Privacy Policy

PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all information that can be used to identify you personally.

1.2

The data controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is Jacob & Rose, accessible at jacobandrose.com.

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries submitted to the data controller, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (so-called server log files).

When you access our website, we collect the following data, which is technically necessary to display the website to you:

  • The website visited

  • The date and time of access

  • The amount of data transmitted in bytes

  • The source or referral from which you accessed the page

  • The browser used

  • The operating system used

  • The IP address used, where applicable in anonymised form

The processing is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.

The data is not disclosed to third parties or used for other purposes. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

3) COOKIES

To make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device.

Some cookies we use are deleted at the end of your browser session, meaning when you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies).

When cookies are set, they collect and process certain user information, such as browser and location data and IP address values, to varying degrees. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies help simplify the ordering process by saving settings, such as remembering the contents of a virtual shopping cart for a later visit to the website.

Where individual cookies implemented by us process personal data, processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, or Article 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible functionality of the website and providing a customer-friendly and effective browsing experience.

We may work with advertising partners who help make our online offering more interesting to you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies).

If we cooperate with the aforementioned advertising partners, you will be informed separately in the relevant sections below about the use of such cookies and the scope of the information collected.

Please note that you can configure your browser to notify you when cookies are set and allow you to decide individually whether to accept them, or to reject cookies in certain cases or altogether.

Each browser manages cookie settings differently. Instructions on how to change your cookie settings can be found in the help menu of your browser. You can also consult the following links:

Please note that rejecting cookies may limit the functionality of our website.

4) CONTACTING US

When you contact us, for example through a contact form or by email, personal data is collected.

The information collected through a contact form can be identified from the relevant form. This data is stored and used exclusively to respond to your enquiry, contact you and carry out the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR.

If your contact is intended to enter into a contract, Article 6(1)(b) GDPR also serves as the legal basis for processing.

Your data will be deleted once your enquiry has been fully resolved, provided that the circumstances indicate that the matter has been conclusively settled and no statutory retention obligations apply.

You can contact us at:

Website: https://jacobandrose.com
Email: info@jacobandrose.com

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PERFORMANCE

In accordance with Article 6(1)(b) GDPR, personal data is also collected and processed when you provide it to us for the performance of a contract or when opening a customer account.

The data collected can be identified from the relevant input forms. You can request the deletion of your customer account at any time by sending a message to the contact address listed above.

We store and use the information you provide to fulfil the contract.

After the contract has been fully completed or your customer account has been deleted, your data will be restricted from further processing, taking into account statutory commercial and tax retention periods, and will be deleted once those periods have expired, unless you have expressly consented to further use of your data or we are legally permitted to continue using it, as explained in this policy.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Signing up for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers.

The only mandatory information required to send the newsletter is your email address. Providing any additional information is voluntary and allows us to address you personally.

We use the double opt-in procedure to send our newsletter. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receiving it.

We will send you a confirmation email asking you to confirm your subscription by clicking on the relevant link.

By activating the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) GDPR.

When you subscribe to our newsletter, we store the IP address registered by your Internet Service Provider (ISP), along with the date and time of registration, to help investigate any potential misuse of your email address at a later date.

The data collected during newsletter registration is used exclusively for sending promotional communications through our newsletter.

You can unsubscribe at any time by using the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller listed above.

After you unsubscribe, your email address will be promptly removed from our newsletter mailing list, unless you have expressly consented to further use of your data or we are legally permitted to retain and use it for another purpose described in this policy.

6.2 Sending email newsletters to existing customers

If you provide us with your email address when purchasing goods or services, we reserve the right to send you regular email offers for similar goods or services from our range.

A separate consent is not required for this purpose under the conditions applicable to existing customers.

The processing is based on our legitimate interest in personalised direct marketing in accordance with Article 6(1)(f) GDPR.

If you initially object to the use of your email address for this purpose, we will not send you such emails.

You may object to the use of your email address for the above advertising purpose at any time, with effect for the future, by contacting the data controller listed above.

Only standard transmission charges may apply when sending your objection.

Once we receive your objection, we will promptly stop using your email address for advertising purposes.

7) DATA PROCESSING FOR ORDER FULFILMENT

7.1

The personal data we collect is shared with the transport company responsible for delivery, to the extent necessary to deliver the goods.

Your payment data is shared with the commissioned financial institution as part of payment processing, where necessary to complete the payment.

If payment service providers are used, we will explicitly inform you below.

The legal basis for sharing this data is Article 6(1)(b) GDPR.

7.2 Use of payment service providers

PayPal

When paying via PayPal, by credit card through PayPal, by direct debit through PayPal or, where offered, by invoice or instalments through PayPal, we transfer your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

The transfer takes place in accordance with Article 6(1)(b) GDPR and only to the extent necessary to process the payment.

For payments by credit card through PayPal, direct debit through PayPal or, where offered, invoice or instalment payments through PayPal, PayPal reserves the right to carry out a credit check.

For this purpose, your payment data may be transferred to credit reference agencies in accordance with Article 6(1)(f) GDPR, based on PayPal's legitimate interest in assessing your ability to pay.

PayPal uses the results of the credit check, including statistical probability values (so-called score values), to decide whether to make the relevant payment method available.

Where score values are used, they are based on scientifically recognised mathematical and statistical procedures. Address data may be among the factors considered.

Further information about data protection, including the credit reference agencies used, can be found in PayPal's privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this processing by contacting PayPal. However, PayPal may still be entitled to process your personal data where necessary to process payments in accordance with the contract.

SOFORT

If you select “SOFORT” as your payment method, payment processing is handled by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”).

SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).

We transfer the information you provide during checkout, together with information about your order, to SOFORT in accordance with Article 6(1)(b) GDPR.

Your data is transferred exclusively for payment processing and only to the extent necessary for this purpose.

Further information about SOFORT's data protection practices can be found at:

https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REMINDERS

Our own review reminder system (not sent through a customer review platform)

We use your email address to send a one-time reminder asking you to review your order through our review system, provided that you have expressly consented to this during or after placing your order, in accordance with Article 6(1)(a) GDPR.

You may withdraw your consent at any time by contacting the data controller responsible for processing your personal data.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook plugins using the Shariff solution

Our website uses so-called social plugins (“plugins”) for the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To improve the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins. Instead, they are embedded using HTML links.

This method ensures that no connection to Facebook's servers is established simply by loading a page on our website containing these buttons.

When you click a button, a new browser window opens and takes you to Facebook's website, where you can interact with its plugins, potentially after entering your login details.

Facebook Inc., based in the USA, was previously certified under the EU-US Privacy Shield framework, which was intended to ensure compliance with the level of data protection applicable in the EU.

For information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and privacy settings, please consult Facebook's privacy policy:

https://www.facebook.com/policy.php

9.2 Google+ plugins using the Shariff solution

Our website uses so-called social plugins (“plugins”) for the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To improve the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins. Instead, they are embedded using HTML links.

This ensures that no connection to Google+'s servers is established simply by loading a page containing these buttons.

When you click a button, a new browser window opens and takes you to Google+'s website, where you can interact with its plugins, potentially after entering your login details.

Google LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

For information about the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and privacy settings, please consult Google's privacy policy:

https://www.google.com/intl/de/policies/privacy/

9.3 Instagram plugins using the Shariff solution

Our website uses social plugins (“plugins”) for the online service Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

To improve the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins. Instead, they are embedded using HTML links.

This ensures that no connection to Instagram's servers is established simply by loading a page containing these buttons.

When you click a button, a new browser window opens and takes you to Instagram's website, where you can interact with its plugins, potentially after entering your login details.

Instagram LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

For information about the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and privacy settings, please consult Instagram's privacy policy:

https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to display relevant advertisements to users, improve campaign performance reports and prevent users from seeing the same advertisements repeatedly.

Using a cookie ID, Google records which advertisements are displayed in which browser and can therefore prevent the same advertisement from being shown multiple times.

The processing is based on our legitimate interest in optimally marketing our website in accordance with Article 6(1)(f) GDPR.

DoubleClick may also use cookie IDs to record conversions associated with advertising requests. This can occur, for example, when a user sees a DoubleClick advertisement and later visits the advertiser's website using the same browser and makes a purchase.

According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's servers.

We have no influence over the scope or further use of the data collected by Google through this tool. We therefore inform you to the best of our knowledge.

By integrating DoubleClick, Google receives information that you have visited the relevant part of our website or clicked on one of our advertisements.

If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or are not logged in, Google may be able to obtain and store your IP address.

If you wish to object to this tracking procedure, you can disable conversion-tracking cookies by configuring your browser to block cookies from the domain www.googleadservices.com.

You can also visit:

https://www.google.de/settings/ads

Please note that this setting may be deleted when you clear your cookies.

Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn more about advertising cookies and manage your preferences.

You can also configure your browser to notify you when cookies are set and allow you to accept or reject them individually or altogether.

Rejecting cookies may limit the functionality of our website.

Google LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

Further information about DoubleClick and Google's privacy practices can be found at:

https://www.google.de/policies/privacy/

10.2 Use of Google Ads conversion tracking

This website uses the online advertising programme Google Ads and its conversion-tracking feature, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

We use Google Ads to promote our offers on external websites through advertisements. We can evaluate the success of individual advertising campaigns by comparing the relevant campaign data.

Our aim is to display advertising that is relevant to you, make our website more attractive and ensure fair calculation of advertising costs.

A conversion-tracking cookie is set when a user clicks on a Google advertisement.

Cookies are small text files stored on your computer. These cookies generally expire after 30 days and are not intended to personally identify users.

If a user visits certain pages of our website while the cookie is still valid, Google and we can recognise that the user clicked on an advertisement and was redirected to the relevant page.

Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of different Google Ads customers.

The information collected through conversion cookies is used to generate conversion statistics for Google Ads customers who have enabled conversion tracking.

Customers can see the total number of users who clicked on their advertisements and were redirected to a page containing a conversion-tracking tag. They do not receive information that personally identifies individual users.

If you do not wish to participate in tracking, you can disable Google conversion tracking cookies through your browser settings.

You will then not be included in conversion-tracking statistics.

We use Google Ads based on our legitimate interest in targeted advertising under Article 6(1)(f) GDPR.

Google LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

Further information about Google's privacy policy can be found at:

https://www.google.de/policies/privacy/

You can permanently disable advertising preference cookies by changing your browser settings or downloading and installing the browser plugin available at:

https://www.google.com/settings/ads/plugin?hl=de

Please note that disabling cookies may mean that certain website functions are unavailable or only partially available.

11) WEB ANALYTICS SERVICES

Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Analytics uses cookies, which are text files stored on your computer that enable analysis of your use of the website.

The information generated by these cookies about your use of the website, including your shortened IP address, is generally transmitted to and stored on a Google server in the USA.

This website uses Google Analytics with the “_anonymizeIp()” extension, which shortens IP addresses to help prevent direct identification.

As a result, your IP address is shortened by Google within Member States of the European Union or other states party to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

In these exceptional cases, processing is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in statistically analysing user behaviour for optimisation and marketing purposes.

Google processes this information on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services relating to website and internet usage.

The IP address transmitted by your browser through Google Analytics is not combined with other Google data.

You can prevent cookies from being stored by changing your browser settings. However, please note that doing so may prevent you from using all the functions of this website fully.

You can also prevent Google from collecting and processing data generated by cookies relating to your use of the website, including your IP address, by downloading and installing the browser plugin available at:

https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, on mobile devices or in browsers where the plugin is not available, you may be able to use an opt-out cookie to prevent Google Analytics from collecting data on this website.

The opt-out cookie works only in the browser and for the domain on which it is set. If you delete your cookies, you will need to activate the opt-out again.

Google LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

This website also uses Google Analytics for cross-device analysis of visitor activity through a User ID.

When a user first visits a page, a unique, persistent and anonymised ID is assigned, allowing interaction data from different devices and sessions to be associated with the same user.

The User ID does not contain personal data and does not transmit such data to Google.

You may object to the collection and storage of data through the User ID at any time, with effect for the future.

To do so, you must disable Google Analytics on all systems you use, for example, in another browser or on your mobile device.

You can disable this tracking using Google's browser plugin:

https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you may use an opt-out cookie where available. This cookie works only in the relevant browser and domain and must be activated again if you delete your cookies.

Further information about Universal Analytics can be found at:

https://support.google.com/analytics/answer/2838718?hl=en

12) RETARGETING, REMARKETING AND REFERRAL ADVERTISING

Facebook Custom Audiences using the Pixel

This website uses the Facebook Pixel provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

Where you have given your explicit consent, this technology can track user behaviour after users have seen or clicked on a Facebook advertisement.

This procedure is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimise future advertising campaigns.

The data collected is anonymous to us, meaning we cannot use it to identify individual users. However, Facebook stores and processes this data, which may allow it to associate the data with a user profile and use it for its own advertising purposes in accordance with Facebook's data policy:

https://www.facebook.com/about/privacy/

Facebook and its partners may use this information to display advertisements on and outside Facebook. A cookie may also be stored on your device for these purposes.

These processing activities take place only with your explicit consent in accordance with Article 6(1)(a) GDPR.

Consent to the use of the Facebook Pixel may only be given by users older than 13 years of age. If you are younger, please ask your parent or legal guardian for permission.

Facebook Inc., based in the USA, was previously certified under the EU-US Privacy Shield framework.

To disable cookies on your computer, you can configure your internet browser to prevent future cookies from being stored or delete existing cookies.

However, disabling all cookies may prevent certain functions of our website from working correctly.

You can also manage third-party advertising cookies, including those from Facebook, through the Digital Advertising Alliance:

https://www.aboutads.info/choices/

Google Ads Remarketing

Our website uses Google Ads Remarketing to advertise this website in Google search results and on third-party websites.

The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For this purpose, Google places a cookie in your browser that uses a pseudonymous cookie ID and information about the pages you have visited to enable interest-based advertising.

The processing is based on our legitimate interest in optimally marketing our website in accordance with Article 6(1)(f) GDPR.

Further data processing takes place only if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalise advertisements displayed to you on the web.

If you are logged in to Google while visiting our website, Google may combine your data with Google Analytics data to create and define audience lists for cross-device remarketing.

For this purpose, your personal data may temporarily be linked with Google Analytics data to create target audiences.

You can permanently disable advertising preference cookies by downloading and installing the browser plugin available at:

https://www.google.com/settings/ads/onweb/

Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn more about advertising cookies and manage your preferences.

You can also configure your browser to notify you when cookies are set and allow you to accept or reject them individually or altogether.

Rejecting cookies may limit the functionality of our website.

Google LLC, based in the USA, was previously certified under the EU-US Privacy Shield framework.

Further information about Google's advertising technologies and privacy practices can be found at:

https://www.google.com/policies/technologies/ads/

13) RIGHTS OF DATA SUBJECTS

13.1

Applicable data protection law grants you comprehensive rights regarding the processing of your personal data (rights of access and intervention). These include the following:

Right of access under Article 15 GDPR

You have the right to obtain information about the personal data we process about you, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended retention period or the criteria used to determine it, the existence of your rights to rectification, erasure, restriction of processing and objection, the right to lodge a complaint with a supervisory authority, the source of your data where it was not collected directly from you, and the existence of automated decision-making, including profiling.

Where applicable, you may also request meaningful information about the logic involved and the significance and intended consequences of such processing for you, as well as information about safeguards under Article 46 GDPR when your data is transferred to third countries.

Right to rectification under Article 16 GDPR

You have the right to request the prompt correction of inaccurate personal data and the completion of incomplete personal data stored by us.

Right to erasure under Article 17 GDPR

You have the right to request the deletion of your personal data where the conditions set out in Article 17(1) GDPR are met.

This right does not apply where processing is necessary, in particular, to exercise the right to freedom of expression and information, comply with a legal obligation, serve a public interest or establish, exercise or defend legal claims.

Right to restriction of processing under Article 18 GDPR

You have the right to request restriction of the processing of your personal data where you contest the accuracy of the data while we verify it; where you object to erasure because the processing is unlawful and instead request restriction; where you need the data to establish, exercise or defend legal claims even though we no longer need it for the original purpose; or where you have objected to processing on grounds relating to your particular situation while it is being determined whether our legitimate grounds override your interests.

Right to notification under Article 19 GDPR

If you have exercised your right to rectification, erasure or restriction of processing, we are required to notify each recipient to whom your personal data has been disclosed of the rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients.

Right to data portability under Article 20 GDPR

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that we transfer it to another data controller, where technically feasible.

Right to withdraw consent under Article 7(3) GDPR

You have the right to withdraw your consent to data processing at any time, with effect for the future.

Following withdrawal, we will promptly delete the affected data unless further processing is permitted under another legal basis that does not require consent.

Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Right to lodge a complaint under Article 77 GDPR

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy.

In particular, you may lodge a complaint in the Member State where you reside, work or where the alleged infringement occurred.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING.

YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

14) DURATION OF STORAGE OF PERSONAL DATA

The period for which personal data is stored depends on the applicable statutory retention periods, such as commercial and tax law requirements.

After these periods expire, the relevant data is routinely deleted, provided that it is no longer required for the performance or initiation of a contract and there is no legitimate interest on our part in retaining it further.

CONTACT INFORMATION

Jacob & Rose

Website: https://jacobandrose.com
Email: info@jacobandrose.com