duration: Session;
Name: _hjSessionResumed; This cookie is set when a session/recording is reconnected to Hotjar servers after a break in connection.; Type: cookie; Duration: Session;
Name: hjActiveViewportIds; This cookie stores active viewport IDs and an expiration timestamp; removed when the browser is closed.; Type: cookie; Duration: Session;
Hotjar - B2B Shop
Description of Service
The tool is a web analytics service that is used to collect data on user behaviour. Hotjar can be used to create so-called heatmaps and recordings. Heatmaps can be used to visualise user behaviour, while recordings provide information about what content is viewed by users.
Processing Company
Hotjar Ltd.
Hotjar Ltd Dragonara Business Centre 5. Stock, Dragonara Road, Paceville St Julian's STJ 3141 Malta
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Analysis
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking Code
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Date and time of the visit
Device type
Geographical location (country only)
IP address
Mouse movements
Pages visited
Referrer URL
Screen resolution
Unique device identifier
Language information
Device operating system
Browser type
Clicks
Domain name
Unique user ID
Responses to surveys
Console logs and errors
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
https://www.hotjar.com/legal/support/dpa/
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
1 year
Data Recipients
In the following the recipients of the data collected are listed.
Information collected from cookies set in your device that qualify as personal data will be processed by InZynk, a company offering lead identification and ad targeting services with offices in Stockholm and Trondheim. The collected IP-number is matched towards an organisation name (if there can be a match). If the IP-number cannot be matched to an organisation the IP-number, and the data for that session, is deleted. Organisations with less than five (5) employees are per default not possible to match.
Processing Company
InZynk AB
Kungsgatan 32, 111 35 Stockholm, Sweden
Data Purposes
This list represents the purposes of the data collection and processing.
Marketing
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tag
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP-address
visits and page views
Legal Basis
In the following the required legal basis for the processing of data is listed.
Article 6 (1) (a) GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
The data connected to a specific visit and its IP-number is stored within EU through AWS (EU-north 1(based in Sweden)).
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
For unmatched data (IP-numbers which InZynk can’t match to a company), this data is deleted within 24 hours at latest; for matched data, the retention period is one year. After that, only aggregated data is stored (not IP-numbers).
Data Recipients
In the following the recipients of the data collected are listed.
InZynk AB
Click here to read the privacy policy of the data processor
Kameleoon enables e-commerce and marketing departments to personalize the customer journey and offer each visitor unique experiences, to maximize both sales and margins. Kameleoon is the leading SaaS platform for AI-driven personalization in Europe.
Processing Company
Kameleoon SAS
12 rue de la Chaussée d'Antin, 75009 Paris, France; Beim Alten Ausbesserungswerk 4, 77654 Offenburgh, Germany; 21 Lombard Street London EC3V 9AH, United Kingdom
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Testing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Local storage
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
Screen resolution
Time zone
Operating system information
Device type
Geographic location
Number of page views
Usage data
Date and time of visit
Number of opened tabs
Whether or not an ad blocker is installed
Number of visits
Referrer URL
URL
IP address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.The data will be deleted as soon as they are no longer needed for the processing purposes. By default, visitor data are kept in local storage for 380 days and analytics data for 2 years.
Data Recipients
In the following the recipients of the data collected are listed.
Kameleoon SAS
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Marketing
Retargeting
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Device information
IP address
Referrer URL
Timestamp
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Singapore,European Union,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted after 90 days.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
LinkedIn Ireland Unlimited Company
Click here to read the privacy policy of the data processor
Name: BizographicsOptOut; This cookie is used to determine whether a user has rejected targeted advertising.; Type: cookie; Duration: 3653 days;
Name: UserMatchHistory; Used by the LinkedIn Insight tag to provide detailed campaign reporting and discover new business demographics by layering LinkedIn data with website visitor data.; Type: cookie; Duration: 30 days;
Name: U; This is a browser Identifier for users outside EU/EEA.; Type: cookie; Duration: 90 days;
Name: li_sugr; Used to make a probabilistic match of a user's identity outside the EU/EEA.; Type: cookie; Duration: 90 days;
Name: bscookie; This is used for remembering that a logged in user is verified by two factor authentication.; Type: cookie; Duration: 731 days;
Name: bcookie; Browser Identifier cookie to uniquely identify devices accessing LinkedIn to detect abuse.; Type: cookie; Duration: 731 days;
Messaging
Description of Service
Direct communication channel for end customers on our website in the form of a live chat solution during business hours. Outside business hours, the end customer can use this service to offline messages (similar to the contact forms).
Processing Company
salesforce.com Germany GmbH
Erika-Mann-Str. 31, 80636 Munich, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
To help the end customer with specific product or process questions
Contact details for offline messages to respond to the end customer
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
URL
E-Mail-Address
Name
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Germany / EU
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Conversion Tracking
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Web beacons
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser language
Clicked advertisements
Digital signature
GUID generated by UET tag
IP address
Microsoft Click ID
Microsoft cookie
Page title
Referrer URL
Screen color depth
Screen resolution
UET ID tag
Page load time
Publisher/URL accessed
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
Microsoft Corporation
Click here to read the privacy policy of the data processor
Name: _uetsid; This is a tracking cookie that is used for targeted advertising. ; Type: cookie; Duration: 1 day;
Name: MUID; This is a user identifier tracking cookie to help count valid clicks for targeted advertising. ; Type: cookie; Duration: 390 days;
Name: MUIDB; This is a user identifier tracking cookie used by Microsoft Bing Ads, which is used for targeted advertising. ; Type: cookie; Duration: 390 days;
Name: SRCHUSR, SRCHUID, SRCHD; This cookie allows to serve relevant advertisements to visitors across the Microsoft Bing network.; Type: cookie; Duration: 365 days;
Name: SRCHHPGUSR; This cookie helps to track the effectiveness of advertising campaigns on the Bing advertising network.; Type: cookie; Duration: 365 days;
Name: _RwBf; This is set by a third party service Bing for advertisement tracking purposes. ; Type: cookie; Duration: 365 days;
Name: _HPVN; This is a Microsoft MSN 1st party cookie that ensures the proper functioning of the website.; Type: cookie; Duration: Session;
Name: MSCC; These cookies track user behaviour through the site and interactions with the Bing Maps API.; Type: cookie; Duration: 183 days;
Name: ABDEF; This cookie is used by the Bing advertising network for advertising tracking purposes.; Type: cookie; Duration: Session;
Name: _uetvid; This is a tracking cookie that is used for targeted advertising.; Type: cookie; Duration: 389 days;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Microsoft Advertising Remarketing
Description of Service
This is a remarketing service.
Processing Company
Microsoft Corporation
One Microsoft Way, Redmond, Washington 98052, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Remarketing
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser language
Cookie information
Digital signature
IP address
Microsoft Click ID
Page title
Referrer URL
Screen color depth
Screen resolution
Usage data
Version of UET
Event information
Page load time
Page URL
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
Microsoft Corporation
Click here to read the privacy policy of the data processor
Name: _uetsid; This is a tracking cookie that is used for targeted advertising. ; Type: cookie; Duration: 30 minutes;
Name: MUID; This is a user identifier tracking cookie to help count valid clicks for targeted advertising.; Type: cookie; Duration: 390 days;
Name: MUIDB; This is a user identifier tracking cookie used by Microsoft Advertising, which is used for targeted advertising. ; Type: cookie; Duration: Session;
Name: _uetvid; This is used to track visitors across multiple websites in order to present relevant advertisements based on the visitor's preferences.; Type: cookie; Duration: 16 days;
Microsoft Conversion Tracking
Description of Service
This is a conversion tracking service. This means that it helps websites turn website visitors into paying customers.
Processing Company
Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Conversion Tracking
Remarketing
Universal event tracking
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Web beacons
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Ads viewed
Bounce rates
Browser language
Conversions
Digital signature
Duration of visit
Engagement metrics
IP address
Microsoft Click ID
Number of visits
Page response times
Page title
Referrer URL
Screen color depth
UET ID tag
URL
User agent data
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
Microsoft Corporation
Click here to read the privacy policy of the data processor
Name: _uetsid ; Microsoft Bing Ads UET (Universal Event Tracking) tracking cookie that is used for targeted advertising. ; Type: cookie; Duration: 30 minutes;
Microsoft Clarity
Description of Service
This is an analytics tool. It is used to provide website usage statistics, session recording, and heatmaps, created mainly through the tracking of mouse movements.
Processing Company
Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Optimization
Analytics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking code
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Date and time of visit
Unique user ID
Session ID
User behaviour
Interaction data
Mouse movements
Clicks
Scrolling activity
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be stored for 13 month(s)
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Microsoft Corporation
Click here to read the privacy policy of the data processor
Name: _clck; This persists the Clarity User ID and preferences, is unique to that site and it is attributed to the same user ID.; Type: cookie; Duration: Session;
Name: _clsk; Connects multiple page views by a user into a single Clarity session recording.; Type: cookie; Duration: Session;
Name: CLID; Identifies the first-time Clarity saw this user on any site using Clarity.; Type: cookie; Duration: Session;
Name: ANONCHK; Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn't use ANID and so this is always set to 0.; Type: cookie; Duration: Session;
Name: MUID; Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.; Type: cookie; Duration: Session;
Name: SM; Used in synchronizing the MUID across Microsoft domains.; Type: cookie; Duration: Session;
Mynewsdesk
Description of Service
Mynewsdesk is a digital platform that uses AI to offer an intelligent solution for PR. We use Mynewsdesk to increase brand awareness and to engage with journalists, opinion leaders, customers, influencers and other relevant target groups.
Data Purposes
This list represents the purposes of the data collection and processing.
Media monitoring and analysis
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser type and version
timezone
IP-address
location
the website from which you were derived
visited websites
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Data Recipients
In the following the recipients of the data collected are listed.
Mynewsdesk
MyRegistry
Description of Service
MyRegistry gifting software provides people and organizations the ability to add any item, from any store in the world, with a click of a button onto one Universal Registry or Gift List.
Legal Basis
In the following the required legal basis for the processing of data is listed.
Article 6 (1) (a) GDPR
Data Recipients
In the following the recipients of the data collected are listed.
MyRegistry LLC
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Analytics
Conversion Tracking
Targeting
Measuring the success of marketing campaigns
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Website tags
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Ads viewed
Click path
Clicked advertisements
Cookie information
Crash data
Date and time of visit
Device identifiers
Device information
Device operating system
Geographic location
IP address
Preferences
Search terms
Third party information
Websites visited
Browser settings
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Pinterest Inc.
Click here to read the privacy policy of the data processor
The service allows users to measure information based on surveys on their websites.
Processing Company
konversionsKRAFT AG
Seifgrundstraße 2, 61348 Bad Homburg, Germany
Data Purposes
This list represents the purposes of the data collection and processing.
Understanding the usability problems of the bathroom planner tool
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
API connection (REST)
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Visitor ID: generated when survey form is submitted
Device Information Online identifier (Google Analytics ID)
Current Page (last virtual pageview)
Survey information: checkbox survey information: textform content, entered by the visitor
Legal Basis
In the following the required legal basis for the processing of data is listed.
Consent Art. 6 Abs. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Germany
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Data will be deleted directly after evaluation (latest 4 weeks after collecting the information)
Data Recipients
In the following the recipients of the data collected are listed.
Villeroy & Boch AG
konversionsKRAFT AG
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Analytics
Optimization
Reportings
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
Date and time of visit
Geographic location
Information about website visit
IP address
Referrer URL
Interaction data
User behaviour
User ID
Operating system
Browser
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Qualifio SA
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Advertisement
Marketing
Tracking
Generating user profiles
Compliance with legal obligations
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Tracking Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
User behaviour
Behavioural data
Unique ID
IP address
Device information
Browser information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce, Inc.
Click here to read the privacy policy of the data processor
Name: dwanonymous_*; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: 180 days;
Name: dwsid; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: sid; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: dwsecuretoken_* ; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: dwcustomer_* ; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: 180 days;
Name: dw_dnt*; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: dwac_*; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: dwpersonalization_*; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: 180 days;
Name: dwsourcecode_*; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: __anact; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: dw_store; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: 180 days;
Name: dw_effective_time; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: Session;
Name: _cfduid; Helps Cloudflare detect malicious visitors to customers' websites and minimize blocking of legitimate users. Can be used on customers' end user devices to identify individual clients behind a shared IP address and can apply security settings on a per-client basis. This is required to support Cloudflare's security features. See Cloudflare's documentation for details on this third-party cookie.; Type: cookie; Duration: 30 days;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Salesforce Commerce Cloud Einstein
Description of Service
This service is used to analyze users interest in the offering in order to provide suitable product recommendations.
Processing Company
Salesforce.com, Inc.
Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Analytics
Personalisation
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
IP address
Click path
Browser information
Device information
Referrer URL
Date and time of visit
Cookie ID
User ID
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce, Inc.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Providing online chat
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Browser information
Browser language
Device operating system
Geographic location
IP address
Referrer URL
Chat content
Date and time of interaction
Status Information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
salesforce.com Germany GmbH, salesforce.com Inc.
Click here to read the privacy policy of the data processor
This is a CRM software system that provides solutions for sales, customer service and marketing. It allows the creation and management of marketing relationships and campaigns with customers.
Processing Company
Salesforce.com, Inc.
Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Analytics
Targeting
Personalization of content
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking Pixel
Web beacons
Mobile SDKs
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Identifiers
IP address
User agent string
Timestamp
Interaction data
Token
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Salesforce processes keeps interaction data for a rolling two-year period. The controller may store identity and profile data on Salesforce's global servers for as long as they choose.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Worldwide
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce Inc, Sub-processors
Click here to read the privacy policy of the data processor
Name: __sfid*; Stores the user's cookie consent status to ensure tracking only occurs when consent has been granted.; Type: cookie; Duration: 731 days;
Name: __evga_*; Stores the user's cookie consent status to ensure tracking only occurs when consent has been granted.; Type: cookie; Duration: 731 days;
Subservices
Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.
Marketing Cloud Einstein
Description of Service
This is used to optimally evaluate and implement marketing activities. Through statistics on target groups, sending time, interaction frequency and content the user can successfully target customers.
Processing Company
Salesforce.com, Inc.
Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Marketing
Statistics
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Clicked E-Mails
Clicks
E-mail address
Interaction data
Content interaction information
Meta data
Websites visited
Conversions
Shopping Cart Content
Clicks on Recommendations
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America,European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
Salesforce.com, Inc
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
By tracking the conversion we would be able to determine the commission to be paid to the affiliates for driving sales.
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking Code
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Advertising Identifier
Click Date & Time
Traffic Source
HTTP referer
IP Hash
Affiliate Identifier
Pixel Call
Legal Basis
In the following the required legal basis for the processing of data is listed.
Consent Art. 6 Abs. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The customer can choose how long Google Analytics stores data. The maximum retention period is 14 months.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Analysis
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking Code
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
URL of the page
Referrer
UTM Codes
Time Zone
ID of the data point
ID of the page
ID of the session
Scrolled percentage
User-Agent
Device Dimensions
Language
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Netherlands
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
max. 90 days once the service providers account has been deleted
Data Recipients
In the following the recipients of the data collected are listed.
Simple Analytics B.V.
Leaseweb Deutschland GmbH
Worldstream B.V.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Marketing
Performance analysis
Retargeting
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Tracking Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
User ID
Session ID
Event Types
IP Address
User Agent
Current URL
Referrer
Arguments (e.g. order ID, total amount)
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
US
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
Until the user clears their cookies or the data is no longer needed for processing.
Data Recipients
In the following the recipients of the data collected are listed.
Tatari Inc.
Click here to read the privacy policy of the data processor
This list represents the purposes of the data collection and processing.
Analytics
Advertisement
Social Media
Retargeting
Conversion Tracking
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Pixel
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
User agent
Device information
Browser information
IP address
Country
Language information
Websites visited
Installation data
Purchase information
Date and time of visit
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
Singapore,United States of America
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Singapore
United States of America
Data Recipients
In the following the recipients of the data collected are listed.
TikTok Inc.
Click here to read the privacy policy of the data processor
Name: _ttp, ttcsid_, ttcsid_<pixel code>, ttclid; This is used to measure and improve the performance of advertising campaigns and to personalize the customer experience.; Type: cookie; Duration: 396 days;
Name: _pangle; This is used to measure and improve the performance of your advertising campaigns and to personalize the customer's ad experiences delivered by the TikTok Pangle ad network.; Type: cookie; Duration: 396 days;
Userlike
Description of Service
This is a cloud-based live chat solution. It can be integrated with existing websites, enabling real-time communication between customers, employees and internal team members.
Processing Company
Userlike UG
Probsteigasse 44-46, 50670 Cologne, Germany
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Providing online chat
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Amount of data transferred
Browser type
Browser version
Chat record
Device information
E-mail address
First name
IP address
Last name
Number of page views
Operating system information
Referrer URL
Time zone
URL
Date and time of request
Status Information
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. f GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients
In the following the recipients of the data collected are listed.
Userlike UG, Subcontractors
Click here to read the privacy policy of the data processor
Name: uslk_umm_{organization-id}_s; This is used to re-identify the users. ; Type: cookie; Duration: 365 days;
Villeroy & Boch Website Services
Description of Service
geoip_country - Based on the user's IP, the country in which the user is located is determined and stored in a cookie. vb_username_tmp - Customers can add products, collections and bathroom plans to a watch list. vb_fg - Uses personal data for MyClub registration.
Data Purposes
This list represents the purposes of the data collection and processing.
vb_username_tmp - The watchlist persists across sessions, so customers can revisit content later.
geoip_country - Based on the determined country, a redirect to the country domain is enabled.
vb_fg - data submitted by the user for sweapstake registration purpose is stored for a subsequent my club registration form to avoid differences between initial and subsequent data.
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookie
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
ISO-2 Country Code
ID
timestamp
personal data that is submitted by the user for sweapstake registration purpose like: name, e-mail address, address
Legal Basis
In the following the required legal basis for the processing of data is listed.
Article 6 (1) (a) GDPR (consent)
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
vb_fg 1 day vb_username_tmp 1 year geoip_country Session
Data Recipients
In the following the recipients of the data collected are listed.
Villeroy & Boch
YouTube Video
Description of Service
This is a video player service. It can be used by user to watch, like, share, comment and upload videos.
Processing Company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
This list represents the purposes of the data collection and processing.
Displaying Videos
Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies (if Privacy-Enhanced Mode is not activated)
Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
Device information
IP address
Referrer URL
Videos viewed
Legal Basis
In the following the required legal basis for the processing of data is listed.
Art. 6 para. 1 s. 1 lit. a GDPR
Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.
European Union
Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.
Transfer to Third Countries
This service may forward the collected data to a different country. Please note that this service might transfer the data to a country without the required data protection standards. Below you can find a list of countries to which the data is being transferred. For more information regarding safeguards please refer to the provider's privacy policy or contact the provider directly.
Chile
United States of America
Taiwan
Singapore
Data Recipients
In the following the recipients of the data collected are listed.
Alphabet Inc., Google LLC, Google Ireland Limited
Click here to read the privacy policy of the data processor
Name: __sak; This is used to store information about the visitor's video preferences.; Type: web;
Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Type: web;
Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor's device and network settings.; Type: web;
Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user's video player preferences using embedded YouTube video.; Type: web;
Name: YEC; This is used to store the user's video player preferences using embedded YouTube video.; Type: cookie; Duration: 396 days;
Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Type: cookie; Duration: 731 days;
Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Type: cookie; Duration: 179 days;
Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Type: cookie; Duration: Session;
Name: test_cookie; This is a test for cookie setting permissions in user's browser.; Type: cookie; Duration: 1 day;
Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Type: cookie; Duration: 183 days;
Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Type: cookie; Duration: Session;
Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Type: cookie; Duration: 244 days;
Name: pm_sess; This is used to maintain your browsing session.; Type: cookie; Duration: 30 minutes;
Name: CGIC; This is used to provide search results by auto-completing search queries based on a user's initial input.; Type: cookie; Duration: 183 days;
Name: UULE; This is used to determine the users geographic location. ; Type: cookie; Duration: 360 minutes;
Name: _Secure-YEC; This is used to store the user's video player preferences using embedded YouTube videos.; Type: cookie; Duration: 396 days;
Name: __Secure-ENID; Used to remember user preferences (language, number of search results shown, SafeSearch setting) — Google's general-purpose successor/companion to the 'NID' cookie, used across Google services including when YouTube is embedded.; Type: cookie; Duration: 396 days;
Name: __Secure-ROLLOUT_TOKEN; Used by YouTube to roll out and measure new features when other cookies/identifiers can't be used for that purpose (analytics).; Type: cookie; Duration: 183 days;
Name: __Secure-YNID; Replaces the older VISITOR_INFO1_LIVE cookie; used for YouTube analytics, personalization (e.g. recommendations based on past views) and advertising.; Type: cookie; Duration: 183 days;
VI. Joint responsibility
Villeroy & Boch is jointly responsible with third parties for certain processing of personal data of visitors to our website pursuant to Art. 4 No. 7 GDPR and has concluded special agreements for this purpose pursuant to Art. 26 Para. 1 Sentence 2.
These agreements stipulate in particular that these third parties are primarily responsible for data processing and that Villeroy & Boch has no access to the individual data of visitors (but can only call up aggregated statistics, e.g. regarding gender or age distribution).
Furthermore, they undertake to respect the rights of the data subjects and to respond, for example, to requests for information, objections or deletion.
You can find an overview of the cookies used on our website under V. Technologies used. You can revoke your consent to the processing of your personal data for the purposes stated there at any time in the future by calling up our cookie banner again via the footer of our homepage and adjusting your settings accordingly.
Villeroy & Boch asks visitors to the website to contact the aforementioned third parties directly with regard to the assertion of their data subject rights concerning the processing of their data. Villeroy & Boch could also only forward requests for information, for example.
VII. Recipients/categories of recipients
1. Other companies in the Villeroy & Boch group Personal data that you provide during registration (your name, e-mail address, password, and date of birth) will be shared with other companies in the Villeroy & Boch group in order to allow the respective company to provide customer service for you.
We can share the data from your profile with other companies in the Villeroy & Boch group if both companies are responsible for your personal data or if the other companies act as our service provider and your personal data is processed according to our instructions or on our behalf.
We share anonymised and aggregated information with other companies in the Villeroy & Boch group to use for trend analysis.
You likewise have the option of making a contact request there. All contact requests that concern tiles will be promptly forwarded to V&B Fliesen GmbH, who will then get in touch with you. We will delete these requests from our systems after forwarding them.
3. Other third parties We will only share the data you provide for the purposes of contract fulfilment, such as with shipping companies or payment service providers, or in cases where we are legally obliged to do so. Examples of these recipients include
• Authorities and courts (legal duty of disclosure) • Lawyers (assertion of claims) • Credit institutes (processing payment transactions) • Credit agencies (for checking credit history) • Auditors and income tax auditors/accountants (legal audit assignment) • Insurance companies, insurance agents • Tax consultants • Expert/appraiser • Health insurance providers/pension funds (social insurance carriers)
4. Data transmission to third countries If we process data in third countries (meaning countries outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the process of utilising the services of third parties or transmitting data to third parties, this will only be done for the purpose of fulfilling our contractual obligations, on the basis of your consent, due to a legal obligation or based on our legitimate interests. In doing so, we ensure that your personal data is processed in compliance with the European level of data protection, based on special guarantees or due to corresponding contractual obligation including adequate technical and organisational measures.
VIII. Information about children
We do not knowingly collect any personal data about children under 13 years old as a matter of principle. If we become aware that we have unintentionally collected personal data about children under 13 years old, we will take steps to delete this information as quickly as possible insofar as we are not obliged to retain it under the applicable law.
IX. Obligation to provide data, automatic decision making, profiling
1. Do I have an obligation to provide data? In the context of the contractual relationship, you must provide the personal data that is necessary for acceptance, implementation and completion of the contractual relationship and for fulfilment of the duties related to the contract, or that we are obliged by law to collect. Without this data, we will generally not be able to conclude or implement the contract with you.
2. To what extent is there automated decision making/profiling? Within the framework of the procedure for sending newsletters described under III. 2, we use profiling to the extent described there.
X. Deleting or locking data
We abide by the principles of data reduction and data economy. We therefore only store your personal data as long as necessary to achieve the purposes described here or for the retention period stipulated by the legislator. Once the respective purpose has ceased to exist or this period has lapsed, the relevant data is routinely locked deleted in accordance with legal regulations. If processing is based on consent, the respective purpose generally is considered to cease to exist when the consent becomes invalid due to revocation or passage of time. If processing is necessary for fulfilment of the contract, this will generally occur when the contract has been completed in full and after the retention period expires, as required in particular under the German Commercial Code (HGB) and the German Fiscal Code (Abgabenordnung).
XI. What data protection rights do you have?
You have the right to information under Article 15 of the GDPR, the right to correction under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to objection under Article 21 of the GDPR, and the right to data portability under Article 20 of the GDPR.
You can contact our data protection commissioner to exercise these rights. You also have the right to file a complaint with a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the German Federal Data Protection Act, BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found here:
We reserve the right to adjust this data privacy notice occasionally to ensure it always meets the current legal requirements or to reflect changes to our services in the data privacy notice, e.g. when introducing new services. In this case, the new data privacy notice will apply to your next visit to our website.
Updated: 03.04.2023
[1]
From 15 October until 25 October 2026, as a My Club member, you can take advantage of a 20% saving on selected La Boule items (La Boule White, La Boule Stripe, La Boule Black, La Boule Black & White, La Boule Memphis, La Boule Pure Beige and La Boule Miami) after logging in to your customer account. The promotion is valid in the Villeroy & Boch online shop and in all Houses of Villeroy & Boch, only while stocks last. Does not apply to gift cards and cannot be combined with other promotions or discount vouchers.
Please note:Our Villeroy & Boch outlets are not participating in the promotion.
