Data protection statement of FALKE KGaA

We at FALKE KGaA are delighted that you have visited our website and have shown interest in our company and products. We place great value on the protection of your personal data. Your data is captured in accordance with the statutory regulations. In the following, we explain which information FALKE KGaA captures during your visit to our website and how this information is used.

1. Privacy Policy Object

This Privacy Policy applies to the collection, processing and use (hereafter collectively referred to as "use") of your personal data when visiting our Internet pages and using our online shop and its related offers (e.g., newsletters). Personal data (hereafter referred to as "data") is individual information about the personal or material circumstances of an identified or identifiable natural person, e.g., name, address, email address, date of birth or bank details.

Collection and Storage of Personal Data

We will collect personal data if you provide it to us, e.g., when you contact us. We will only use personal data transmitted to us this way for the purpose for which you provide this personal data to us when contacting us.

Such information will expressly be provided voluntarily and with your consent. For information about communications channels (e.g., your email address or telephone number), you also agree to allow us to contact you through these communication channels to answer your request.
You may revoke your declaration of consent at any time with future effect. To do so, please contact our data protection officer whose contact details are provided below.If you are a customer or registered user of this Internet page, the IP address assigned to your device will be saved until your registration is completed. The same applies if you purchased a product from our online shop. The date and the IP address from which the order was placed will be saved for as long as you are a registered user of our website.The same applies when subscribing to our email newsletter for which the IP address used when subscribing will also be saved. Personal data will only be collected and saved for using our offers if provided by you through our contact form. If the usage purpose no longer applies, the data will be deleted.When placing an order or creating a customer account, the following data will be especially collected:

  • Title
  • Name, first name, date of birth
  • Address
  • Email address
  • Telephone number, if applicable

When placing an order, payment details such as bank details or credit card number will also be collected if applicable.

Use of Personal Data

All personal data will, without separate consent, only be used for the execution of the respective service. The data will be collected and saved by us to the extent required for performing the contractual service. If we deliver goods to you, we will forward your data to the commissioned shipping company if required for the delivery. Further use will require your consent. Your payment details will be provided to the respective payment service provider based on the payment method you selected. The payment service provider will be responsible for your payment data.
In addition, we collect personal data mechanically and process such data automatically for the purposes of the respective orders. For this, the data may also be transferred to a data service center or to one of our affiliates for further processing. If we commission external service providers to process your data, these service providers will have been diligently selected, commissioned through a written agreement and bound to our directives. These service providers will not provide the data to third parties, but will delete the data after completion of the order and the expiration of legal storage periods, unless you consented to further storage.Without your consent, the collected data will not be used for advertising or market or opinion research purposes. If you would like to receive our newsletter, we will need a valid email address and information that allows us to verify that you are the owner of the provided email address or that its owner agreed to receive our newsletter. Any consent to the storage of one's data or email address or use for receipt of our newsletter may be revoked at any time.If data is requested for the fulfillment of legal requirements (e.g., litigation), we will disclose your data to the competent authorities.
Encryptions convert a "clear text," i.e., a clearly readable text, into a "secret text," i.e., an indecipherable character sequence. To prevent unauthorized third-party access, the personal data you provided during registration or when contacting us will be encrypted (SSL -Secure Sockets Layer-) through a separate VPN gateway and thereby transmitted from the website to our company securely.
If you use embedded social media plugins (e.g., the "Like" or "g+1" button), the privacy policies of the respective plugin providers (e.g., Facebook, Google or Instagram) will apply additionally. Please see below for further information.

2. General information on data processing

1) Scope of the processing of personal data

In principle, we process the personal data of our users only insofar as this is required to provide a functioning website as well as our content and services. The processing of the personal data of our users takes place regularly only with the consent of the user. An exception to this applies in such cases where the obtaining of such consent is not possible for real reasons and the processing of data is permitted by statutory regulations.

2) Legal basis for processing personal data

If we ask a data subject for consent to use their personal data for processing operations, Article 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When it is required that we process personal data to fulfil a contract to which the data subject is a party, Article 6(1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are required to carry out pre-contractual measures.

If we are required to process personal data to fulfil a legal obligation to which our company is subject, Article 6(1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1) lit. d GDPR serves as the legal basis.

If processing is required to safeguard a legitimate interest of our company or a third-party and the interests, constitutional rights and fundamental freedoms of the data subject do not outweigh the first-named interest, Article 6(1) lit. f GDPR serves as the legal basis for the processing.

3) Erasure of data and duration of storage

The personal data of the data subject is erased or blocked as soon there is no longer a purpose for storage. Storage can take place beyond this if it is provided for by Union law directives, laws or other regulations by European or national legislators to which the controller is subject. Data is also blocked or erased if a retention period prescribed by the standards mentioned expires, unless there exists a requirement for further storage of the data for the conclusion of a contract or the performance of a contract.

3. Provider identification

The service provider within the meaning of Section 13 German Teleservices Act (Telemediengesetz) and the data controller within the meaning of the German Federal Data Protection Act (Bundesdatenschutzgesetzes) is FALKE KGaA, Oststraße 5, 57392 Schmallenberg, Germany. More detailed information can be obtained from our Imprint webpage.

If you have any questions about this data protection statement, please contact us by email at datenschutz@FALKE.com.

4. Provision of website and generation of log files

1) Use of our websites for information purposes

If you visit our website purely for information purposes, i.e. if you transmit no personal information to us and/or do not register to use our online shop, we collect only such data that is sent to us automatically by your web browser. This is:

  • Date and time of access

  • Timezone difference to Greenwich Mean Time (GMT)

  • Content of request (concrete website)

  • Access status/HTTP status code

  • The amount of data transferred in each case

  • Website from which the request comes

  • The last website visited

  • Operating system used

  • Information about the browser type

  • Browser settings

  • Language and version of browser software

  • User’s IP address

The log files contain IP addresses or other data that enable an association with a user. For example, this could be the case if the link to the website from which the user accesses the website or the link to the website to which the user changes contains personal data.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2) Legal basis for the data processing

The legal basis for the temporary storage of data and the log files is Article 6(1) lit. f GDPR.

3) Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. The user’s IP address must be stored for the duration of the session.

The storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our IT systems.

These purposes include our legitimate interest in the data processing pursuant to Article 6(1) lit. f GDPR.

4) Duration of storage

The data is erased as soon as it is no longer required to achieve the purpose of its collection. This happens when the particular session has ended, in the event of data being captured for the provision of the website.

When data is stored in log files, it happens after seven days at the latest. It is possible for data to be stored beyond this point. In this instance, the IP addresses of the users are erased or anonymised, so that an association with the accessing client is no longer possible.

5) Possibility of objection and removal

The capture of data for the provision of the website and the storage of data in log files is absolute necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

5. Registration

1) Description and scope of data processing

On our website, we offer users the opportunity to register by entering their personal data. The data is entered into an input mask, transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

  • User’s IP address
  • Date and time of registration
  • First name, surname
  • Email address
  • Access authorisation
The user’s consent to process this data is obtained as part of the registration process.

2) Legal basis for the data processing

The legal basis for the processing of data is the presence of consent by the user pursuant to of Article 6(1) lit. a GDPR.

3. Purpose of processing

The user’s registration is required to provide certain content and services on our website.

4. Duration of storage

The data is erased as soon as it is no longer required to achieve the purpose of its collection.

This is the case for data collected during the registration process if the registration on our website is cancelled or amended.

5. Possibility of objection and removal

As the user, you have the option of cancelling the registration at any time. You can have the stored data that concerns you amended at any time.

6. Use of our online shop

If you would like to use our online shop, we require the use of further data.

1. Data for order processing

If you would like to use services in our online shop, it is necessary that you give us the data that is required to process the order. You have the choice of entering the necessary data just for a particular order or you can set up a customer account, where your data is stored for later purchases.

If you do not set up a customer account, we store your data for the purpose of performing the contract and erase it as soon as we are no longer legally obliged to retain it. Information required for the execution of the contracts is marked separately. Any further information is voluntary.

If you create a customer account or revise data you have already entered, the data you entered will be saved revocably in your account settings and can be used for further orders without you having to enter it again. Your customer account can be deleted at any time by sending a request to the data controller (online@burlington.de).

Your data is used for the purpose of processing your order if you have set up a customer account in our online shop and also to facilitate further orders. To prevent unauthorised access by third parties to your personal data, the order process is encrypted using SSL technology.

To deliver your goods, we pass on your address details to a shipping company contracted by us.

For the processing of payments, we pass on the required data to the payment service provider you have selected. We collaborate with the following payment service providers: American Express, Mastercard, Visa, PayPal, Amazon Pay, Sofort GmbH and iDeal. The payment service provider you select is responsible for your payment data in each case.

All service providers or associated companies involved in processing an order are also bound by the regulations of the German Federal Data Protection Act and other regulations and act exclusively on the instruction of FALKE KGaA.

2. Credit check

To protect ourselves from non-payment, while also being able to offer our customers the best possible options for the choice of payment method in our online shop, we transmit your data (name, address and, if required, date of birth) for the purpose of a credit check, obtaining information for assessing the risk of non-payment, based on a statistical process using address details and for the verification of your address (verification of deliverability) to infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, informa Solutions GmbH, Rheinstraße 99, 76532 Baden-Baden and/or BFS finance Münster GmbH, Hölten-weg 33, 48155 Munster. We use the information received about the statistical probability of non-payment to make a balanced decision about the establishment, implementation or termination of the contractual relationship. The legal basis for these transmissions is Article 6(1)(b) and Article 6(1)(f) GDPR. Data may only be transmitted based on these provisions to the extent that the data is necessary for safeguarding the legitimate interests of our company or third parties and does not override the interests of fundamental rights and freedoms of the data subject requiring protection of their personal data. Your interest requiring protection are considered in accordance with this statutory provision. Detailed information on ICD within the meaning of Article 14 European General Data Protection Regulation (“EU GDPR”), i.e. information on the business purpose, purposes of data storage, data recipients, right to access personal data, right to demand erasure or rectification etc. can be found in the appendix or at the following link: https://finance.arvato.com/icdinfoblatt.

By confirming this check box and clicking on the “Payment” button, you consent to FALKE obtaining information about your payment history and your creditworthiness based on statistical processes using your address details for the purpose of a credit check and, to do so, transmitting the customer data necessary (name, address, date of birth, email address, telephone and, if required, bank details) to infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, informa Solutions GmbH, Rheinstraße 99, 76532 Baden-Baden and/or BFS finance Münster GmbH, Höltenweg 33, 48155 Munster. Under consideration of this customer data as well as the information received about the statistical probability of non-payment, a balanced decision is made with regard to which payment options may be granted to you.

This data is collected again every time you make a purchase. I am aware that this consent is voluntary and I can refuse or withdraw it at any time by sending an email to datenschutz@FALKE.com. I am also aware that, in this instance, the “Pay now” payment method is the only payment option open to me. You will also find the process described in our data protection statement. “In the event that you do not agree with the collection of credit information as described in this clause, you can object or withdraw consent to the collection of this data at any time by sending an email to datenschutz@FALKE.com. However, please note that, in this instance, we can only offer you the “Pay now” payment method.

3. User account

You can also take advantage of our online offers by using a profile. This profile consists of a username and password (pseudonym). 
Please be sure to keep your password secret to prevent misuse and, in your own interest, keep your data up-to-date. You are responsible for all transactions that are initiated under your username on the basis of your actions. Setting up a profile is entirely voluntary. It serves the sole purpose of making it easier for you to use our offers and to individually design and continuously improve our offers. We use your profile data only to process orders, to provide additional services commissioned by you and to process payments. If you have not otherwise given us your consent to be able to inform you about other offers, we will only communicate with you by telephone or e-mail for the stated purposes. We will erase your profile data if you inform us that the profile should be erased, provided that we are not obliged or entitled to continue to store the data under applicable law.

4. Server log files

The provider (or its web space provider) collects data on every access to the offer (server log files). The access data includes:

  • Name of the accessed website,
  • date and time of access,
  • data volume transmitted,
  • confirmation of successful retrieval of data,
  • browser type and version,
  • user’s operating system,
  • referrer URL (webpage that sent user to the site),
  • IP address and the requesting provider.
The provider uses protocol data only for statistical evaluation for operating, security and offer optimisation purposes. However, the provider reserves the right to check the pro