VAUDE Privacy Policy
General information
The following information will provide you with an easy to navigate overview of what will happen with your
personal data when you visit this website. The term “personal data” comprises all data that can be used to
personally identify you. For detailed information about the subject matter of data protection, please consult
our Data Protection Declaration, which we have included beneath this copy.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
The data on this website is processed by the operator of the website, whose contact information is available
under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this
Privacy Policy.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information
you enter into our contact form.
Other data shall be recorded by our IT systems automatically or after you consent to its recording during
your website visit. This data comprises primarily technical information (e.g., web browser, operating system,
or time the site was accessed). This information is recorded automatically when you access this website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data
may be used to analyze your user patterns.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients, and purposes of your archived
personal data at any time without having to pay a fee for such disclosures. You also have the right to demand
that your data are rectified or eradicated. If you have consented to data processing, you have the option to
revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to
demand that the processing of your data be restricted under certain circumstances. Furthermore, you have
the right to log a complaint with the competent supervising agency.
Please do not hesitate to contact us at any time if you have questions about this or any other data protection
related issues.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be statistically analyzed when your visit this website.
Such analyses are performed primarily with what we refer to as analysis programs.
For detailed information about these analysis programs please consult our Data Protection Declaration
below.
We are hosting the content of our website at the following provider:
External Hosting
Our websites are hosted externally. The personal data that is collected on these websites
are stored on the hoster's servers. This may primarily involve IP addresses,
contact requests, meta and communication data, contract data, contact details, names, website accesses and other data
and other data generated via a website.
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing
potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient
provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
If a corresponding consent has been requested, the processing takes place exclusively on the basis of
on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent allows the storage of
of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the
within the meaning of the TDDDG. Consent can be revoked at any time.
Our hosters will only process your data to the extent that this is necessary to fulfill their
performance obligations and follow our instructions with regard to this data.
We use the following hoster for the vaude.com website:
Microsoft Ireland Operations Limited
Legal form: Private Company Limited by Shares
Registered in Ireland, No. 256796
Office:
70 Sir John Rogerson's Quay
Dublin 2
Ireland
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service.
concluded. This is a contract prescribed by data protection law, which
guarantees that it will only process the personal data of our website visitors in accordance with our
instructions and in compliance with the GDPR.
We use the following host for the websites outlet.vaude.com, academy.vaude.com, vaude-kinderhaus.de and freibad-obereisenbach.de:
WP Engine, Inc.
504 Lavaca Street, Suite 1000
Austin, TX 78701
USA
The personal data collected on these websites is stored on the servers of the hoster WP Engine in the EU.
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Privacy policy:
Further information on data protection at WP Engine can be found at https://wpengine.com/legal/privacy/.
Data protection
The operators of this website and its pages take the protection of your personal data very seriously. Hence,
we handle your personal data as confidential information and in compliance with the statutory data
protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises
data that can be used to personally identify you. This Data Protection Declaration explains which data we
collect as well as the purposes we use this data for. It also explains how, and for which purpose the
information is collected.
We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications)
may be prone to security gaps. It is not possible to completely protect data against third-party access.
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
VAUDE Sport GmbH & Co. KG
Vaude Straße 2
D-88069 Tettnang
Phone: +49-(0)-7542-5306-0
E-Mail: impressum@vaude.com
The controller is the natural person or legal entity that single-handedly or jointly with others makes
decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail
addresses, etc.).
Storage duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain
with us until the purpose for which it was collected no longer applies. If you assert a justified request for
deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally
permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the
latter case, the deletion will take place after these reasons cease to apply.
General information on the legal basis for the data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or
Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of
explicit consent to the transfer of personal data to third countries, the data processing is also based on Art.
49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end
device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TDDDG. The
consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the
implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.
Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art.
6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest
according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in
the following paragraphs of this privacy policy.
Designation of a data protection officer
We have appointed a data protection officer.
Ulrike Eben
VAUDE Sport GmbH & Co. KG
VAUDE-Straße 2
88069 Tettnang
Deutschland
Phone: +49-(0)-7542-5306-0
E-Mail: datenschutz@vaude.com
Information on data transfer to the USA and other non-EU countries
Among other things, we use tools of companies domiciled in the United States or other from a data
protection perspective non-secure non-EU countries. If these tools are active, your personal data may
potentially be transferred to these non-EU countries and may be processed there. We must point out that in
these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For
instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as
the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out
that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal
data for surveillance purposes. We have no control over these processing activities.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only subject to your express consent. You can also
revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness
of any data collection that occurred prior to your revocation.
Right to object to the collection of data in special cases; right to object to direct
advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE
THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON
GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED
ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS
BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE
WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO
PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA,
THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE
PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION
PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING,
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR
THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE
EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL
DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES
(OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory
agency, in particular in the member state where they usually maintain their domicile, place of work or at the
place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other
administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your
consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine
readable format. If you should demand the direct transfer of the data to another controller, this will be done
only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand
information about your archived personal data, their source and recipients as well as the purpose of the
processing of your data. You may also have a right to have your data rectified or eradicated. If you have
questions about this subject matter or any other questions about personal data, please do not hesitate to
contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is
concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in
the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need
some time to verify this claim. During the time that this investigation is ongoing, you have the right to
demand that we restrict the processing of your personal data. - If the processing of your personal data was/is conducted in an unlawful manner, you have the option to
demand the restriction of the processing of your data in lieu of demanding the eradication of this data. - If we do not need your personal data any longer and you need it to exercise, defend or claim legal
entitlements, you have the right to demand the restriction of the processing of your personal data instead
of its eradication. - If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be
weighed against each other. As long as it has not been determined whose interests prevail, you have the
right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving –
may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to
protect the rights of other natural persons or legal entities or for important public interest reasons cited by
the European Union or a member state of the EU.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or
inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption
program. You can recognize an encrypted connection by checking whether the address line of the browser
switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If you are under an obligation to share your payment information (e.g. account number if you give us the
authority to debit your bank account) with us after you have entered into a fee-based contract with us, this
information is required to process payments.
Payment transactions using common modes of paying (Visa/MasterCard, debit to your bank account) are
processed exclusively via encrypted SSL or TLS connections. You can recognize an encrypted connection by
checking whether the address line of the browser switches from “http://” to “https://” and also by the
appearance of the lock icon in the browser line.
If the communication with us is encrypted, third parties will not be able to read the payment information you
share with us.
Cookies
Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do
not cause any damage to your device. They are either stored temporarily for the duration of a session
(session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are
automatically deleted once you terminate your visit. Permanent cookies remain archived on your device
until you actively delete them, or they are automatically eradicated by your web browser.
In some cases, it is possible that third-party cookies are stored on your device once you enter our site (thirdparty
cookies). These cookies enable you or us to take advantage of certain services offered by the third
party (e.g., cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are technically essential since certain website functions
would not work in the absence of the cookies (e.g., the shopping cart function or the display of videos). The
purpose of other cookies may be the analysis of user patterns or the display of promotional messages.
Cookies, which are required for the performance of electronic communication transactions, or for the
provision of certain functions you want to use (e.g., for the shopping cart function) or those that are
necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable
insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis
is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the
technically error free and optimized provision of the operator’s services. If your consent to the storage of the
cookies and similar recognition technologies has been requested, processing occurs exclusively on the basis
of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.
You have the option to set up your browser in such a manner that you will be notified any time cookies are
placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of
cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies
when the browser closes. If cookies are deactivated, the functions of this website may be limited.
In the event that third-party cookies are used or if cookies are used for analytical purposes, we will
separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.
Consent with Usercentrics
This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain
cookies on your device or for the use of specific technologies, and to document the former in a data
protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7,
80331 München, Germany, website:
https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).
Whenever you visit our website, the following personal data will be transferred to Usercentrics:
Your declaration(s) of consent or your revocation of your declaration(s) of consent
Your IP address
Information about your browser
Information about your device
The date and time you visited our website
Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of
consent or any revocations of the former. The data that are recorded in this manner shall be stored until you
ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer
exists. This shall be without prejudice to any mandatory legal retention periods.
Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use
of specific technologies is Art. 6(1)(c) GDPR.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the GDPR.
We have integrated elements of the social network Facebook on this website. The provider of this service is
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement
the collected data will be transferred to the USA and other third-party countries too.
An overview of the Facebook social media elements is available under the following link:
https://developers.facebook.com/docs/plugins/
If the social media element has been activated, a direct connection between your device and the Facebook
server will be established. As a result, Facebook will receive information confirming your visit to this website
with your IP address. If you click on the Facebook Like button while you are logged into your Facebook
account, you can link content of this website to your Facebook profile. Consequently, Facebook will be able
to allocate your visit to this website to your user account. We have to emphasize that we as the provider of
the website do not receive any information on the content of the transferred data and its use by Facebook.
For more information, please consult the Data Privacy Policy of Facebook at:
https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6 Sect. 1 lit. a GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may be
revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our
legitimate interest in making our information as comprehensively visible as possible on social media.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to
Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited
exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that
takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us
jointly have been set out in a joint processing agreement. The wording of the agreement can be found under:
https://www.facebook.com/legal/controller_addendum According to this agreement, we are responsible for
providing the privacy information when using the Facebook tool and for the privacy-secure implementation
of the tool on our website. Facebook is responsible for the data security of Facebook products. You can
assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with
Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381 und
https://www.facebook.com/policy.php
We have integrated functions of the public media platform Instagram into this website. These functions are
being offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland.
If the social media element has been activated, a direct connection between your device and Instagram’s
server will be established. As a result, Instagram will receive information on your visit to this website.
If you are logged into your Instagram account, you may click the Instagram button to link contents from this
website to your Instagram profile. This enables Instagram to allocate your visit to this website to your user
account. We have to point out that we as the provider of the website and its pages do not have any
knowledge of the content of the data transferred and its use by Instagram.
If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6(1)(a) GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may be revoked at
any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate
interest in making our information as comprehensively visible as possible on social media.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to
Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint
responsibility is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram.
The processing by Facebook or Instagram that takes place after the onward transfer is not part of the joint
responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The
wording of the agreement can be found under:
https://www.facebook.com/legal/controller_addendum According to this agreement, we are responsible for
providing the privacy information when using the Facebook or Instagram tool and for the privacy-secure
implementation of the tool on our website. Facebook is responsible for the data security of Facebook or
Instagram products. You can assert data subject rights (e.g., requests for information) regarding data
processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we
are obliged to forward them to Facebook.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875 and
https://de-de.facebook.com/help/566994660333381
For more information on this subject, please consult Instagram’s Data Privacy Declaration at:
https://instagram.com/about/legal/privacy/
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Any time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn’s
servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click
on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in
a position to allocate your visit to this website to your user account. We have to point out that we as the
provider of the websites do not have any knowledge of the content of the transferred data and its use by
LinkedIn.
If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6 (1)(a) GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may be revoked at
any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate
interest in making our information as comprehensively visible as possible on social media.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-derschweiz?
lang=de
For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at:
https://www.linkedin.com/legal/privacy-policy
TikTok
We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Data transfer to non-secure third countries is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.tiktok.com/legal/page/eea/privacy-policy/en
On this website, we use elements of the Pinterest social network, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you access a page that contains such an element, your browser establishes a direct connection to the Pinterest servers. This social media element transmits protocol data to the Pinterest server in the USA. This protocol data may include your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of your browser, the date and time of your request, how you use Pinterest and cookies.
This service is used on the basis of your consent in accordance with Art. 6 (1) a GDPR and Section 25 (1) TDDDG. This consent can be withdrawn at any time.
Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights and options for protecting your privacy, can be found in Pinterest's data protection information: .
Insofar as personal data is collected on our website using the tools described here and forwarded to Pinterest, we and Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Pinterest. Pinterest's processing after the data has been forwarded is not part of the joint responsibility. The obligations incumbent on us have been set out in a joint processing agreement. You can find the wording of the agreement at: Pinterest Business. According to this agreement, we are responsible for providing data protection information when using the Pinterest tool and for implementing the tool on our website in a manner that is secure under data protection law. Pinterest is responsible for the data security of the Pinterest products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Pinterest directly with Pinterest. If you assert the rights of data subjects with us, we are obliged to forward them to Pinterest.
Pinterest tag
We have integrated Pinterest Tag on this website. The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Pinterest Tag is used to record certain actions that you perform on our website. The data can then be used to display interest-based advertising on our website or on another page of the Pinterest Tag advertising network.
For this purpose, the Pinterest tag collects, among other things, a tag ID, your location and the referrer URL. Furthermore, action-specific data such as order value, order quantity, order number, category of purchased items and video views can be collected.
Pinterest tag uses technologies that enable cross-site recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting).
Insofar as consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. Insofar as no consent has been obtained, this service is used on the basis of Art. 6 Para. 1 lit. f GDPR; the website operator has a legitimate interest in marketing measures that are as effective as possible.
Pinterest is a global company, so data may also be transferred to the United States. According to Pinterest, this data transfer is based on the standard contractual clauses of the EU Commission. Details can be found here: Privacy Policy | Pinterest Policy .
Further information about Pinterest tags can be found here : https://help.pinterest.com/de/business/article/track-conversions-with-pinterest-tag.
Joint responsibility
We have concluded a joint responsibility agreement for the use of the above-mentioned service. The wording of the agreement can be found at Pinterest Business.
Matomo
This website uses the open-source web analysis service Matomo.
Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This
enables us to find out, for instance, when which page views occurred and from which region they came. In
addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can
measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in
the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate
consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §
25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s
end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any
time.
IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that
it is no longer clearly assignable to you.
Cookie-free analysis
We have configured Matomo so that Matomo does not store any cookies in your browser.
Hosting
We host Matomo in the Matomo Cloud.
WP Statistics
This website uses the WP Statistics analysis tool to evaluate visitor accesses statistically. The provider is
Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).
WP Statistics can be used to analyze the use of our website. In doing so, WP Statistics records, among other
things, log files (IP address, referrer, browser used, origin of the user, search engine used) and actions that
the website visitors have taken on the site (e.g. clicks and views).
The data collected with WP Statistics is stored exclusively on our own server.
The use of this analysis tool is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymized
analysis of user behavior in order to optimize both our websites and our advertising. If appropriate consent
has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1)
TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end
device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any
time.
IP anonymization
We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly
assigned to you.
Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland
Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user
enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based
on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the
website operator, we can analyze these data quantitatively, for instance by analyzing which search terms
resulted in the display of our ads and how many ads led to respective clicks.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TDDDG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://policies.google.com/privacy/frameworks and
https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads Remarketing
This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who interact with our online offering to specific target
groups in order to subsequently display interest-based advertising to them in the Google advertising
network (remarketing or retargeting).
Moreover, it is possible to link the advertising target groups generated with Google Ads Remarketing to
device encompassing functions of Google. This makes it possible to display interest-based customized
advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a
manner tailored to you as well as on any of your devices (e.g., tablet or PC).
If you have a Google account, you have the option to object to personalized advertising under the following
link:
https://www.google.com/settings/ads/onweb/.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TDDDG. You may revoke your consent at any time.
For further information and the pertinent data protection regulations, please consult the Data Privacy
Policies of Google at:
https://policies.google.com/technologies/ads?hl=de.
Formation of Target Groups with Customer Reconciliation
For the formation of target groups, we use, among other things, the Google Ads Remarketing customer
reconciliation feature. To achieve this, we transfer certain customer data (e.g., email addresses) from our
customer lists to Google. If the respective customers are Google users and are logged into their Google
accounts, matching advertising messages within the Google network (e.g., YouTube, Gmail or in a search
engine) are displayed for them to view.
Google Conversion-Tracking
This website uses Google AdWords Conversion Tracking. The provider of this service is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has
completed certain actions. For instance, we can analyze the how frequently which buttons on our website
have been clicked and which products are reviewed or purchased with particular frequency. The purpose of
this information is to compile conversion statistics. We learn how many users have clicked on our ads and
which actions they have completed. We do not receive any information that would allow us to personally
identify the users. Google as such uses cookies or comparable recognition technologies for identification
purposes.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TDDDG. You may revoke your consent at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at:
https://policies.google.com/privacy?hl=de.
Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be
tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search
results or in banners associated with DoubleClick.
To be able to display interest adequate promotional content to users, DoubleClick must recognize the
respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to
the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g., device
fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the
respective user can be shown interest adequate advertising.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TDDDG. You may revoke your consent at any time.
For further information on how to object to the advertisements displayed by Google, please see the
following links:
https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.
Use of Criteo Retargeting
We use services provided by Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”) on our website to display advertising tailored to your interests.
Criteo uses cookies and similar technologies to collect information about your surfing behavior. This enables us to display personalized advertisements to you on partner websites (so-called “retargeting”).
The data processing is carried out on the basis of your consent in accordance with Article 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by adjusting your cookie settings.
Information is collected about your activities on our website, such as pages visited, products viewed and click behavior.
The data collected may be shared by Criteo with partner companies in order to show you relevant advertising.
You can object to data processing by Criteo at any time. To do so, use the opt-out option at the following link: https://www.criteo.com/privacy/.
For more information about Criteo's privacy practices, please see Criteo's privacy policy: https://www.criteo.com/privacy/ .
Adtraction
Our web shop uses the affiliate network Adtraction from Adtraction Marketing AB, Regeringsgatan 29, 111 53 Stockholm, Sweden. The integration of Adtraction allows us to carry out advertising measures and to track which partners refer to our offers.
When you visit our website, a cookie from Adtraction is stored on your device. This cookie makes it possible to track your activities on our website anonymously in order to enable the allocation of affiliate commissions. No personal data such as name, address or email address is collected.
The processing is used to correctly assign sales and leads that were generated via affiliate links. This enables us to fairly remunerate our advertising partners and optimize our marketing measures.
Data processing is carried out on the basis of Art. 6 Sect. 1 lit. a GDPR (consent).
You can prevent the storage of cookies by selecting the appropriate settings on your browser. Please note that if you do this, you may not be able to use all the features of our website to the fullest extent possible.
Further information on data protection at Adtraction can be found in Adtraction's privacy policy: https://adtraction.com/privacy-policy/
Use of the Amazon DSP pixel
On our website, we use the Amazon Demand Side Platform (DSP) pixel, a web analysis service provided by Amazon Advertising LLC, 410 Terry Ave North, Seattle, WA 98109, USA. The Amazon DSP pixel enables us to measure the effectiveness of our advertising and to display personalized advertising on Amazon websites and in the Amazon advertising network.
In doing so, information about your use of our website – e.g. products viewed or purchases made – is transmitted to Amazon in pseudonymized form. Amazon may combine this information with other data to display interest-based advertising based on your user behavior. Cookies and similar technologies may be used for this purpose. However, the data collected does not contain any information that could be used to personally identify you, such as your name or email address.
The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR, which you can give via our consent banner. You can revoke your consent at any time with effect for the future by adjusting the corresponding cookie settings [link here].
Further information on Amazon's use of data and your opt-out options can be found at:
https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010
Emarsys
We use the marketing automation system "Emarsys" from Emarsys eMarketing Systems AG Märzstrasse 1, A-1150 Vienna, to carry out marketing campaigns, for analysis purposes and to address existing and potential new customers in a target group-specific manner. We use the system in particular for sending e-mail communication (e.g. in connection with the sending of newsletters) and pass on the data you provided when registering for the newsletter to Emarsys. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) will be stored on Emarsys servers within the European Union.
We have concluded an order processing contract with Emarsys, in which we oblige Emarsys to protect our customers' data and not to pass it on to third parties.
E-mail tracking: The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. Although this information can technically be assigned to individual newsletter recipients, it is not intended to analyze personal data.
Personalization: So that we can inform you with our newsletter individually and about the most suitable product offers, the data you provide when registering for the newsletter (usually e-mail address), the data of your interaction with our website (e.g. products viewed) and the data from your order history (usually order date, products ordered) are merged into a user profile. Individual product recommendations are generated on this basis and we have the option of sending you personalized content.
The analysis is carried out with the help of cookies and tracking pixels that are stored on our website. This allows us to determine, for example, whether certain newsletter messages have been opened and which links have been clicked on. Conversion tracking can also be used to determine whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.
The aforementioned data is only collected in pseudonymized form and is not linked to any other personal data. The data will only be stored for as long as is necessary for the processing purpose or until you withdraw your consent. You can object to this profile enhancement by sending us a short message to datenschutz@vaude.com.
Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, the user receives an email asking them to confirm their registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Registration for the newsletter is logged in order to be able to prove the registration process in accordance with legal requirements. This includes saving the time of registration and confirmation. The changes to the user data stored by the mailing service provider are also logged.
Cancellation/revocation: The user can cancel the receipt of our newsletter at any time, i.e. revoke their consent. The user will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have unsubscribed from the newsletter, the personal data processed for sending the newsletter will be removed from the newsletter distribution list. After unsubscribing from the newsletter distribution list, the data will continue to be stored in order to prevent future mailings. The data will only be used for this purpose and will not be merged with other data. This serves both the interests of the user and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR).
The storage is not limited in time. The user can object to the storage if their interests outweigh our legitimate interest.
Users can find further information on data protection in the Emarsys privacy policy at https://emarsys.com/de/datenschutzrichtlinie/
YouTube with advanced data protection
This website integrates videos from the website YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of these websites that has YouTube embedded in it, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in advanced data protection mode. According to YouTube, videos played in advanced data protection mode are not used to personalize your surfing on YouTube. Ads displayed in advanced data protection mode are also not personalized. No cookies are set in enhanced data protection mode. Instead, however, so-called local storage elements are stored in the user's browser, which, like cookies, contain personal data and can be used for recognition. Details on the enhanced data protection mode can be found here: https://support.google.com/youtube/answer/171780.
It is possible that further data processing operations may be triggered after a YouTube video has been activated, over which we have no influence.
YouTube is used in the interest of presenting our online offers in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6 (1) point f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) point a GDPR and Art. 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
Further information about data protection at YouTube can be found in the company's data privacy policy at: https://policies.google.com/privacy?hl=de.
The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Every DPF-certified company is obliged to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered
into a contact form) is being provided by a human user or by an automated program. To determine this,
reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is
triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA
evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements
initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is
underway.
Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate
interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If
appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a)
GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in
the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be
revoked at any time.
For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and
Terms Of Use under the following links:
https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de.
Zendesk
We deploy the CRM system Zendesk to process user inquiries. The provider is Zendesk, Inc., 1019 Market
Street in San Francisco, CA 94103 USA.
We use Zendesk to be able to respond to your inquiries promptly and efficiently. This constitutes a
legitimate interest as defined in Art. 6(1)(f) GDPR.
Storage and processing of data:
Zendesk stores the data on servers in Frankfurt, Germany.
In order to be able to submit inquiries, you must provide your e-mail address and name.
The messages addressed to us remain with us until you request deletion, or the data storage purpose no
longer applies (e.g. after completed processing of your request). Mandatory statutory provisions, in
particular retention periods, remain unaffected.
Zendesk has Binding Corporate Rules (BCR) which have been approved by the Irish Data Protection
Authority. These are binding corporate rules that legitimize the transfer of data within the company to third
countries outside the EU and EEA. Details can be found here:
https://www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/.
If you should not want to agree to the processing of your inquiries by us via Zendesk, you have the
alternative option to communicate with us via e-mail, telephone, or fax.
For more information, please consult Zendesk’s Data Privacy Declaration at:
https://www.zendesk.de/company/customers-partners/privacy-policy/.
Zendesk Chat Functions
Our website offers you the opportunity to send us messages via a chat window. The chat functions are
provided by Zendesk. Whenever you use this chat window, we do not only store your chat messages, but also
your IP address. You do not have to provide your name to engage in chats.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the GDPR.
Integration of services and content from OUTTRA
a) Display product availability
In order to check the local product availability, we use OUTTRA components from 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart.
The components use the IP-Address of the user only for the purposes of sending him/her this information. The IP-Address is
therefore essential in order to inform about the product availability close to the user.
Upon choosing “buy local” the IP-Address of the user at the servers of OUTTRA is anonymized. With the anonymized IP-Address
a consultation with a data bank takes place, which allows for a gross localization of the user on the basis of the
not-anonymized part of the IP-Address. Subsequently, the user will see the local stores, where the products are available.
The legal basis for processing personal data is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in advertising and
sales of our products, as well as in a functionality of our website.
Should checking the product availability be connected with entering a sales agreement, the legal basis for processing
personal data is Art. 6 (1) lit. b) GDPR.
According to Art. 21 (1) GDPR you have a right to object for the future, at any time, the processing of personal data
based on Article 6(1) lit. f) GDPR. The objection can be made in particular against processing for direct marketing purposes.
After ending your browser session, no personal data from the components will be processed by 81 MEDIA GmbH or by
VAUDE Sport GmbH & Co. KG.
b) Google Maps
The "Google Maps" component of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is used to display the location of the stationary retailers that have the product you are looking for.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in optimizing the functionality of the website.
Through the connection, Google can recognize from which website a request is sent and to which IP address the display of the directions is transmitted.
If you do not agree to this processing, you have the option of preventing or restricting the installation of cookies
or restrict the installation of cookies by adjusting your browser settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies
processing cannot be prevented via the browser settings, but by the corresponding setting of the Flash player.
of the Flash player. If you prevent the installation of cookies or restrict their processing, this may result in the
result in the display of the dealer locations not being fully usable.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
c) Booking an appointment
We use the OUTTRA component from 81MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart for the appointment booking process.
To perform this function, OUTTRA stores the first name, last name, e-mail and telephone number in encrypted form in the
database and sends this data to the dealer at which the appointment booking was requested.
The legal basis for processing personal data as outlined above is Art. 6 (1) lit f) GDPR. Our legitimate interest lies in
advertising and sales of products and services, as well as in the functionality of the website required for this.
According to Art. 21 GDPR you have a right to object at any time to the future processing of your personal data based on
Article 6 (1) lit. f) GDPR. The objection can be made in particular against processing for direct marketing purposes.
Product advice with Neo Commerce
1.1 We have integrated the Neocom Guided Selling service from Neo Commerce GmbH (hereafter “Neocom”), Max-Bill-Str. 8, 80807 Munich, on our website to provide you with a digital interactive product advisory service. When you start this product advisory service, you can find the product you want in a quiz-like, guided process and receive a product recommendation at the end.
1.2 In the course of the consultation, Neocom collects the following browser http information: browser type and version, IP address, language of the browser software. In addition, a session ID is generated and temporarily stored on your device during the browser session in order to be able to offer the consultation. The purpose of this is to enable the correct and complete display and execution of the digital product consultation, similar to a shopping cart function. The legal basis is our legitimate interest in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO (browser query) and Art. 6 Para. 1 S. 1 lt. a DSGVO (consent regarding session ID).
1.3 Neocom uses further services for product advice. Details can be found here.
Use of AB Tasty
To continuously optimize our online offering, we use the AB Tasty service, offered by AB Tasty SAS, 17-19 rue Michel Le Comte, 75003 Paris, France (“AB Tasty”). You can find AB Tasty's privacy policy at https://www.abtasty.com/de/datenschutzerklaerung/.
We use AB Tasty to conduct A/B and multivariate tests on our website. To do this, AB Tasty uses cookies and similar technologies to identify your browser and analyze your use of our website. In doing so, information such as anonymized IP addresses, time of visit, device and browser information, and usage data from our website are collected and stored. AB Tasty uses this data to create pseudonymized user profiles.
The data collected includes, in particular, the number of pages viewed, the number of visits, the order of pages visited, the duration of the visit and the addition or removal of products in the shopping cart.
Legal basis
This service is used on the basis of your consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time by accessing the data protection settings and making the appropriate changes. This does not affect our legitimate interest in optimizing our online services in accordance with Article 6(1)(f) GDPR.
Orders in the VAUDE Online Shop
Processing of customer and contract data
We collect, process and use personal customer and contract data for the establishment, content design and modification of our contractual relationships.
The legal basis for this is Art. 6 para. 1 lit. b GDPR.
The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods.
Statutory retention periods remain unaffected.
In order to offer you maximum convenience, we provide you with the option of permanently storing your personal data in a password-protected customer account.
The creation of a customer account is always voluntary. When you create a customer account, we process the data you provide for the management of the customer account in accordance with Article 6, paragraph 1, letter b) of the GDPR. Once created, you do not have to enter your data again. You also have the option of viewing and changing the data stored in your customer account at any time.
You can have your customer account deleted at any time. Please note, however, that not all data that can be viewed in your customer account can be deleted, especially if you have previously placed orders. For example, we are legally obliged to continue to store data relating to orders placed as long as guarantees for the goods purchased are still valid and the retention periods under commercial and tax law have not yet expired. Your data is automatically deleted in accordance with the applicable retention periods under commercial and tax law. The legal basis for this further data processing is Article 6, paragraph 1, letter c) and Article 6, paragraph 1, letter f) of the GDPR.
Processor
We would like to point out that we use Adobe Commerce as a processor for the processing of our online orders. Adobe Commerce is an e-commerce platform that supports us in collecting, processing and handling your orders. In this context, personal data is processed in accordance with the applicable data protection laws and this privacy policy.
Adobe Commerce acts exclusively in accordance with our instructions and has access to personal data only to the extent necessary to provide its services to us. Adobe Commerce has taken appropriate technical and organizational measures to ensure the security of your data.
Data transmission when concluding contracts for online stores, retailers and shipping goods
When you order goods from us, we pass on your personal data to the transport company responsible for delivery and to the payment service provider responsible for processing payments. Only the data required by the respective service provider to fulfill its task will be disclosed. The legal basis for this is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Notification of availability
Purpose of data processing:
The personal data you provide (e.g. name and email address) will only be used to notify you when the product or goods you have requested are available again. We only store and process your data for this purpose.
Consent:
We will only process your data if you have expressly given us your consent to inform you about the availability of a product. Your consent is voluntary and you have the right to withdraw this consent at any time. Withdrawal will result in us deleting your data and no further notifications will be sent.
Data security:
We take appropriate measures to protect your personal data and prevent unauthorized access, misuse or loss.
Payment services
We integrate third-party payment services on our website. When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR.
We use the following payment services/providers at vaude.com:
Mollie
Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, the Netherlands, is the provider of this payment service (hereinafter referred to as “Mollie”). With the help of Mollie, we can integrate various payment methods on our website. For details, please refer to Mollie's privacy policy: https://www.mollie.com/de/privacy
PayPal
This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission.
For details, see PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna offers various payment options (e.g. installment purchase). If you decide to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. For details on the use of Klarna cookies, please refer to the following link:
https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
You can find details on this in Klarna's privacy policy at the following link:
https://www.klarna.com/de/datenschutz/.
Mastercard
provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter “Mastercard”). Mastercard may transfer data to its parent company in the USA. Data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here:
https://www.mastercard.de/de-de/datenschutz.html and
https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.
VISA
The provider of this payment service is Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter “VISA”).
The United Kingdom is considered a safe third country in terms of data protection. This means that the United Kingdom has a level of data protection that corresponds to the level of data protection in the European Union.
VISA may transfer data to its parent company in the United States. Data transfer to the United States is based on the standard contractual clauses of the EU Commission. Details can be found here:
Further information can be found in the VISA data protection declaration:
https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.
Twint
The payment service provider is TWINT AG, Stauffacherstrasse 41, CH-8004 Zurich. This data is processed in accordance with Twint's data protection policy, which you can view here: https://www.twint.ch/datenschutz/
Apple Pay
The payment service provider is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple's privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/
EPS
The payment service provider is PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna. The privacy policy can be found at: https://eps-ueberweisung.at/de/datenschutzhinweis
Google Pay
is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you pay with Google Pay in our online store, Google processes various personal data. We do not receive complete payment information.
Details on data processing by Google can be found in Google's privacy policy:
https://policies.google.com/privacy.
Payment via iDEAL
With the online transfer service iDEAL, you can make secure, reliable and easy online payments. iDEAL is a service that allows you to make instant transfers. Payments are made via the mobile banking app or in the online banking environment of your bank.
If you choose iDEAL as your payment method, you will be directed to your bank's homepage. You then log in with your bank credentials and confirm the transaction with a TAN code.
To use iDEAL, you must have an online banking account with one of the following banks: ABN AMRO, ASN Bank, bunq, Friesland Bank, ING, Knab, Rabobank, RegioBank, SNS Bank, Triodos Bank or Van Lanschot Bankiers.
Payments via iDEAL are only possible for customers in the Netherlands.
More information about data protection at iDEAL can be found here: iDEAL Privacy & Cookie Statement
Payment via Bancontact
Bancontact is a secure online service for real-time transfers that works by entering your Bancontact card number in combination with additional verification (for example, by entering a one-time password).
To use Bancontact, you must have a Bancontact payment card. These cards are issued by leading Belgian banks, often together with Maestro.
When you pay with Bancontact, you will be directed to an external page where you will be asked to enter your Bancontact card number and the card's validity. You will then be directed to your bank's website to confirm the transaction (for example, by scanning a QR code or entering a TAN code that you receive via text message).
You can use Bancontact for your payments if you live in Belgium. More information about data protection at Bancontact can be found here: https://www.bancontact.com/files/privacy.pdf.
Data processing
We use online conference tools, among other things, for communication with our customers. The tools we
use are listed in detail below. If you communicate with us by video or audio conference using the Internet,
your personal data will be collected and processed by the provider of the respective conference tool and by
us. The conferencing tools collect all information that you provide/access to use the tools (email address
and/or your phone number). Furthermore, the conference tools process the duration of the conference, start
and end (time) of participation in the conference, number of participants and other “context information”
related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data required for the processing of the
online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type,
operating system type and version, client version, camera type, microphone or loudspeaker and the type of
connection.
Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the
servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant
messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while
using the service.
Please note that we do not have complete influence on the data processing procedures of the tools used. Our
possibilities are largely determined by the corporate policy of the respective provider. Further information
on data processing by the conference tools can be found in the data protection declarations of the tools
used, and which we have listed below this text.
Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer
certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally
simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art.
6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this
consent; the consent may be revoked at any time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems
immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the
data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal
retention periods remain unaffected.
We have no influence on the duration of storage of your data that is stored by the operators of the
conference tools for their own purposes. For details, please directly contact the operators of the conference
tools.
Conference tools used
We employ the following conference tools:
Microsoft Teams
We use Microsoft Teams. The provider is the Microsoft Ireland Operations Limited, One Microsoft Place,
South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer
to the Microsoft Teams privacy policy:
https://privacy.microsoft.com/de-de/privacystatement.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the GDPR.
Best partner programm
In the Best Partner program, VAUDE Sport GmbH & Co.KG, VAUDE Franchise GmbH and the VAUDE franchisees jointly process the data provided.
Purpose of processing:
• Exchange and complaint without receipt
• Take goods to choose from
• Enable individual orders and delivery of the goods
• Information about news and campaigns by email and/or by post
• 10% birthday discount on a purchase
• More discount campaigns
The legal basis for processing is GDPR Art. 6 Para. 1 lit a). Consent can be easily revoked at any time by unsubscribing
via the button in an email sent by us or by sending an email to datenschutz@vaude.com.
The following data is processed:
Name, postal address, email address, birthday, purchase history
There is no obligation to join the Best Partner program to purchase our products. However, the advantages specified
above can only be used as long as participation in the Best Partner Program exists.
Forwarding of data for repair purposes
For the purpose of carrying out repairs, it may be necessary for us to pass on your personal data to authorized dealers or workshops. This forwarding takes place exclusively to ensure efficient and qualified processing of your repair requests. The data transmitted usually includes information such as your name, your contact details and specific details about the repair. In addition, it may be necessary for warranty and guarantee claims to be checked and processed as part of the repair. Our partners are contractually obliged to use the data only within the scope of the agreed services and to take appropriate measures to protect your data.
Processing of personal data in the context of competitions
In the context of competitions, we process personal data exclusively for the purpose of running the competition. This generally includes details such as name, e-mail address or postal address, which are required to contact the winners and to deliver the prizes.
The data provided will be treated confidentially and will not be passed on to third parties unless this is necessary to run the competition (e.g. shipping service providers).
After completion of the competition and delivery of the prizes, the personal data will be deleted, provided that there are no statutory retention obligations.
Further information on the processing of your data and your rights can be found in our general privacy policy.