Privacy

1. Overview

This data protection declaration applies to data processing by Designer Outlets Wolfsburg OCI GmbH (“person responsible”, “we” or “us”). It informs you about the type, scope and purposes of the collection, processing and use of so-called personal data arising from the use of the services offered by us (e.g. registration for our newsletter, or purchase of a gift voucher on our website www.designeroutlets-wolfsburg.de).

Please review this data protection declaration carefully. If you have any questions or comments on this subject, you can send them at any time to the persons listed at paragraph 2 to the specified e-mail address.

Personal data is information that can be directly or indirectly assigned to your person, e.g. name, address, e-mail address, or user behaviour.

Our data processing can essentially be divided into two categories:

  • For the purpose of implementing the contract within the framework of ordering vouchers, as well as within the framework of the “Designer Outlets Pass/Designer Coupons” customer loyalty programme, all data required for the implementation of a contract with us will be processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent required.
  • The informational use of the website https://www.designeroutlets-wolfsburg.de/ (“website”) involves the exchange of various information between your terminal device and our server. This may include personal data. The information collected in this way is used, among other things, to optimise our website or to display advertising in your terminal’s browser.

2. Name and contact details of the responsible person

The responsible person is designer outlets OCI Wolfsburg GmbH, An der Vorburg 1, 38440 Wolfsburg, phone: 05361 893500, e-mail: wolfsburg@designeroutlets.com.

3. Purposes of data processing, legal bases and legitimate interests pursued by the per-son responsible or a third party, as well as categories of recipients

3.1. Informational use of our website

When you visit our website, the browser used on your device automatically sends information to the server of our website and temporarily stores it in so-called log files. We have no influence over this. The following information is recorded without your intervention and stored until it is automatically deleted:

  • the IP address of the requesting internet-enabled device;
  • the date and time of access;
  • the name and URL of the file called up;
  • the website from which the access was made (referrer URL);
  • the browser you are using and, if applicable, the operating system of your Inter-net-enabled computer as well as the name of the access provider.

The legal basis for processing the IP address is Art. 6 para. 1 (f) of the General Data Protection Regulation) (“GDPR”). No conclusions can be drawn about your identity from the data collected and none will be drawn by us. Our legitimate interest in data collection is to be seen in the following purposes:

  • ensuring smooth connection setup;
  • ensuring convenient use of our website;
  • evaluation of system security and stability and
  • other administrative purposes.

3.2. Data processing for the purchase of gift vouchers

In the contextof the purchase of gift vouchers via our website www.designeroutlets-wolfsburg.de we process the data required for the conclusion and processing of the contract. This includes:

  • First name, Surname
  • Name of your company
  • Invoicing and Shipping Address
  • Email address
  • Phone number (optional)
  • Date of birth (optional)
  • Invoice and payment data
  • The contents of your shopping cart (number, vouchers, value, price, amount).

The legal basis is Art. 6 para. 1 (b) GDPR. Insofar as we do not use your contact data for advertising purposes (in detail under para. 3), we store the data collected for the implementation of the contract until the expiry of the statutory or possible contractual warranty and guarantee rights. Upon expiry of this period, we shall retain information regarding the contractual relationship required by commercial and tax law for the periods specified by law. For this period (usually ten years from the conclusion of the contract), the data will be reprocessed solely in the event of an audit by the tax authorities.

3.3. Data processing for advertising purposes

3.3.1. Sending of advertising with your consent

If you have consented to this, we will use your name, address, email address and mobile phone number to send you information about our offers by post, WhatsApp, email, SMS or MMS.

To register for our newsletter, we use the “double opt-in” procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of the procedure is to verify your registration and, if necessary, to clarify a possible misuse of your data.

You can revoke your consent to the sending of advertising at any time with effect for the future (by e-mail to: wolfsburg@designeroutlets.com or by sending a message to the contact data specified in para. 1). In the case of the newsletter, revocation can also be made by clicking on the link provided in each newsletter e-mail („Link zum Abmelden“).

In the event of revocation of your consent, e.g. by cancelling the newsletter, we will delete your above-mentioned data. 

3.3.2. Promotions for existing customers

If you have concluded a contract with us for the purchase of gift vouchers, we will carry you as an existing customer. In this case, we will process the following outside of a specific consent (3.3.1.) Your name and e-mail address in order to send you information about new products and services by e-mail.

3.3.3. Advertising in line with your interests

To ensure that you only receive information that is of interest to you, we categorise and supplement your customer profile with further information. We use both statistical information and information about your purchasing behaviour (e.g. sales, shops visited, time of purchase and frequency of purchase). The legal basis is Art. 6 para. 1 (f) GDPR in conjunction with Art.7 para. 3 UWG (Law against unfair competition). In this way, we want to ensure that you only receive information about our offers that meets your actual or supposed needs (legitimate interest).

3.3.4. Designer Outlets Pass and Designer Coupons

When registering for our “Designer Outlets Pass” we collect your name, your postcode and your e-mail address. We use this data and the QR code assigned to you as part of the Designer Coupons promotion to credit the respective discounts for your purchase (legal basis: Art. 6 para. 1 (b) GDPR).

The QR code can only be used if you have subscribed to our newsletter. In the event of revocation of your consent given for this (No. 3.3.1) a QR code assigned to you loses its effectiveness. 

3.3.5. Objection to direct marketing

You may at any time object to the processing of your personal data for advertising purposes (“advertising objection”).

3.4. Online presence and website optimisation

3.4.1. Cookies – General Information

On our website we use cookies, on the basis of Art. 6 para. 1 (f) GDPR. The background to the use of cookies is our interest in optimising the website, which is considered legitimate within the meaning of Art. 6 para. 1 (f) GDPR. Cookies are small text files that are allocated and stored on your hard disk in association with the browser you are using and through which the site which sets the cookie transmits certain information. Almost every website on the Internet uses cookies. Cookies cannot run programmes or deliver viruses to your computer. On the one hand, they serve to make our website more user-friendly for you as a whole. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These will be deleted automatically after leaving our site. In addition, in order to increase user-friendliness, we use temporary cookies that are stored on your end device for a certain defined period of time, for example for our coupon shop and the Facebook Pixel. If you visit our site again to use our services, it will automatically recognise that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you and to display information specially tailored to your needs. These cookies enable us to automatically recognise when you return to our site that you have already been with us. The cookies are automatically deleted after a specified time.

However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Deactivating cookies, however, may result in your being unable to use all the functions in our portal.

3.4.2. Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our pages, we use, on the basis of Art. 6 para. 1 (f) GDPR Google Analytics, a web analysis service of Google Inc. (“Google”). In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), and time of the server request, are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on advertising activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. Google may also transfer this information to third parties where this is legally required, or where such third parties process the information on Google’s behalf. Under no circumstances will your IP address be merged with other data from Google. The IP address is made anonymous so that an assignment is not possible (so-called IP masking).

You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies concerning your use of the website (incl. your IP address) from being passed to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can object to the use of Google Analytics on this website – Bitte klicken Sie hier. Please note that for technical reasons this objection must be made individually for each browser and each terminal device.

For more information about privacy at Google Analytics, please visit the third party website of: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.

3.5. Targeting and Remarketing

The targeting measures listed below and used by us are based on Art. 6 para. 1 (f) GDPR. We want to ensure that you are only shown advertising that is oriented towards your actual or supposed interests through the targeting measures we use. Not bothering you with uninteresting advertisements is in our interest as well as in your interest.

3.5.1. Google AdWords and Google Conversion Tracking

We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. We are interested in showing you advertisements which are of interest to you, in order to make our website more interesting for you and achieving a fair calculation of advertising costs.

This advertising media is delivered by Google via “Ad Servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success can be measured, such as the display of advertisements or of clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your device. These cookies usually expire after 30 days and are not used with the intention of personally identifying you. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (a mark that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not expired, both Google and the customer are able to recognise that the user has clicked on the ad and has been redirected to this page. Each Adwords customer is assigned a different cookie. Thus, cookies cannot be tracked using the website of an Adwords advertiser. We do not process any personal data ourselves in the aforementioned advertising measures. We only receive statistical evaluations from Google. We are able to recognise which of the advertising measures are particularly effective on the basis of these evaluations. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser is automatically able to establish a direct connection to the Google server. We have no influence on the extent and the further use of the data which are collected by Google’s use of this tool, and we therefore inform you according to our knowledge: By integrating AdWords conversion Google receives the information that you accessed the relevant part of our online presence or clicked on one of our advertisements. If you are registered with a Google service, Google may associate your visit to our website with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.

The legal basis for processing is your consent under Art. 6 para. 1 (f) GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US privacy shield (https://www.privacyshield.gov/EU-US-Framework).

3.5.2. Google Remarketing

Besides Adwords Conversion we use the Google Remarketing application. This is a process we would like to use to contact you again. This application allows us to show you our advertisements after you have visited our website whilst you continue to use the Internet. This is done using cookies stored in your browser, which record and evaluate your usage behaviour when visiting various websites via Google. This is how Google can determine your previous visit to our website. Google does not, according to its own statements, combine the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google’s own statement, pseudonymisation is used in remarketing.

3.5.3. Facebook Pixel

Our website uses the visitor action pixel (also known as “Facebook Custom Audience”) from Facebook, Facebook Inc. to measure conversion. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This function is used to present interest-based advertisements (“Facebook ads”) to visitors of this website as part of a visit to the Facebook social network. This enables us to optimise the effectiveness of Facebook advertisements for future advertising measures and to evaluate them for market research purposes (legitimate interest). The Facebook visitor action pixel has been implemented on this website for this purpose. This pixel is used to establish a direct connection to the Facebook servers when you visit this website. There is a transmission to the Facebook server indicating that you have visited this website and Facebook assigns this information to your personal Facebook user account. The data collected is anonymous for us as operators of this website and we cannot use it to draw any conclusions about our users’ identities. To find more information on the collection and use of data by Facebook, your rights in this regard, and on options for protecting your privacy, go to Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

You can also deactivate this “Custom Audiences” function at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you will first need to log into Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/

You can object to the use of the Facebook Pixel at any time  Please click here . Please note that for technical reasons this objection must be made individually for each browser and each terminal device.

The legal basis for data processing is Art. 6 para. 1 (f) GDPR.

3.5.4. Google Maps

We use Google Maps functions on this website. This allows us to display interactive maps directly on the website and enables your convenient use of the map function. This is done on the legal basis of Art. 6 para. 1 (f).

To use Google Maps, it is necessary to save your IP address. When you visit this website, Google receives the information that you have accessed the corresponding sub-page of our website. This takes place regardless of whether Google makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated to your Google profile, you must first log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

For more information about the purpose and scope of data collection and its processing by Google, please refer to the provider’s data protection policy. You will also find further information on your corresponding rights and settings options for protecting your privacy here: http://www.google.de/intl&de/polies.privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

4. Third party service providers

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

4.1. Categories of recipients

The external service providers can be assigned to the following categories in particular:

  • Payment service providers
  • Contract data processing undertakings
  • Providers of online shop systems
  • Providers of e-mail newsletter mail-outs
  • Providers of mail-outs by post.

4.2. Recipients outside the EU

With the exception of the provisions set out under para. 3.5 we will not pass on your data to recipients based outside the European Union or the European Economic Area. Under para. 3.5 the processing operations mentioned above cause the data to be transmitted to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. Data is transmitted in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission. You can obtain a copy of these standard contractual clauses from us. To do so, please send a letter and a stamped self-addressed envelope to the address indicated in paragraph 2.

5. Revocation of your consent

You can revoke your consent to the processing of your data at any time with effect for the future. The legality of the processing of your personal data until revocation remains unaffected by this.

6. Right to Object

Under the conditions of Art. 21 para. 1 GDPR data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right of objection applies to all purposes described in this data protection declaration, for which the basis of the processing is Art. 6 para. 1 (f) GDPR. We are only obliged to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health).

7. Your other rights

You have the following rights towards us regarding your personal data:

  • right of access (Art. 15 para. 1 and 2 GDPR)
  • right to rectification (Art. 16 Page 1 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to object to processing (Art. 21 GDPR)
  • right to data portability (Art. 20 GDPR).

8. Right to file complaints with regulatory authorities

You also have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.

9. Data security

We maintain current technical and organisational measures to guarantee data security, in particular to protect your personal data from the dangers of data transmission and to prevent third parties from gaining knowledge. These measures are kept up to date with the latest state of the art technology.

 

designer outlets OCI Wolfsburg GmbH

Last updated: May, 2018