Data Protection

Privacy Policy

The data controller for the purposes of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Redoute Bonn GmbH

Managing Directors: Christoph von Borries, Dr. Rudolf von Borries

Kurfürstenallee 1
53177 Bonn

Tel.: +49 228 688 988 0
Fax: +49 228 688 988 99

Email: datenschutz@redoute-bonn.de

Purposes of data processing

We process your personal data only for the purposes stated in this privacy policy.

When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, information about the browser type and version used, the operating system used, the user's internet service provider, the date and time of access, the user's IP address, and similar data.

The data is also stored in our system's log files. This data is not stored together with any other personal data of the user.

This information is technically necessary in order to correctly deliver website content requested by you and is strictly required when using the internet. In particular, it is processed for the following purposes:

  • Ensuring trouble-free website connection establishment,
  • Ensuring smooth use of our website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR.

We do not use your data to draw conclusions about your identity. As a general rule, the only recipients of the data are any data processors we may have engaged.

We only pass on your personal data to third parties in individual cases if:

  • you have given your explicit consent to this, ,
  • processing is necessary for the performance of a contract with you,
  • processing is necessary for compliance with a legal obligation or for the performance of pre-contractual measures,
  • processing is necessary for the purposes of the legitimate interests pursued and there is no reason to assume that you have an overriding interest requiring the protection of your data that prevents disclosure.

Article 6(1)(b) GDPR, Article 6(1)(c) GDPR or Article 6(1)(c) GDPR serve as the legal basis for the aforementioned processing operations.

Biscuits

Some of the internet pages use so-called cookies. Cookies do not harm your computer and contain no viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are what are known as “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

Cookies that are necessary for the electronic communication process or to provide certain functions requested by you are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.

Instagram Feed (Flockler)

On our website, we embed content from the social network Instagram via the „Flockler“ service.

When our pages are accessed, this content is initially blocked. A connection to Flockler's servers and to Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is only established once you actively click on „Unblock content“.

In the process, personal data (e.g. your IP address) may be transmitted to these services. It cannot be ruled out that data may also be transferred to servers belonging to Meta Platforms Inc. in the USA.

The integration is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) GDPR and Section 25 TTDSG.

You can withdraw your consent at any time via the cookie settings.

Further information:
flockler.com/privacy-policy
privacycenter.instagram.com

Use of Borlabs Cookie

We use the consent management tool „Borlabs Cookie“ to store and manage your consent for the use of cookies and comparable technologies.
The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

Borlabs Cookie stores your chosen settings (e.g. consents, language and time of decision) locally in a cookie in your browser so that they can be taken into account for future page views.

Processing is carried out to fulfil our legal obligation to obtain and document consent in accordance with Article 6(1)(c) of the GDPR and Section 25 of the TTDSG.

You can adjust or withdraw your consent at any time via the cookie settings on our website.

For further information, please visit:
de.borlabs.io/borlabs-cookie

Contact form

If you contact us by email or via our contact form regarding any kind of questions, the data entered in the input mask will be transmitted to us and stored. You grant us your voluntary consent for the purpose of getting in touch. Providing a valid email address is required for this. This serves the purpose of assigning the enquiry and subsequently answering it. Mandatory fields are marked with an asterisk (*). The provision of further data is optional. The information provided by you will be stored for the purpose of processing the enquiry as well as for potential follow-up questions.

The legal basis for the processing of your data is Art. 6 (1) (a) GDPR. You may revoke your consent at any time. An informal notification by e-mail to us is sufficient for this purpose. The lawfulness of the data processing operations carried out prior to the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent for storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Newsletter

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected, or it is collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke the consent you have given to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the „unsubscribe“ link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you have cancelled the newsletter. Data stored by us for other purposes (e.g. email addresses for the member area) shall remain unaffected by this.

CleverReach

This website uses CleverReach for sending out newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service with which newsletter distribution can be organised and analysed. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on CleverReach's servers in Germany or Ireland.

Our newsletters sent via CleverReach enable us to analyse the behaviour of newsletter recipients. Among other things, this makes it possible to analyse how many recipients have opened the newsletter message and how often specific links in the newsletter were clicked. With the aid of so-called conversion tracking, it is also possible to analyse whether a predefined action (e.g. the purchase of a product on our website) took place after clicking the link in the newsletter. Further information on data analysis by CleverReach newsletters is available at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the revocation.

If you do not want analysis by CleverReach, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and the servers of CleverReach after you have unsubscribed. Data stored by us for other purposes (e.g. email addresses for the member area) shall remain unaffected by this.

Further details can be found in CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Userlike Chat

La Redoute uses a live chat provided by the company Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Köln, Germany. You can use the live chat like a contact form to chat with our staff in almost real time. When starting the chat, the following personal data is processed [to be adapted depending on widget settings]:
– date and time of the request,
– Browser type / version,
– IP address,
– operating system used,
– URL of the previously visited webpage,
– Amount of data sent.
– And if provided: first name, last name, and email address.

Depending on the course of the conversation with our staff, further personal data may be generated in the chat which are entered by you. The type of this data depends heavily on your query or the problem you describe to us.

All our employees have been and continue to be trained on the subject of data protection and instructed in the secure and trustworthy handling of customer data. All our employees are bound to confidentiality and have accordingly signed an addendum to their employment contracts regarding the obligation to maintain confidentiality and observe data protection.

By accessing the website https://redoute-bonn.de/, the chat widget is loaded as a JavaScript file from AWS CloudFront. Technically, the chat widget represents the source code that runs on your computer and enables the chat.

Furthermore, La Redoute stores the history of live chats. This serves the purpose of potentially sparing you from having to provide extensive explanations regarding the history of your enquiry, as well as for the continuous quality control of our live chat service. Processing is therefore permitted in accordance with Art. 6 (1) (f) GDPR. Should you not wish for this, please feel free to inform us using the contact details listed further below. Stored live chats will then be deleted by us without delay.

The storage of the chat data also serves the purpose of ensuring the security of our information technology systems. This simultaneously constitutes our legitimate interest, which is why the processing is permissible pursuant to Article 6(1)(f) of the GDPR. Furthermore, the legal basis for the processing of the data provided in the chat is Article 6(1)(b) and (f) of the GDPR.

Further information can be found in the Userlike privacy policy UG (haftungsbeschränkt).

Conclusion of a data processing agreement

We have concluded a data processing agreement with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Deletion of data

We store your personal data only for as long as is necessary to achieve the purposes stated here or as provided for by the various retention periods stipulated by the law. Once the respective purpose ceases to apply or these periods expire, the corresponding data is routinely deleted or its processing restricted in accordance with the statutory regulations.

Your data protection rights

Insofar as we process personal data about you in the context of our website, you generally have the following rights under the GDPR, subject to the respective prerequisites:

  • Information about your personal data stored by us and its processing,
  • Rectification of inaccurate personal data,
  • Erasure of your personal data stored by us,
  • Restriction of data processing, provided we are not yet allowed to delete your data due to legal obligations,
  • Data portability, provided that you have consented to data processing or have concluded a contract with us.

If you have given us consent, you can revoke it at any time with effect for the future. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can contact the supervisory authority responsible for you with a complaint at any time. Your competent supervisory authority depends on the federal state in which you reside, work, or in which the alleged infringement took place.

Information on the right to object pursuant to Article 21 of the General Data Protection Regulation (GDPR)

Right to object on a case-by-case basis

You have

Right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests). This also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR.

If an objection is lodged, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

2. Right to object to processing of data for direct marketing purposes

In individual cases, we process personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. 

If you object to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.

The assertion of the aforementioned data subject rights can be made informally and should be directed to: datenschutz@redoute-bonn.de

Google reCAPTCHA

We use the service „reCAPTCHA“ provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website.

The integration of reCAPTCHA takes place exclusively upon your consent via our consent management tool.

A connection to Google's servers will only be established after your consent. In the process, personal data (e.g. IP address, browser information and interactions) may be transmitted to Google. Processing may also take place on servers in the USA.

Processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 TTDSG.

Further information:
https://policies.google.com/privacy

Google Ads and conversion tracking

This website uses Google Ads. Usage is exclusively subject to your consent.

Following your consent, Google may set cookies and process personal data to measure the effectiveness of advertisements.

In the process, data such as IP address, browser information and interactions may be processed and transferred to Google servers. Processing may also take place in the USA.

Processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 TTDSG.

You can withdraw your consent at any time via the cookie settings.

Further information:
https://policies.google.com/privacy

Automated decision-making

This website does not use automated decision-making including profiling pursuant to Article 22 GDPR.

Update to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your subsequent visit.

Data protection enquiries

If you have any questions about data protection, please send us an email or contact us directly at

Tel.: +49 228 688 988 0

Email: datenschutz@redoute-bonn.de

This privacy policy was created with the data protection generator of eRecht24 (version 1.0.0 dated 12.02.2018) and the Generated by the activeMind AG privacy policy generator.

© Redoute Bonn GmbH