ZYXX STREETWEAR
Privacy Policy

 
This privacy policy provides you with an overview of how your data is processed by ZYXX STREETWEAR. It applies to all websites, apps, and other services offered by ZYXX STREETWEAR.

If you have any questions about this privacy policy or data protection at ZYXX STREETWEAR, you can contact our data protection team at datenschutz@zyxx.me. Please also send an email to our data protection team if you wish to exercise your right to information or data erasure or any other data protection right pursuant to Art. 15-22 GDPR, including revoking consent for marketing purposes, unsubscribing from the newsletter, etc. Further information can be found in the sections What data protection rights do I have? and Contact persons.

How to read this privacy policy: We offer you various ways of reading this privacy policy. First, you will find some very basic information in this section. We have then sorted this privacy policy according to topics relevant to you and divided it into individual chapters accordingly.

We have preceded each chapter with a short overview text. This overview text briefly summarizes the content of the chapter. If you just want to get a quick overview of all data processing activities, we recommend reading the overview texts. If you want to familiarize yourself with the details, you can click on "More" below the respective overview text. You will then see the complete content of the chapter.

We have avoided cross-references as much as possible. This means that all information is explained coherently, regardless of which chapter you are currently in. If you read this privacy policy from start to finish, you may notice some repetition. We have not been able to completely avoid a few cross-references. For example, we have summarized all country-specific data processing activities in a separate chapter and always refer to this chapter if country-specific data processing exists.

To which services and offers does this privacy policy apply:
The way in which we at ZYXX STREETWEAR process your data is similar for most of our offers. This privacy policy therefore applies to all services and offers that we offer to our customers in Europe. This applies regardless of whether we do this via a website, an app, in stores, by phone at events, or via social networks or other channels. To increase clarity, we use the term "services" for this "normal" case.

However, there are also services where we exceptionally process your data differently or for special purposes. This can be due to the type of service or country-specific requirements. When we refer to these cases (i.e. "deviations from the norm"), we call it "service-specific" or "country-specific".

Finally, it is important to note that ZYXX STREETWEAR is not just a single company. ZYXX STREETWEAR is a group and therefore consists of several companies. Not all of these companies offers you services or processes your data. For the sake of simplicity, only the ZYXX STREETWEAR companies that are actually involved in processing your data are named below. Therefore, when reference is made below to "ZYXX STREETWEAR", "we" or "us", this refers to the respective responsible ZYXX STREETWEAR companies.

What you will learn in this privacy policy:

• Which data is stored by ZYXX STREETWEAR.

• What we do with this data and what it is needed for.

• What data protection rights and choices you have.

• What technologies and data we use to personalize and tailor our services and content to offer you a safe, easy, seamless, and personalized shopping experience.

• What technologies and data we use for advertising, including the tracking technologies we use.

 
1. What data does ZYXX STREETWEAR process?
 
ZYXX STREETWEAR offers you a wide variety of services that you can use in different ways. Depending on whether you contact us online, by phone, in person or in another way and which services you use, different data from different sources is generated. Much of the data we process is provided to us by you when you use our services or contact us, for example when you register and provide your name, email address or postal address. We also receive technical device and access data that we automatically collect when you interact with our services. This may, for example, include information about the device you use. We collect additional data through our own data analyses (e.g. as part of market research studies and by evaluating customers). We may also receive data about you from third parties, for example from credit agencies and payment service providers.

When we talk about “your data”, we mean personal data. This is all information with which we could identify you immediately or by combining it with other information. Examples: your name, telephone number, customer number, order numbers or your email address. Any information with which we cannot identify you (even when combined with other information) is considered non-personal data. Non-personal data is also referred to as anonymous data. If we combine your personal data with anonymous data, all data in that data set is considered personal data. If we delete the personal data from information or a data set about you, the remaining data in that data set is no longer considered personal data. This process is called anonymization. The basic rule is: If we ask you to provide certain personal information, you can of course refuse. You decide which information you give us. However, we may then not be able to provide you with the desired services (or not optimally). For example, we cannot deliver packages without providing a delivery address. If only certain information is required in connection with a service (mandatory information), we will inform you of this by means of a corresponding label.

 
1.1 Profile data
 
Profile data is personal and demographic information about you (so-called master data) and your individual interests, which you provide to us when registering for your customer account. Your profile data includes, for example:

• Your first and last name

• Your contact details

• Your preferences, e.g. with regard to brands, product types or styles

• Demographic information such as your gender, age and place of residence

• Mandatory information is usually your name, your email address and a password of your choice. Your email address and password will later form your login data.

To use restricted-access, paid or personalized services, further mandatory information may be required, such as your date of birth or your title (e.g. to direct you to the ZYXX shop homepage that matches your gender) or your preferred brands and clothing styles.

Profile data may also include further information about you and your interests. This may be collected when you register for the service or added subsequently. This is the case, for example, if you later add voluntary information to your profile or if you want to use your customer account to register for a service that requires additional mandatory information.

When you are logged into your customer account, you can view your profile data there and, in most cases, edit it directly, for example, to update your address after moving.

 
1.2 Contact details
 
When you contact us, we collect your contact information. Depending on how you contact us (e.g., by phone or email), your contact information may include your name, postal addresses, telephone numbers, fax numbers, email addresses, details of your social media profiles (for example, we receive your Facebook ID if you contact us via Facebook), usernames, and similar contact details.
 
1.3 Purchasing data
 
When you order something from ZYXX STREETWEAR or shop locally, for example at ZZYXX STREETWEAR, we collect your purchase data. Depending on the type of sale and processing status, purchase data may include the following information:

• Order number

• Details of the purchased items (name, size, color, purchase price, etc.

• Payment method details

• Delivery and billing addresses

• Notices and communications related to purchases (e.g., cancellation notices, complaints, and customer service notifications)

• Delivery and payment status, e.g., "Completed" or "Shipped"

• Return status, e.g., "Successfully completed"

• Information from service providers involved in the contract execution (for mail-order purchases, for example, tracking numbers from parcel service providers)

 
1.4 Payment data
 
We offer you the most common payment methods in online trading – in particular advance payment, credit card or PayPal. We collect the payment data you provide to process payments. We receive further payment data from external payment service providers and credit agencies with whom we work for payment processing and credit checks. We only pass on to our payment service providers such data that is necessary for payment processing.

Payment data also includes other information that is directly related to payment processing and credit checks. This applies, for example, to information that external payment service providers use for identification, such as your PayPal ID (if you pay with PayPal).

Credit data consists of our own records of your previous payment behavior with all ZYXX STREETWEAR companies and from score values that we obtain about you from external credit agencies. Credit data provides information about a person's estimated economic performance and willingness to pay. This helps companies avoid payment defaults that arise when customers are unable to meet their payment obligations or are unable to do so on time. Taking creditworthiness data into account when selecting payment methods is also intended to prevent us from offering our customers payment methods that cannot be offered to them and to prevent our customers from entering into payment obligations that they themselves cannot fulfill. Creditworthiness data is usually determined by so-called credit agencies. From the various pieces of information, the credit agencies then calculate a so-called score value, which takes into account, among other things, existing payment obligations and, if applicable, previous payment defaults. Score values are statistically based estimates of the future risk of a person's payment default and are presented as a numerical value, such as a percentage. We have only limited influence on the data processing of external credit agencies (e.g., when we provide credit agencies with information about unfulfilled payment obligations).

Our cooperation with external payment service providers and credit agencies is country-specific in order to take country-specific characteristics and requirements into account. Under Who will my data be passed on? you will find information about external payment service providers and under Country-specific information you will find information about which credit agencies we work with in which countries. There you may also find special data protection information that we provide to you on behalf of the respective payment service providers and credit agencies.

 
1.5 Interest data
 
When you interact with our services, data is generated that we use to learn about the content, topics, products, product types, brands, or styles you are interested in. For example, we can use shopping data, wish list contents, and your age (where this information is available to us), as well as comparisons with users with similar characteristics, to determine which styles and product categories you are interested in. This way, we can show you the products that are likely to be most relevant to you the next time you enter a search.

In addition to the interests you have communicated directly, we can also derive your interests from other data we collect. For example, if you repeatedly visit a certain area of the ZYXX STREETWEAR shop, we can use your access data to draw conclusions about your interests as part of the usage analysis (e.g., we can determine that you may be interested in sports if you regularly visit the “Sportswear” category or order products from this category).

For this purpose, we also receive information and statistics on demographics (such as age, gender, region), device data, access data, and the interests of our users from our external advertising partners. We ensure that our advertising partners only transmit aggregated, encrypted, or anonymous data to ZYXX STREETWEAR, so that we cannot assign the data to a specific person, especially a specific user. This information can help us better understand our users, for example, in the context of customer structure analyses and user segmentation.

 
1.6 Messages, conversation content
 
If you communicate with us or other users about products and other topics by telephone, mail, via social media services, contact forms or in any other way, we record the content of your messages.

If necessary, we will forward your messages to the department responsible for your request, such as partner companies or manufacturers. In the event that your data is forwarded to another company (e.g. if you send us feedback to the manufacturer of a product), you naturally have the option of informing us that you would like your data to be used exclusively by ZYXX STREETWEAR. In this case, we will not forward your request to the responsible department or will only forward it without your personal information, provided that your request can be processed in this way.

If you report a product or other content using the designated reporting function, the content of your report will be recorded, used to review the product or content and you will be informed of the review and decision.

ZYXX STREETWEAR also uses social networks such as Facebook, Instagram or Twitter to communicate with customers and users. We use these popular platforms to offer you additional contact and information options in addition to our own communication channels. Please note, however, that we have no influence on the terms of use of the social networks and the services they offer, and only limited influence on their data processing. We therefore ask you to carefully consider which personal data you share with us via the social networks. We have no influence on the behavior of the operators of the social networks, other users, or third parties who may cooperate with the operators of the social networks or also use their services.

 
1.7 Social network data
 
ZYXX STREETWEAR maintains profile pages (also known as “fan pages”) on various social networks. In addition, functions of social networks may be integrated into the services of ZYXX STREETWEAR. These can be messenger services and so-called social plug-ins or social logins such as “Log in with Facebook”. If you contact us directly via our social media profiles or use the functions of social networks integrated into our services and are a member of the respective social network, we may receive data from the operator of the social network with which you can be identified. We can generally view the following data:

Your public profile information stored on the respective social network (e.g. name, profile picture)

• Information about the type of device you are using

• The account ID of your profile on the respective network (e.g. Facebook ID)

• Please also note the information on the processing of social network data in connection with functions of social networks under “Information about websites and apps” and “Information about social media fan pages”.

ZYXX STREETWEAR currently uses the Facebook messenger service and social plug-ins/logins from the following social networks:

• Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The link to Facebook’s privacy policy can be found here: Facebook’s privacy policy.

• Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”). The link to Twitter’s privacy policy can be found here: Twitter’s privacy policy.

• Pinterest Inc., 635 High Street, Palo Alto, CA, USA (“Pinterest”). The link to Pinterest’s privacy policy can be found here: Pinterest’s privacy policy.

 
1.8 Location data
 
For certain purposes, we also collect data about the current location of your device when you use our services. Two different technologies are used for this.

If you enable your device's location services for a ZYXX STREETWEAR app, website, or other online service, ZYXX STREETWEAR will process the location data determined by your device and made available to us to provide you with location-based services.

If you allow ZYXX STREETWEAR to access your device's location services, your location may be transmitted to us regularly (e.g., even when you are not currently using the app). This serves to improve the user experience, for example by loading location-dependent content faster when you use the app in your location or to display location-based push notifications. We do not create movement profiles from this data. You will receive further information in connection with the location-based service if necessary.

We also collect location data derived from your device's IP address (down to the city level). For this purpose, an anonymized IP address shortened to three digits is used. This can therefore no longer be used to identify your internet connection or device.

This process (so-called geolocation) is used by us and many other online shops, for example, for fraud detection and to identify suspicious orders (e.g., in certain situations, it may be suspicious if the IP address of a country from which you have not previously placed an order is used for an order via your customer account).

 
1.9 Photos and other personal content
 
Some of our Service-specific applications allow you to share photos and other personal content with us or other users to communicate with us or other users or to personalize Services, for example, by a) uploading a profile picture; b) using ZYXX STREETWEAR's photo search; c) communicating with a stylist; or d) creating and/or assembling outfits (for example, by dressing an avatar in different items of clothing) and then sharing them with other ZYXX STREETWEAR users.

When you review products, we collect the information you share during the review and may publish it within our Services. In addition, your review may be shared with the brand of the reviewed product for their own evaluation and publication.

 
1.10 Information for promotions, competitions and surveys
 
If you participate in a promotion (e.g., a competition) or survey (e.g., customer satisfaction surveys as part of market research) offered by ZYXX STREETWEAR, we will ask you for personal information.

For example, in a competition, we usually ask for your name and email address so that we can notify you if you win and to ensure that each participant only enters the competition once.

In some cases, we may also ask you for additional information that we or our partners need to conduct the promotion, competition, or survey.

 
1.11 Device data and access data
 
When using online and mobile services, it is unavoidable that technical data is created and processed in order to provide the functions and content offered and to display them on your device. We refer to this data collectively as “device and access data”. Device and access data are created every time an online and mobile service is used. It does not matter who the provider is. Device and access data therefore arise, for example, when using:

• Websites

• Apps

• Social media fan pages

• Email newsletters (i.e. when your newsletter interaction is recorded)

• Location-based services

• ZYXX STREETWEAR collects device data and access data from online and mobile services offered by ZYXX STREETWEAR itself (e.g. ZYXX STREETWEAR Shop). On the other hand, ZYXX STREETWEAR may receive device data and access data from online and mobile services of other companies, provided that these are social media or advertising partners of ZYXX STREETWEAR or participate in the same online advertising networks (e.g. the "Google advertising network"). For more information, see "How does ZYXX STREETWEAR use my data for advertising?" and "Information about social media fan pages".

Device and access data includes the following categories:

• General device information, such as information about the device type, the version of the operating system, configuration settings (e.g. language settings, system permissions), information about the internet connection (e.g. name of the mobile network, connection speed) and the app used (e.g. name and version of the app). Identification data (IDs), such as session IDs, cookie IDs, unique device identification numbers (e.g. Google advertising ID, Apple Ad ID), third-party account IDs (if you use social plug-ins or social logins or pay via PayPal) and other common Internet technologies to recognize your web browser, your device or a specific app installation.

• Access data that is automatically transmitted by apps and web browsers each time you access web servers and databases online (as part of so-called HTTP requests). This is standardized information about the requested content (such as the name and file type of a file accessed) as well as other information about server access (such as the amount of data transmitted and error codes), your device (e.g. device type, operating system, software versions, device identifiers, IP address, the previously visited page and the time of access.

 
2. What does ZYXX STREETWEAR use my data for?
 
ZYXX STREETWEAR processes your data in compliance with all applicable data protection laws. In doing so, we naturally observe the principles of data protection law for the processing of personal data. We therefore only process your data for the purposes explained to you in this privacy policy or communicated to you when the data was collected. These are primarily the processing of purchases and the provision, personalization, further development, and security of our services. In addition, we use your data within the framework of strict German and European data protection law, but also for other purposes, such as product development, scientific research (particularly in the areas of machine learning, artificial intelligence, and deep learning), and market research, for the optimization of business processes, the needs-based design of our services, and for personalized advertising.

In this chapter, we also inform you on which legal basis (legal basis) we process data for each purpose. Depending on the legal basis on which we process your data, you may be entitled to special data protection rights in addition to your always-existing data protection rights, such as the right to information. For example, in some cases you have the right to object to the processing of your data. For further information , see “What data protection rights do I have?”.

 
2.1 Purchasing and provision of online, local and personalized services
 
We process your data to the extent necessary to fulfill the contract and to provide and perform other services you have requested, as described in this privacy policy. The purposes of the data processing required in each case depend on the purpose of the contract agreed with you (including our general terms and conditions and, if applicable, service-specific terms and conditions or terms of use) or the services you have requested. The most important purposes are:
 
2.2 Shopping personalization
 
We process your data to provide convenient and useful services that best meet your needs and interests. Since the ZYXX STREETWEAR Shop offers hundreds of thousands of products and thousands of brands, it is necessary that we present our content and offers in a needs-based manner so that you can find the products you are actually interested in. This requires a user-specific assessment of the relevance of products and content.

For shopping personalization in the ZYXX STREETWEAR Shop, we use device data and access data that we collect for usage analysis. We also use device data and access data that we receive from advertising partners while you visit the ZYXX STREETWEAR Shop. If you are logged in to your customer account during your visit to the ZYXX STREETWEAR Shop, we also use profile data, interest data and purchase data for shopping personalization. We refer to this form of shopping personalization as on-site optimization. Only with this type of shopping personalization can we present you with suitable search results, product suggestions, style recommendations and other content that correspond to your actual interests. Following on from this, with the help of our "Fashion Assistant" we offer you the additional option of making suitable product suggestions based on your information, integrating external services from the field of artificial intelligence as well as your profile data, interest data, and purchasing data. Without this kind of shopping personalization, as is now standard practice in many online shops, the search for products relevant to you would be less convenient, more time-consuming, and the benefit of our offering for you would be less. Of course, you have access to all content despite shopping personalization. However, shopping personalization allows you to see the content that is more relevant to you sooner.

Legal basis: The legal basis for processing your data for shopping personalization within the framework of personalized services is Article 6 (1) b GDPR. Notwithstanding this, the legal basis is Article 6 (1) f GDPR if the processing is necessary for our overriding legitimate interests in the purposes stated above.

 
2.3 Research, Machine Learning and Artificial Intelligence
 
We process the data collected about our customers for scientific research in fields relevant to ZYXX STREETWEAR. These include, in particular, the research areas of machine learning, artificial intelligence, natural language processing, and deep learning. Research at ZYXX STREETWEAR focuses on solving real, everyday problems of online shopping and is intended to improve and further develop the existing service offering. For example, we can develop apps that can suggest products tailored to your interests and needs, and that can recognize styles and assign products that correspond to your actual interests.

In doing so, we naturally observe recognized scientific data protection standards. This also means that we only process your data in aggregated, anonymized, or pseudonymized form for research purposes, for example, by replacing all identifiable data such as your name with other information.

Legal basis: The legal basis for processing your data for the research purposes described above is Article 6 (1) (f) GDPR, whereby our legitimate interests lie in the purposes stated above.

 
2.4 Fraud prevention, selection of payment methods and credit checks
 
Fraud Prevention

To counteract the risk of data security breaches, the data of users of our services is transmitted in encrypted form. This applies to both orders and logins to customer accounts. We use the SSL (Secure Socket Layer) encryption system for this purpose. This encryption prevents third parties from viewing the data. To further protect ourselves against external attacks, we use special security technologies that continuously monitor our systems and immediately detect and report any anomalies. In addition, we secure our systems with technical and organizational measures against loss, destruction, unauthorized access, alteration, or distribution of customer data by unauthorized persons. In this way, we want to keep the risk of unauthorized access as low as possible; after all, the protection of your data is our top priority. However, like other companies, we cannot guarantee absolute protection.

We also use technical and manual fraud prevention procedures to protect ourselves and our users from the misuse of your data, particularly through fraudulent orders. For this purpose, when you place an order, ZYXX STREETWEAR and ZYXX STREETWEAR will collate and evaluate your device and access data (including IP address, identifiers, usage behavior), purchasing data and payment data (including address and other credit data from external credit agencies), as well as the change history of your customer account/profile data (e.g., when your delivery addresses were last changed) under a pseudonym. The data set will also be compared with your previous usage and ordering habits. In addition, a comparison will be made with general data records from the total number of orders placed with ZYXX STREETWEAR (including from other ZYXX STREETWEAR companies) in which fraudulent activities have been committed or such activities are suspected. This comparison serves to identify fraud patterns and, by comparing the patterns, to prevent fraud and identity theft. In some cases, if our analysis determines the risk of fraud to be very high, we may cancel orders or deactivate accounts to minimize the risk of fraudulent orders and protect users whose accounts have been hacked. In this context, both ZYXX STREETWEAR and ZYXX STREETWEAR may work with third-party service providers.

A similar situation applies if our analysis reveals that customers are returning ordered items in a disproportionate and/or abusive manner, for example, through an excessive number of returns. In such a case, ZYXX STREETWEAR reserves the right to exclude these customers from placing further orders for a certain period of time (pause).

Such measures (order cancellation, account deactivation, and pausing) may, in individual cases, be based on automated decisions, which you can request to be manually reviewed. At the same time, you can present your own point of view and contest the decision made by ZYXX STREETWEAR.

With this in mind, ZYXX STREETWEAR also relies on the (previously collected) user information stored in the respective user accounts to detect and mitigate fraudulent activities.

In some countries, we offer our customers the option of paying for their purchases by invoice. If you choose this payment method, ZYXX STREETWEAR will send your name and address, which you provide at the checkout, to external credit agencies. This ensures that you are actually registered and can be reached at the addresses provided. ZYXX STREETWEAR will also send your name and address to external credit agencies if you have chosen to pay by SEPA direct debit in order to avoid the risk of payment defaults, e.g. due to data misuse. Typical indicators that can increase the likelihood of a fraud attempt - usually in combination - are:

• Your delivery address was changed shortly before the order was placed and/or is located in a region with an increased risk of fraud.

• Your order is particularly large and/or includes products that are currently in particularly high demand and/or is placed at an unusual time for your region (e.g. at night).

• The order is made using the invoice or direct debit payment methods.

• Before placing your order, there were suspicious login attempts to your customer account, the pattern of which indicates an automated approach

• Your customer account is being used from a suspicious IP address.

• Your customer account is being used with an unknown or suspicious device.

• If our security system suspects a fraud attempt or an increased risk of fraud, the transaction in question will be forwarded to the ZYXX STREETWEAR fraud team for manual review. Appropriate preventive measures will be taken, taking the risk of fraud into account (e.g., temporarily blocking the customer account or restricting the payment methods offered).

These providers collect and process data with the help of cookies and other tracking technologies to determine the end device used by the user and other data about the use of the website. There is no assignment to a specific user.

As part of an ordering process on our website, we retrieve a risk assessment of the user's end device from the provider's database. This risk assessment of the likelihood of a fraud attempt takes into account, among other things, whether the end device has logged in via different service providers, whether the end device has a frequently changing georeference, how many transactions were made via the end device and whether a proxy connection is used.

Legal basis: If the processing of your data to prevent fraud at your expense is carried out, the legal basis is Article 6 (1) (b) GDPR. Notwithstanding this, the legal basis is Article 6 (1) (f) GDPR, based on our legitimate interest and the legitimate interest of other users in the detection and prevention of fraud and the investigation of crimes.

Selection of payment methods

Before we display the payment methods available for a purchase, ZYXX STREETWEAR conducts a risk assessment and considers the total cost of an order for ZYXX STREETWEAR. To conduct the risk assessment, we use your previously collected purchasing data, payment data, creditworthiness data, data on your previous payment behavior, and your profile data (such as last name, first name, delivery and billing addresses, email address, date of birth). The assessment and evaluation are automated using statistically based estimates of the default risk with regard to the payment methods we offer. Using the previously collected data increases the accuracy of such risk assessments. If payment by invoice is possible in your country and you choose to pay by invoice for your items, ZYXX STREETWEAR will transmit your data to external credit agencies in order to receive general information from them to assess payment-specific default risks (for example, whether your address is plausible and up-to-date) and, in individual cases, creditworthiness data, possibly regarding outstanding invoices and circumstances that directly lead to a risk of default (for example, insolvency, deferment due to insolvency). In addition, ZYXX STREETWEAR will transmit your data to external credit agencies in order to assess payment-specific default risks if you have opted for payment by SEPA direct debit. The specific creditworthiness data taken into account in the risk assessment may vary from country to country.

When deciding on the payment methods offered, the total cost of the specific payment method for ZYXX STREETWEAR and the availability of the payment method in the respective country are also taken into account. For example, we may no longer offer certain payment methods that entail higher costs, risks or higher return rates for us to customers who typically return more than average (for example, return rates of more than approximately 70%) or who place very small orders. Adjusting the available payment methods leads to lower return rates, which is more sustainable and economical. At the same time, our customers can still use our services because every customer is offered at least one possible payment method and can therefore complete the purchase.

The default risk is assessed individually for each payment method in the form of an estimated value. If the risk assessment is positive, we can offer you all of the payment methods we offer. Otherwise, we will only offer you certain payment methods. Factors that can influence the availability of a payment method include:

• The combination of name and address could not be found. This can be the case with spelling errors, relocations, marriage, or rezoning.

• You have provided a delivery address, packing station, or company address that differs from the billing address.

• There are still outstanding claims against you.

• There have been payment defaults with certain payment methods in the past.

• The risk assessment does not result in you not being offered a payment method. If you do not agree with the payment methods offered to you, you can notify us in writing by letter or email to datenschutz@zyxx.me. We will then re-examine the decision, taking your point of view into account.

Legal basis: The legal basis for the processing of your data is Article 6 (1) b GDPR, as it is required to carry out necessary pre-contractual measures, and Article 6 (1) f GDPR, which is based on our legitimate interest in avoiding default risks.

Credit check

In addition to the data already available to ZYXX STREETWEAR, creditworthiness data from external credit agencies is also used in the form of score values. Score values are statistically based estimates of a person's future risk of payment default and are presented as a numerical value, such as a percentage. For this purpose, ZYXX STREETWEAR transmits the personal data required for a credit check (generally your full name, address and, if necessary, your date of birth or your social security number (in countries where this is required)) to the external agency on our behalf. Address data may also be taken into account when calculating the score. The credit agency uses the data we transmit to us to make an appropriate assessment of your creditworthiness with regard to the respective order based on mathematical and statistical procedures.

Depending on the result of the credit check, i.e. whether it is positive or negative, we will show you suitable payment methods with which you can continue and complete the purchase.

If you do not agree, you can inform us in writing or by email to datenschutz@zyxx.me. We will then reconsider the decision, taking your point of view into account.

Legal basis: The legal basis for the credit check described above is Article 6 (1) b GDPR, as it is required to carry out necessary pre-contractual measures. Notwithstanding this, this processing of your data is based on Article 6 (1) f GDPR, based on our legitimate interest and that of other users in avoiding payment defaults, detecting and preventing fraud, and investigating criminal offenses.

Before such data processing operations take place, your aforementioned data may be used to test the efficiency of the respective procedure and/or collaboration.

 
2.5 Transmission of data on outstanding receivables to debt collection agencies
 
In the event that you have outstanding invoices that have not yet been paid, we may work with service providers to send reminders. If outstanding claims remain unpaid despite repeated reminders, we may transfer the data required to engage a debt collection service provider for the purpose of collecting the claim. Alternatively, we may sell the claim to a debt collection service provider, who can then file a claim in their own name. Information on the companies commissioned to provide debt collection services in your country can be found under "Country-Specific Information."

Legal basis: The legal basis for the transmission of data within the scope of escrow collection is Art. 6 (1) (b) GDPR; the transmission of data within the scope of debt sale is based on Art. 6 (1) (f) GDPR.

 
2.6 Advertising and market research, data analysis
 
We use your data, including for data analysis, for advertising and market research purposes. In doing so, we pursue the following purposes in particular:

• The division into different target groups and user groups as part of market research (user segmentation).

• Insights into different target groups and their respective usage habits and shopping interests.

• Gaining insights into the demographics, interests, shopping habits and usage habits of our users and marketing these insights as part of advertising services provided to third parties.

• The early identification of trends in the areas of fashion and online shopping.

• Carrying out advertising to existing customers.

• Carrying out direct advertising, e.g. in the form of newsletters.

• Planning, implementing and monitoring the success of advertising that corresponds to the interests of the target groups addressed (personalized advertising).

• Insights into how our services are used (usage analysis).

• Marketing the above-mentioned insights as part of advertising services for advertising customers.

Depending on the purpose, we use the data we store for data analysis. For example, to analyze our users' purchasing behavior, we use summarized (aggregated), statistical, depersonalized (anonymized) profile data or data that can only be assigned to individuals through further intermediate steps (pseudonymized profile data), as well as purchasing data, device data, and access data, in order to track and analyze purchasing transactions through data analysis. This enables us to gain anonymous or pseudonymized insights into the general usage behavior of our users.

We process your data based on a balance of interests to protect the legitimate interests of us or a third party (these may be, for example, advertising partners or retailers who participate in the ZYXX partner program). The legitimate interest of ZYXX or third parties in data processing arises from the respective purposes and, unless otherwise stated, is of a competitive and economic nature.

Legal basis: If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 (1) (a) GDPR (consent). Furthermore, data processing is carried out on the basis of Article 6 paragraph 1 letter f GDPR, whereby the legitimate interests lie in the purposes mentioned above.

 
2.7 Product development and technology development
 
We use your data for product and technology development, including the development and improvement of personalized services. We use aggregated, pseudonymized or anonymized data and also machine learning algorithms, for example from our research, which enable us to estimate, forecast and analyze the interests of our users. For example, we can develop apps that can suggest products tailored to your interests and needs and that can recognize styles and assign products that correspond to your actual interests. Data processing for product and technology development takes place in particular for the following purposes:

• The development and improvement of personalized services and technologies for data analysis, advertising and personalized online shopping.

• The development of technologies and concepts for improving IT security, preventing fraud and improving data protection, e.g. through pseudonymization techniques, encryption techniques and anonymization techniques.

• The development and testing of software solutions for the optimization of necessary business and logistics processes.

Legal basis: The legal basis for processing your data for product and technology development purposes is Article 6 (1) (f) GDPR, whereby our legitimate interests lie in the purposes stated above.

 
2.8 Business management and business optimization
 
We transmit and process your data where necessary for administrative and logistical processes and to optimize business processes within ZYXX STREETWEAR in order to make them more efficient and legally secure and to comply with our contractual and legal obligations (e.g. retention obligations under commercial and tax law). Many systems and technologies are used jointly within the ZYXX Group. This enables us to offer a cheaper, safer, more uniform and better personalized service. Therefore, various companies within the ZYXX Group have access to your data insofar as this is necessary to fulfill the purposes stated in this data protection declaration.

Data processing for business management and optimization also includes, for example, the following purposes:

• Carrying out and improving customer service.

• Preventing and investigating criminal offenses.

• Ensuring the security and operability of our IT systems.

• Processing reports on products and other content.

Legal basis: The legal basis for processing your data for business management and optimization is Article 6 (1) (f) GDPR, whereby our legitimate interests lie in the purposes stated above. To the extent that we process your data due to legal requirements, e.g. tax retention obligations and money laundering checks, the legal basis is Article 6 paragraph 1 letter c GDPR.

 
2.9 Based on your consent
 
If you have given us your consent to process personal data, your consent is primarily the basis for our data processing. Which of your data we process based on your consent depends on the purpose of your consent. Typical purposes include:

• Ordering a newsletter.

• Participating in surveys and market research studies.

• Obtaining and publishing product reviews.

• Processing particularly sensitive data that reveals, for example, your political opinions, religious or ideological beliefs or your state of health.

• Recording telephone conversations that you have, for example, with our hotline.

• Transferring your data to third parties or to a country outside the European Union.

• Processing your location data by Google Maps in certain cases, for example to provide you with information about the nearest collection points for an order.

 
2.10 Other purposes
 
If data protection law permits, we may also use your data for new purposes without your consent, such as conducting data analyses and further developing our services and content. This is provided that the new purposes are compatible with the purposes for which the data was originally collected. For example, new developments in the legal or technical field and innovative business models and services may lead to new processing purposes.
 
3. Personalized services
 
Developing and providing personalized features and services for you is our top priority. We offer you a personalized shopping experience, regardless of location, time, or device, and a selection tailored to your individual interests. Processing your data to personalize our services is therefore an integral part of ZYXX STREETWEAR's service.
 
3.1 What are personalized services?
 
Personalized services allow us to offer you better, more convenient, and more secure services. We use the personal data we have stored about you to determine your needs and interests. Based on this, we can offer you more relevant content that better matches your needs and interests. You will, of course, still have access to all content. However, through personalization, you will see content that is more relevant to you sooner, or content will be presented specifically for you (e.g., in the form of personalized product recommendations).
 
3.2 Why do I need a customer account?
 
Most of our personalized services require you to create a customer account so that we can store the data we collect about you in one central location.
 
3.3 What data is stored in my customer account?
 
Your customer account stores the personal data we collect about you, as well as your customer number (CustomerID). The customer number is a randomly generated sequence of numbers that does not contain any personal information. Your data is linked to your customer number so that you can be assigned to your customer account. The customer number also functions as a pseudonym.
 
3.4 Which data is used for personalization?
 
The selection of personalized content is generally based on all data stored in your customer account.

If device data and access data are used that are not stored in your customer account, they will only be used pseudonymously for the respective personalization (e.g., in connection with your customer number, but not in connection with your name or other directly identifying profile data) for the duration of use.

 
3.5 Your choices
 
You can view most of the data we have stored in your customer account at any time. If necessary, you can also edit this data there and thus influence personalization, for example, by communicating your preferences.

Please note: The "Profile Information" setting is a virtual switch that allows you to control personalization settings.

 
4. Information about websites and apps
 
We use your data to provide the ZYXX STREETWEAR websites and apps. In addition to the device and access data generated each time these services are used, the type of data processed and the purposes for which it is processed depend in particular on how you use the functions and services provided through our services. We also use the data generated when you use our services to find out how our online offering is used. We use this information, among other things, for shopping personalization, to improve our services, and for personalized advertising.
 
4.1 Provider
 
You can find the responsible provider of the service in the imprint of the respective website or app.
 
4.2 What data is collected?
 
We generally collect all data that you provide to us directly via our services.

Device data and access data

Every time our servers and databases are accessed, device and access data is generated and logged in so-called server log files. The IP address contained therein is briefly anonymized after the end of each access as soon as storage is no longer required to maintain the functionality of the respective website.

If available and activated on your device, we also collect a device-specific identification number (e.g. a so-called "advertising ID" if you use an Android device or "ad ID" if you use an Apple device). This device identifier is assigned by the manufacturer of your device's operating system and can be read and used by websites and apps to present you with content based on your usage habits. If you do not wish this, you can deactivate it at any time in the browser settings or system settings of your device.

Login

We set up password-protected personal access for users who register for a customer account or another service. Unless you log out after logging in with your login information, you will remain automatically logged in to most of our services. Depending on the type of service, a cookie or similar technology is used for this purpose. This feature allows you to use some of our services without having to log in each time. For security reasons, however, you will be asked to enter your password again if, for example, you want to change your profile data or place an order. For more information, see "Personalized Services."

Social Plug-ins

Our services may contain social plug-ins (“plug-ins”) from various social networks. With the help of these plug-ins, you can, for example, share content or recommend products. The plug-ins are deactivated by default and therefore do not send any data. You can activate the plug-ins by clicking on the corresponding button (e.g. “Activate social media”). The plug-ins can also be deactivated again with one click. When the plug-ins are activated, your web browser establishes a direct connection to the web servers of the respective social network. The content of the plug-in is then transmitted directly from the social network to your web browser, which integrates it into our website. By integrating the plug-ins, the social network receives the information that you have accessed the corresponding page of our website and can record your device and access data. If you are logged in to the social network, it can also assign the visit to your account on the respective social network. If you interact with the plug-ins, for example, by clicking the Facebook "Like" button or leaving a comment, the corresponding information is transmitted directly from your browser to the social network and stored there. The purpose and scope of data collection and the further processing and use of the data by social networks, as well as your rights and setting options for protecting your privacy, can be found in the privacy policies of the respective networks or websites. You will find the links below. Even if you are not logged in to the social networks, websites with active social plug-ins can send data to the networks. An active plug-in sets a cookie with an ID each time the website is accessed. Since your web browser sends this cookie without your consent each time you connect to a server, the social network could, in principle, use it to create a profile of which websites the user associated with the ID has visited. It would then also be entirely possible to assign this identifier to a person later – for example, when logging into the social network later.

Social plug-ins from Facebook:

On some of our websites, we use plug-ins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

Social plug-ins from Twitter

On some of our websites, we use plug-ins from the social network Twitter, which is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter").

Social plug-ins from Pinterest

On some of our websites we use plug-ins from the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA (“Pinterest”).

Social Logins

Our services may offer you the option of registering with us directly using your social network account. If you wish to use this function, you will first be redirected to the respective social network’s website. There you will be asked to log in using your username and password. We will of course not have any knowledge of your login details. If you are already logged in, this step will be skipped. The respective social network will then inform you and ask you to confirm which data will be sent to us (e.g. public profile, friends list, email address and current place of residence). We will use the data you provide to create your customer account, although we will of course not save your friends list, for example. There will be no further permanent link between your customer account and your account with the social network. We also receive social network data from the providers of the respective social networks.

Shopping personalization

In our services, the device and access data generated during use from usage analysis is used for shopping personalization. Depending on the type of service, common tracking technologies are used for this purpose, using tracking pixels and identification cookies or similar IDs (so-called tagging). In addition, our advertising partners can also collect your device and access data in this way in order to provide us with information about your interests and demographic data (such as age, gender, region) while you use our services. This way, we can present you with advertising and/or special offers and services whose content matches your interests (for example, product recommendations that are geared towards the fact that you have only viewed sports shoes in the last few days). Our goal is to make our offering as attractive as possible for you and to present you with advertising that matches your areas of interest. Of course, you can still use all content and functions. However, this on-site optimization enables us to show you content and functions that are more relevant to you first. Onsite optimization is carried out automatically by our systems, which recognize that users have accessed products and content in certain categories more frequently.

If you do not want advertising partners to collect your device and access data for the purpose of on-site optimization, click on “Save settings” in the cookie settings without first selecting the “Marketing” category. You can deactivate this category again at any time after making your selection:

• On the ZYXX STREETWEAR website you will find the relevant settings at the bottom of the page under “Data settings” or on the ZYXX STREETWEAR website under “Data processing”. There you remove the check mark next to the “Marketing” cookie category and then confirm your selection by clicking on “Save settings”.

• In the app you can find the settings in the “App settings” under “Data processing”.

Information about website cookies

Our websites use cookies. Accepting cookies is not a prerequisite for visiting our websites. However, we would like to point out that our websites may only have limited functionality if you do not accept cookies. Depending on the web browser you use, you can set the settings so that cookies are not accepted or only accepted if you agree to them.

The cookies used by our websites may come from ZYXX STREETWEAR or from advertising partners. If you only want to accept ZYXX STREETWEAR cookies and not the cookies of our advertising partners, you can select the appropriate setting in your browser (e.g. "block third-party cookies"). The help function in your web browser's menu bar usually shows you how to reject new cookies and deactivate those already received. We recommend that you log off completely after using our websites on shared computers that are set to accept cookies and Flash cookies.

Our services use three categories of cookies:

• Necessary cookies:
These cookies are required for optimal navigation, operation and security of the website. For example, these cookies implement the shopping cart function so that the items in your shopping cart remain saved while you continue shopping. Necessary cookies also serve to save certain entries and settings you have made so that you don't have to repeat them constantly, as well as to tailor ZYXX STREETWEAR content to your individual interests. Without necessary cookies, the website cannot be used or can only be used to a limited extent.

• Performance and analytics cookies:
These cookies collect device and access data in order to analyze the use of our websites, for example which areas of the website are used and how (so-called surfing behavior), how quickly content is loaded and whether errors occur. These cookies only contain anonymous or pseudonymous information and are only used to improve our website and to find out what interests our users, as well as to measure how effective our advertising is. Statistical cookies can be blocked without affecting the navigation and operation of the website.

• Marketing cookies:
These cookies contain identifiers and collect device and access data in order to tailor personalized advertising on ZYXX STREETWEAR websites to your individual interests. Our advertising partners, who operate online advertising networks, also collect device and access data via the marketing cookies on our websites. This means we can also show you personalized advertising that matches your interests on other websites and in apps from other providers (so-called retargeting). Marketing cookies can be blocked without affecting the navigation and operation of the website. In this case, however, the shopping experience and the advertising displayed will be less personalized.

 
4.3 Information about apps
 
App Stores / Installation

The ZYXX apps are available via app platforms operated by third parties, so-called app stores (e.g. Google Play and Apple App Store). Downloading them may therefore require prior registration with the respective app store. ZYXX has no influence on the processing of your data in connection with your registration and use of these app stores. The operator of the respective app store is solely responsible in this regard. Please contact the respective app store operator directly if necessary.

Sharing content

If the operating system you use has its own function for sharing app content, you can access this in our apps via the Share or Recommend button to share content or recommend products. Depending on the functions of your device or operating system and how you have configured your device, you can also use social networks to share in this way.

We would like to point out that the share function used by our app is an operating system function. We do not receive any knowledge of the recipients or the content of your communication. For more information about the share function and its configuration options, please contact your device manufacturer.

Which social networks are available to you for sharing content depends on which social networks you are a member of and how you have configured your membership account and device. For more information, please see the privacy policies of the social networks you use.

Location-based services

The functions of some of our apps use your device’s location services to collect location data. This is done for the purpose of offering you app-based services and content that are tailored to your current location. For example, an app can show you shops in your area and suggest products that match the weather at your current location. If you allow the app access to location services, your location will be regularly transmitted to us for this purpose. We do not create movement profiles from this data.

Push service

Our apps can inform you about certain events or topics with push notifications, even if you are not actively using the app. Push notifications are an app-specific form of notification that we can use to address you directly. If you do not wish this, you can deactivate the push service at any time via your device settings and in the settings within the app.

If you activate the push notification service, a device-specific push ID will be assigned to your device. Without a push ID, push notifications cannot be sent to you for technical reasons. The push ID is just an encrypted, randomly generated sequence of numbers.

System permissions

For some functions, our apps need to be able to access certain interfaces and data on your device. Depending on which operating system you use, this may sometimes require your explicit permission. Below we explain which permissions (if relevant to the processing of your data) our app may request and for which types of functions these permissions are required. You can adjust the permission settings in your device's system settings at any time.

• Location services / location data:
Permission to access your device's location services is required so that an app can access the location determined by your device. If you do not allow access, the location-based display of content may not be possible or may only be possible to a limited extent.

• Notifications / push notifications:
Permission is required to use the push service. On some devices, permission is enabled for all apps by default.

• Access to saved photos:
Permission is required so that an app can access saved photos (read access) or so that photos created by an app can be saved on your device (write access).

• Camera:
Permission is required so that an app can use your device's camera function, for example to take photos or scan QR codes. The respective app will only access the camera if you select a corresponding function in the app.

• Mobile data (iOS) or access to all networks and network connections (Android):
When you use or install some apps, these permissions are requested to enable the respective app to transfer data via your device's internet connection (via Wi-Fi or data connection). This permission may be required to transfer your entries in the app to our servers, e.g. as part of a search.

• Change or delete USB storage / SD card contents and read USB storage / SD card contents:
These permissions are required to allow the respective app to store data in the memory or, if applicable, on any additional storage used on your device, or to read it from there. The respective app will only read the data stored in connection with the use of this app.

 
4.4 Online advertising
 
Our websites and apps contain cookies and similar tracking technologies from advertising partners who operate an online advertising network, provided you have accepted the marketing cookies. This also enables our advertising partners to collect your device and access data and to present you with personalized advertising on other websites and in apps, including those from other providers, that is tailored to your interests (e.g. advertising that is tailored to which products you have previously viewed in the ZYXX STREETWEAR shop).

Further information can be found under “How does ZYXX STREETWEAR use my data for advertising?”

You can deactivate the processing of your data for retargeting at any time:

• On the ZYXX STREETWEAR website, please deactivate the marketing cookies at the bottom of the page under “Data settings” or on the ZYXX STREETWEAR website under “Data processing”. In the app, the settings can be found in the “App settings” under “Data processing”.

• For other websites and apps, you can also opt out of retargeting by participating online advertising networks on the European Interactive Digital Advertising Alliance (EDAA) opt-out page: Opt out of more ads.

 
4.5 Usage analysis
 
We use common tracking technologies in all our services to evaluate device and access data. This allows us to learn how our services are used by our users in general. Identification cookies and similar identifiers are used for this purpose. This allows us to learn, for example, which content and topics are particularly popular, at what times our services are used most frequently, from which regions (down to city level) our services are used, and which browsers and devices our users generally use.

We also occasionally conduct so-called A/B tests as part of usage analysis. A/B testing is a special variant of usage analysis. A/B testing (also known as split testing) is a method for comparing two versions of a website or app to find out which version performs better, is more popular, or helps users find the content they are looking for more quickly. By creating version A and version B and testing both versions, you obtain data that can be used to simplify and accelerate decisions about changes to the services and content.

You can find out which tracking tools are used on our websites and apps under "Information on individual websites."

You can prevent the collection of your data using performance and analytics cookies for the purpose of usage analysis by not selecting the corresponding cookie category. Once you have made your selection, you can deactivate the cookie category at any time:

• The settings for this can be found at the end of the ZYXX STREETWEAR website under "Data settings" and on the ZYXX STREETWEAR website under "Data processing." In the app, the settings can be found in the "App settings" under "Data processing."

 
5. Information about social media fan pages
 
ZYXX STREETWEAR maintains social media profiles on the Facebook and Instagram social networks (so-called "fan pages"). We regularly publish and share content, offers, and product recommendations on our fan pages. With every interaction on our fan pages or other Facebook or Instagram websites, the operators of the social networks record your usage behavior using cookies and similar technologies. Fan page operators can view general statistics on the interests and demographic characteristics (such as age, gender, region) of the fan page audience. When you use social networks, the type, scope, and purposes of the processing of data on social networks are primarily determined by the operators of the social networks.
 
5.1 Provider / Responsible Party
 
The company responsible for the content of a fan page can be found in the imprint information on the respective fan page.

The social networks Facebook and Instagram are each offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook")

If you communicate with us directly via our fan pages or share personal content with us, ZYXX STREETWEAR is responsible for processing your data. An exception applies to the data processing described below for usage analysis (Page Insights); for this, we are jointly responsible with Facebook.

 
5.2 What data is collected?
 
When you visit our fan pages, ZYXX STREETWEAR generally records all messages, content, and other information that you provide to us directly there, such as when you post something on a fan page or send us a private message. If you have an account with the respective social network, we can of course also see your public information, such as your username, information in your public profile, and content that you share with a public audience. For more information, see “What data does ZYXX STREETWEAR process?”

Usage analysis (page insights)

With every interaction with fan pages, Facebook uses cookies and similar technologies to record the usage behavior of fan page visits. On this basis, the fan page operators receive so-called “page insights.” Page insights only contain statistical, depersonalized (anonymized) information about visitors to the fan page, which therefore cannot be assigned to a specific person. We have no access to the personal data that Facebook uses to create page insights (“page insights data”). The selection and processing of Page Insights data is carried out exclusively by Facebook.

Page Insights provides us with insights into how our fan pages are used, the interests of our fan page visitors, and which topics and content are particularly popular. This enables us to optimize our fan page activities, for example, by better responding to the interests and usage habits of our audience when planning and selecting our content.

ZYXX STREETWEAR and Facebook are jointly responsible for processing your data for the provision of Page Insights. For this purpose, we and Facebook have agreed on which company fulfills which data protection obligations under the GDPR with regard to the processing of Page Insights data.

Legal basis: If you have given Facebook your consent to the creation of Page Insights as described above, the legal basis is Article 6 (1) (a) GDPR (consent). Otherwise, the legal basis is Article 6 (1) (f) GDPR, whereby our legitimate interests lie in the purposes stated above.

 
5.3 What data protection rights do I have?
 
Your data protection rights described under "What data protection rights do I have?" naturally also apply to the processing of your data in connection with our fan pages.

For the processing of your Page Insights data together with Facebook, we have agreed with Facebook that Facebook is primarily responsible for providing you with information about the processing of your Page Insights data and for enabling you to exercise your data protection rights under the GDPR (e.g., right of objection). Further information on your data protection rights in connection with Page Insights and how you can exercise them directly with Facebook can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data

 
6. Newsletter
 
We offer you various newsletter services, which include the following:

• Inspirational content, e.g. current information about brands, trends, offers, sales, categories;

• Reminders, e.g. when the price of an item on your wish list is reduced, if you have left items in your shopping cart or if you have asked for a size reminder;

• Surveys, for example, to find out whether you liked the items you bought;

• Personalized recommendations of items when, based on your previous orders and browsing habits, we believe they may be of interest to you;

• Updates from influencers and brands you may follow on our sites

If you have subscribed to newsletters, some of the newsletter services described above will be available to you (depending on the scope of your subscription). In addition, there are service-specific newsletters that are integral components of a particular service.

For example, only members of the Lounge by ZYXX-STREETWEAR-CLUB are entitled to receive the ZYXX STREETWEAR newsletter. You need the ZYXX STREETWEAR newsletter so that we can inform you about current, limited-time offers and so that you can take advantage of the benefits of the Shopping Club.

 
6.1 How do I register?
 
When we send our newsletters that require your consent, we use the so-called double opt-in process or the single opt-in process (country-specific), i.e. we only send the newsletter if you have previously given us your explicit consent to activate the newsletter. If a double opt-in is required in your country, you must also have previously confirmed that the email address you have provided to us is your own email address. For this purpose, we will send you an email notification and ask you to confirm that you are the owner of the email address you have provided to us by clicking on one of the links contained in the email. We may not take this step if you have already confirmed to us in another matter in the manner mentioned that you are the owner of this email address.

In addition, you may also receive advertising messages from ZYXX-STREETWEAR without subscribing to a newsletter (subject to competition law), e.g. individual recommendations after your last purchase. For more information on this, see "Individual product recommendations via email and push service."

In order to offer you more personalized content, ZYXX-STREETWEAR collects data based on your previous collaboration with ZYXX-STREETWEAR and your use of the services. For example, if you open our newsletters more frequently, this indicates to us that you are interested in them and that your expectations regarding the frequency and content of the emails are being met.

 
6.2 Cancellation
 
If you no longer wish to receive emails from us, you can unsubscribe at any time by using the unsubscribe link included in every newsletter and promotional message you receive from us. You can also send a written notification (e.g., email, fax, letter) to the ZYXX-STREETWEAR responsible for the relevant newsletter. Where preference centers are available (e.g., for ZYXX-STREETWEAR and the ZYXX-STREETWEAR Shop), you can also unsubscribe from the newsletter in the preference center.
 
6.3 What data is collected?
 
When you subscribe to a newsletter, we temporarily store your IP address as well as the time of your subscription and confirmation. This allows us to prove that you have actually subscribed to the newsletter and, if necessary, to identify any unauthorized use of your email address. We assign a randomly generated ID number (newsletter ID), which we use to process any unsubscription you may have requested.

We collect device and access data when you interact with newsletters, transactional emails, and push notifications. For evaluations of this kind, newsletters contain links to image files stored on our web servers. When you open a newsletter, your email program uploads these image files from our web server. This allows us to track whether and when a newsletter was opened. If you click on a link contained in the newsletter, we can use a so-called pixel to determine which content was read. We use this information to personalize communication and to send you relevant communication. We aggregate the data and link your newsletter subscription to your customer account using your customer number in order to personalize the newsletter content according to your interests and usage habits, and to statistically analyze how our users use the newsletter service.

This shopping personalization is an essential component of the ZYXX STREETWEAR shop newsletter.

You can deactivate the display of images in your email program. However, in this case, the newsletter will not be displayed in full.

 
7. Individual product recommendations via email and push service
 
As part of our services, we present information and offers from ZYXX STREETWEAR based on your interests. You will receive a limited number of product recommendations, surveys, and requests for product reviews from us, even if you have not subscribed to a newsletter. When selecting individual product recommendations, we prefer to use data from your previous orders in compliance with legal regulations.
 
8. Vouchers
 
We use the data provided when ordering ZYXX STREETWEAR vouchers to check and process the order, as well as to send and redeem the voucher. This also includes logging and processing data related to voucher use, particularly to prevent fraud.

For these purposes, we also store the following data:

• Date of issue

• Voucher value

• Voucher code

• Personalization data (if provided by you)

• Name of the voucher holder (for personalized vouchers)

• Time of voucher redemption

• Name of the redeemer and the customer account ID of the account used for redemption.

 
9. How does ZYXX STREETWEAR use my data for advertising?
 
We and our advertising partners use your data to personalize advertising presented to you on ZYXX STREETWEAR services and on the websites and apps of other providers. For this purpose, we and our advertising partners use standard internet technologies. This allows us to target our advertising more precisely and only provide you with advertisements and offers that are truly relevant to you. This enables us to better meet our users' needs for personalization and the discovery of new products, and to maintain your long-term interest in our services through a more personalized shopping experience.
 
9.1 Advertising formats and channels
 
The advertising formats used by ZYXX STREETWEAR advertising partners include presentations in the ZYXX STREETWEAR shop, advertisements on social networks (e.g. Facebook Ads, Instagram Ads, YouTube Video Ads) and advertising space that is mediated via the online advertising networks used by ZYXX STREETWEAR, such as DoubleClick by Google.

ZYXX STREETWEAR does not sell personal data. If our advertising customers book a ZYXX STREETWEAR advertising format with ZYXX STREETWEAR Marketing, they will not receive any data that can be used to contact or identify you without your express consent. Our advertising customers only receive anonymous, aggregated reports from us with information on the effectiveness and reach of the advertising services we provide. These reports are based on ZYXX STREETWEAR's own surveys; in some cases they also take into account summarized reports that we receive from our advertising partners and social networks. These reports show, for example, how our advertising services have affected sales among different customer groups.

 
9.2 Information we use to create target audiences
 
To create target groups, we use our own findings from data analysis on the usage and purchasing behavior of our users and customers, as well as our market research for user segmentation, which we apply to the user data collected by ZYXX STREETWEAR. In doing so, we particularly consider aggregated, pseudonymized, or anonymized purchasing data, search histories, interest data, and demographic profile data, as well as device and access data.

Our advertising partners also have the option of providing us with their own additional data for user segmentation, which they collect themselves. The advertising partners must undertake to ZYXX STREETWEAR to only transmit aggregated, encrypted, or anonymous data to ZYXX STREETWEAR, so that we cannot assign the data to a specific person, especially not to a specific user of the ZYXX STREETWEAR shop. For some target groups, target group creation is also based on user surfing behavior. This is the case when advertising should only be presented to users who have recently visited a specific website or searched for specific content.

 
9.3 How do we use this information for online advertising in the ZYXX STREETWEAR Shop
 
We use the above information as part of on-site optimization to present you with more relevant recommendations and content when you search for products, access your feed, or visit a product section. On-site and in-app optimization is based on cookies and similar identification technologies for the pseudonymous collection of device and access data. This data is not used to identify you personally, but solely for a pseudonymous evaluation of your usage. Your data will never be permanently merged with other personal data we have stored about you. With this technology, we can present you with products and/or special offers and services whose content is based on the device data and access data.

If you do not want our advertising partners to collect your device data and access data, click "Save settings" in the cookie settings. You can also deactivate this category at any time after making your selection:

 
9.4 On social networks
 
When we advertise via social network advertising formats (e.g., YouTube, Facebook, Instagram), we have the option of transmitting information about ZYXX STREETWEAR service users (e.g., device and access data such as advertising and cookie IDs, email addresses) that we suspect belong to an advertiser's target group or exhibit certain characteristics (e.g., age group, region, interests) in encrypted form to the respective social network.

The respective social network will then decrypt the data we transmit – either on our behalf as a processor or with the consent of the user concerned – and present the user (provided they are a member of the respective social network) with the advertising booked by us within the scope of their existing user relationship with the respective social network.

If you do not want us to use your data to present you with personalized advertising on social networks, you can prevent the transmission of your data by not accepting the "Marketing" cookie category. If you have already accepted cookies, you can deactivate this cookie category at any time:

 
9.5 On advertising spaces mediated via online advertising networks
 
Advertising partners who operate an online advertising network may use cookies and similar technologies in the ZYXX STREETWEAR shop and on websites and apps of other providers to pseudonymously record your usage behavior based on device data and access data. These advertising partners use the collected data to determine how likely you are to belong to the target group we are addressing and take this into account when selecting advertisements on the advertising spaces brokered via their online advertising network. This standard internet technology is known as retargeting. Retargeting enables us to place advertising that is as relevant to you as possible and to measure the effectiveness and reach of the advertising material, as well as to review the billing of our advertising partners for campaigns placed.

Further information can be obtained from the operators of the respective advertising spaces and the online advertising networks commissioned to broker them. An overview of the advertising partners and information on deactivation can be found under "Information on individual websites".

You can deactivate the processing of your data for retargeting at any time:

• On the ZYXX STREETWEAR website, please deactivate the marketing cookies at the bottom of the page under "Data Settings" or on the ZYXX STREETWEAR website under "Data Processing." In the app, the settings can be found in the "App Settings" under "Data Processing."

• For our websites, you can also deactivate retargeting by participating online advertising networks on the deactivation page of the European Interactive Digital Advertising Alliance (EDAA): Deactivate further advertising.

 
10. To whom will my data be passed on?
 
ZYXX STREETWEAR only passes on your data if this is permitted under German or European data protection law. We work particularly closely with some service providers, for example in the area of customer service (e.g. hotline service providers), with technical service providers (e.g. operation of data centers) or with logistics companies (e.g. postal companies like DHL). These service providers are generally only permitted to process your data on our behalf under special conditions. If we use them as data processors, the service providers only have access to your data to the extent and for the period necessary to provide the respective service. If you make a purchase from a ZYXX STREETWEAR partner, we will pass on certain of your purchasing data to the ZYXX STREETWEAR partner (e.g. your name and delivery address) so that the ZYXX STREETWEAR partner can deliver the ordered goods to you.
 
10.1 ZYXX Group companies
 
Many systems and technologies are shared within the ZYXX Group. This enables us to provide you with a cheaper, better, more secure, more consistent, and more interesting service. Therefore, within the ZYXX Group, only those companies and departments that need your data to fulfill our contractual and legal obligations or to perform their respective functions within the ZYXX Group will have access to it.
 
10.2 Shipping companies
 
We work with external shipping service providers (e.g., DHL) to deliver orders. These shipping service providers receive the following data from us to execute the respective order:

• Your name

• Your delivery address

• If applicable, your postal code (if you wish to have the order delivered to a collection point)

• If applicable, your email address or telephone number (if the shipping service provider wishes to inform you by email or telephone, for example, about the expected delivery date or provide you with the PIN for the collection point)

 
10.3 Partners in the ZYXX Partner Program, Brands and Product Manufacturers
 
As part of the ZYXX partner program, we enable other retailers (so-called ZYXX partners) to sell their products (so-called ZYXX partner items) via the ZYXX shop. The ZYXX shop serves as a sales platform within the ZYXX partner program through which purchase contracts are brokered. "Sold and shipped by our partner" and the name of the respective ZYXX partner are then displayed under the respective ZYXX partner item.

If you order a ZYXX partner item, the item is usually shipped directly from the respective ZYXX partner. For this purpose, we pass your purchasing data on to the ZYXX partner.

This includes:

• Details of the ordered ZYXX partner items

• Your name

• Your delivery address

• If applicable, your postal number (if you want the order delivered to a collection point)

In some cases or in some countries, we also pass on your email address or telephone number to a partner, but only where this is necessary to enable delivery of the item to you.

Even if you purchase an item from a ZYXX partner at ZYXX, ZYXX remains responsible for processing your data. Your data will not be processed jointly with or on behalf of a ZYXX partner. ZYXX ensures that ZYXX partners do not have control over the processing of your data as part of the ZYXX partner program. If you purchase items or goods from a ZYXX partner at ZYXX, ZYXX will only transmit to the ZYXX partner the data listed above, which the ZYXX partner needs to fulfill its service to you, i.e. usually to deliver the goods you have purchased to you. If ZYXX transmits your data to a ZYXX partner for the reasons stated above, ZYXX will ensure in the contractual agreements with the partners that your data may only be processed by the ZYXX partner for the purposes stated above.

Please note that ZYXX partners have their own data protection regulations. These can generally be found on the respective partner pages of the ZYXX shop and/or on the websites of the respective ZYXX partner. ZYXX is not responsible for the privacy policies and data processing practices of ZYXX partners.

If you submit a product review on our platforms, we may share the content of your review (e.g., review text, star rating, chosen username) with the manufacturer or brand of the product you are reviewing. This occurs regardless of whether the product was sold directly by us or by a partner. The sharing of data enables the brands to analyze your feedback for quality management and product development, as well as to publish your review for their own marketing purposes (e.g., on their own website). Further processing of this data by the brand is their responsibility under data protection law.

 
10.4 Technical service providers
 
We work with technical service providers to provide our services to you. These service providers include, for example, Telekom Deutschland GmbH, Salesforce.com EMEA Ltd., and Amazon Web Services, Inc. If these service providers process your data outside the European Union, this may result in your data being transferred to a country with a lower data protection standard than those in the European Union. In these cases, ZYXX ensures that the service providers in question guarantee an equivalent level of data protection, either contractually or in another way.
 
10.5 Payment service providers
 
ZYXX offers various payment options, such as prepayment, payment by credit card, payment via PayPal and payment on account. For this purpose, payment data may be transferred to payment service providers with whom we work. For more information on the processing of personal data by payment service providers, please see their privacy policies:

• Adyen NV, Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, the Netherlands. For more information, please see Adyen's privacy policy.

• American Express Payment Services Limited, Frankfurt am Main branch, Theodor-Heuss-Allee 112, 60486 Frankfurt am Main. For more information, please see American Express Services Limited's privacy policy.

• Elavon Financial Services DAC, Germany branch, Lyoner Str. 36, 60528 Frankfurt am Main. For more information, please see Elavon's privacy policy.

• Worldpay BV Claude Debussylaan 16, 6th Floor, 1082 MD Amsterdam, the Netherlands. For more information see Worldpay’s privacy policy.

• iDeal at Deutsche Bank AG, branch in the Netherlands, De Entree 195, 1101 HE Amsterdam. For more information see Deutsche Bank’s privacy policy.

• Svea Payments Oy, Mechelininkatu 1a, 00180 Helsinki. For more information see Svea Payments Oy’s privacy policy.

• BS PayOne by PayOne GmbH, Lyoner Straße 9, 60528 Frankfurt am Main. For more information see PayOne GmbH’s privacy policy.

• PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. For more information see PayPal’s privacy policy.

• przelewy24 at PayPro Spólka Akcyjna, ul. Kanclerska 15, 60-327 Poznań and DialCom24 sp. z oo, ul. Kanclerska 15, 60-327 Poznań. For more information, see przelewy24's privacy policy.

• Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm. For more information, see Klarna Bank AB's privacy policy.

 
10.6 Credit agencies
 
Our collaboration with external credit agencies in fraud prevention, payment method selection, and credit checks is conducted on a country-specific basis to take into account country-specific characteristics and requirements. Under Country-Specific Information, you can find information about which countries we work with and which external payment service providers and credit agencies. There you may also find specific data protection notices that we provide to you on behalf of the respective payment service providers and credit agencies.
 
10.7 Debt collection service providers
 
Our collaboration with external debt collection service providers is country-specific, taking into account country-specific characteristics and requirements. You can find information about which countries we work with and which external debt collection service providers under Country-Specific Information. There you may also find specific data protection notices that we provide to you on behalf of the respective payment service providers and credit agencies.
 
10.8 Social media networks
 
As part of advertising campaigns, we pass on data to providers of social networks in accordance with data protection law.
 
10.9 Authorities and other third parties
 
If we are required to do so by an official decision or court order or for legal or criminal prosecution purposes, we will, if necessary, pass on your data to law enforcement authorities or other third parties.
 
10.10 Artificial Intelligence
 
We use providers of generative artificial intelligence to provide you with a better product offering and to personalize content for you. If these providers process your data outside the European Union, this may result in your data being transferred to a country with a lower data protection standard than those applicable within the EU. In these cases, ZYXX ensures that the service providers in question guarantee an equivalent level of data protection, either contractually or through other means.
 
10.11 Cooperation in competitions and promotions
 
If we run competitions and promotions in cooperation with other companies, the personal data collected as part of the competition or promotion may also be passed on to these companies, for example if this is necessary in connection with a competition in order to provide the prize.
 
11. What data protection rights do I have?
 
You have the following statutory data protection rights under the respective statutory requirements: Right to information (Article 15 GDPR), right to erasure (Article 17 GDPR), right to rectification (Article 16 GDPR), right to restriction of processing (Article 18 GDPR), right to data portability (Article 20 GDPR), right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), right to withdraw consent (Article 7 (3) GDPR) and the right to object to certain data processing measures (Article 21 GDPR). If you wish to assert your data protection rights, you can contact our data protection team at any time at datenschutz@zyxx.me. Further information can be found in the Contact section. With regard to the right to information and the right to erasure pursuant to Articles 15 and 17 GDPR, you can also request your file/data information or request the deletion of your account within your user account under the account setting "Request or delete data".

• To ensure that your data is not disclosed to third parties when requesting information, please enclose sufficient proof of identity with your request by email or post.

• You can change most of your details yourself in your customer account. For all other cases, please contact customer service.

• The responsibilities of the data protection authorities depend on the headquarters of the responsible body. You can also contact any data protection authority in any member state of the European Union, in particular the one in your place of residence, which will then forward your complaint to the appropriate authority. The lead authority responsible for ZYXX STREETWEAR is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany.

• If you have given your consent to the processing of your data, you can revoke it at any time. A revocation does not affect the legality of the processing of your data carried out before your revocation.

• You can object to the processing of your data for advertising purposes, including direct advertising (also in the form of data analyses), at any time without giving reasons.

• If we base the processing of your data on a balance of interests pursuant to Article 6 (1) (f) GDPR (e.g., reporting credit information to an external credit agency), you may object to the processing. If you object, we will ask you to explain the reasons why we should not process your data. If your objection is justified, we will examine the situation and either stop or adjust the processing or inform you of our compelling legitimate reasons for continuing the processing.

 
12. When will my data be deleted?
 
We will store your personal data for as long as it is necessary for the purposes stated in this data protection declaration, in particular to fulfill our contractual and legal obligations. We may also store your personal data for other purposes if or as long as the law allows us to continue storing it for specific purposes, including for the defense of legal claims.

If you close your customer account, we will delete all data stored about you. If complete deletion of your data is not possible or not required for legal reasons, the data in question will be blocked for further processing.

Blocking occurs, for example, in the following cases:

• Your order data and payment data and possibly other data are generally subject to various statutory retention periods, for example under the German Commercial Code (HGB) and the German Tax Code (AO). The law obliges us to store this data for tax audits and financial audits for up to ten years. Only then may we permanently delete the data in question.

• Even if your data is not subject to a statutory retention period, we can refrain from immediate deletion and initially block it instead in legally permitted cases. This applies in particular in cases where we may still need the data in question for the further processing of the contract or for legal prosecution or legal defense (e.g. in the case of complaints). The decisive criterion for the duration of the blocking is then the statutory limitation periods. After expiry of the relevant limitation periods, the data in question will be permanently deleted.

Your customer account will be deleted either if you inform us of your wish to delete it or if you have not made a purchase from us in the last 5 years and have not been active on your account for 13 months.

Deletion may be waived in cases permitted by law, provided that the data is anonymous or pseudonymized and deletion would make processing for scientific research purposes or statistical purposes impossible or would seriously impair it.

 
13. How does ZYXX protect my data?
 
Your personal data is transmitted securely using encryption. This applies to your order and your customer login. We use the SSL (Secure Socket Layer) encryption system. Furthermore, we protect our websites and other systems through technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons.
 
14. Changes to this Privacy Policy
 
As we continue to develop our websites and apps and implement new technologies to improve our service to you, changes to this privacy policy may become necessary. We therefore recommend that you review this privacy policy from time to time.
 
15. Contact person
 
You can contact our data protection team at any time at datenschutz@zyxx.me for general questions about data protection and the enforcement of your rights.
 
16. Service-specific information
 
Our data processing may vary from service to service. You can find out about service-specific variations here.
 
17. Country-specific information
 
Our data processing practices may vary from country to country. You can find out more about country-specific variations here.
 
17.1 Germany
 
Service providers for credit checks

The service provider for credit checks on consumers in Germany is CRIF GmbH, Leopoldstraße 244, 80802 Munich

Detailed data protection information from CRIF GmbH within the meaning of Article 14 GDPR, in particular information on the business purpose, the purposes of data storage, the data recipients, and your data protection rights vis-à-vis CRIF GmbH, can be found here: https://www.crif.de/datenschutz

Service providers for debt collection services

The service providers for debt collection services in Germany are:

• Alektum GmbH, Lloydstraße 4, 28217 Bremen

• Riverty Services GmbH, Gütersloher Straße 123, 33415 Verl

• PAIR Finance GmbH, Knesebeckstraße 62-63, D-10719 Berlin

 
17.2 Austria
 
Service providers for credit checks

The service provider for credit checks on consumers in Austria is CRIF GmbH, Leopoldstraße 244, 80802 Munich

Detailed data protection information from CRIF GmbH within the meaning of Article 14 GDPR, in particular information on the business purpose, the purposes of data storage, the data recipients, and your data protection rights vis-à-vis CRIF GmbH, can be found here: https://www.crif.de/datenschutz

Service providers for debt collection services

The service providers for debt collection services in Austria are:

• Alektum GmbH, Donau-City-Straße 6/15A1, 1220 Wien

• Riverty Services Austria GmbH, Karl-Popper-Straße 2/Top 6, 1100 Wien

• PAIR Collect GmbH, Postgasse 8b, A-1010 Wien

 
17.3 Switzerland
 
Credit check service provider

The credit check service provider for consumers in Switzerland is CRIF GmbH, Leopoldstrasse 244, 80802 Munich

Detailed data protection information from CRIF GmbH within the meaning of Article 14 GDPR, in particular information on the business purpose, the purposes of data storage, the data recipients, and your data protection rights vis-à-vis CRIF GmbH, can be found here: https://www.crif.de/datenschutz

Debt collection service providers

The debt collection service providers in Switzerland are:

• Alektum AG, Gubelstrasse 24, 6300 Zug

• Infoscore Inkasso AG, Ifangstrasse 8, 8952 Schlieren

• PAIR Finance Suisse GmbH, Tessinerplatz 7, 8002 Zürich

 
17.4 Netherlands
 
Service providers for debt collection services

The service providers for debt collection services in the Netherlands are:

• Alektum BV, Transformatorweg 98-6, 1014 AK Amsterdam

• PAIR Finance B.V., Vijzelstraat 68, 1017 HL Amsterdam

 
17.5 Belgium
 
Credit check service provider

The credit check service provider for consumers in Belgium is Focum Belgium BVBA, Nijverheidsstraat 70, 2160 Wommelgem

Debt collection service provider

The debt collection service providers in Belgium are:

• Alektum NV, Gaston Crommenlaan 4, 9050 Lederberg

• PAIR Finance BV, Vijzelstraat 68, 1017 HL Amsterdam NL

 
17.6 Sweden
 
Credit check service provider

The service provider for consumer credit checks in Sweden is Creditsafe i Sverige AB, Box 320, 401 25 Gothenburg

Debt collection service provider

The debt collection service providers in Sweden are:

• Alektum Group AB, Nils Ericsonsgatan 17, Box 111 08, 404 23 Göteborg

• PAIR Finance Sweden AB, Vasagatan 12, 111 20 Stockholm

 
17.7 Norway
 
Credit check service provider

The service provider for consumer credit checks in Norway is Experian AS, Karenslyst Alle 8 B, PO Box 5275 Majorstuen, 0303 Oslo

Debt collection service provider

The service providers for debt collection services in Norway are:

• Alektum AS, Grev Wedels plass 9, Postboks 2077 Vika, 0125 Oslo

• Lowell Norge AS, Postboks 6354, Etterstad, 0604 Oslo

 
17.8 Finland
 
Credit check service providers

The service provider for consumer credit checks in Finland is Suomen Asiakastieto Oy, Työpajankatu 10 A, 00580 Helsinki

Debt collection service providers

The debt collection service providers in Finland are:

• Credit Visor Oy, PL 104, 00101 Helsinki

• Lowell Suomi Oy, PL 20, 20101 Turku

 
17.9 France
 
Service providers for debt collection services

The service providers for debt collection services in France are:

• PAIR Finance GmbH, Knesebeckstraße 62-63, D-10719 Berlin DE

• INTRUM Corporate,104 avenue Albert 1er, CS 30131, 92563 Rueil-Malmaison

 
17.10 Denmark
 
Service providers for debt collection services

The service providers for debt collection services in Denmark are:

• Alektum A/S, Frederiks plads 36, 3, 8000 Århus

• Lowell Danmark A/S, Langmarksvej 57D, 8700 Horsens

 
17.11 Italy
 
Service providers for debt collection services

The service providers for debt collection services in Italy are:

• Nivi S.p.A., Via Odorico da Pordenone 20, 50127 Firenze

• Intrum Italy S.p.A., Bastioni di Porta Nuova 19, 20121 Milano

• PAIR Finance GmbH, Knesebeckstraße 62-63, 10719 Berlin DE

 
17.12 Spanien
 
In Spain, our customers can participate in a refer-a-friend promotion (the Promotion) to receive gift cards and rewards in accordance with the general terms and conditions of the Promotion. To benefit from this offer, you must share a unique referral link with your friend. If your friends decide to participate in the Promotion and click on the referral link, they will be asked to register with their email address. They will then receive a link via email to create an account.

In order to identify the new customer as your friend and to ensure that both customers meet the requirements of the Promotion, the following personal data will be processed:

• First name Last name and

• Email address and

• Postal address

Legal basis: The legal basis for processing your data to send the gift cards and rewards in accordance with the terms and conditions of the Promotion is Article 6(1) b of the GDPR. Otherwise, the data processing is based on Article 6(1) of the GDPR, which means our legitimate interests coincide with the purposes set out above.

 
17.13 Poland
 
Credit check service providers

The service providers for checking the customer's solvency in Poland are CRIF Sp. z oo, ul. Lublańska 38, 31-476 Kraków and Krajowe Biuro Informacji Gospodarczej SA, ul. Lublańska 38, 31-476 Kraków

Debt collection service providers

The service providers for debt collection services in Poland are:

• Alektum Sp. z o.o., Gen. Józefa Bema 2, 50-264 Wrocław

• Intrum Sp. z o.o., Domaniewska 48, 02-672 Warszawa

• PAIR Finance Poland sp. z o.o., ul. Waryńskiego 3A, 00-645 Warszawa

 
17.14 Luxembourg
 
Service providers for debt collection services

The service providers for debt collection services in Luxembourg are:

• PAIR Finance BV, Vijzelstraat 68, 1017 HL Amsterdam NL

 
18. Notes on cookies
 
Here you can find out which cookies we use. You can find an overview of all cookies used here.