Data Protection

A. Privacy Policy for the Use of This Website

1. Name and Contact Details of the Controller and the Data Protection Officer

These privacy notices apply to data processing by:

Controller: Sassa Mode GmbH
legally represented by the managing directors: Alexander Kerschbaumer, Michael van Snek, Remco Vermeij
Mauchentalstraße 71, 72574 Bad Urach, Germany
Email: info@sassamode.com
Phone: +49 (0)7125/1441-0
Fax: +49 (0)7125/1441-86

Data Protection Officer: Nathan Binkowski
Address: c/o Mauchentalstraße 71, 72574 Bad Urach, Germany
Email: binkowski@suedwesttextil-service.de

2. Collection and Storage of Personal Data and the Nature and Purpose of Their Use

a) When Visiting the Website

When you access our website www.sassa.eu, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access was made (referrer URL)
Browser used and, if applicable, the operating system of your computer and the name of your access provider

The data mentioned above is processed by us for the following purposes:

Ensuring a smooth connection to the website
Ensuring comfortable use of our website
Evaluating system security and stability
Further administrative purposes

The legal basis for data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. Further explanations can be found under sections 4 and 5 of this privacy policy.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request

This data cannot be attributed to specific individuals. This data is not merged with other data sources. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.

b) When Using Our Contact Form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. A valid email address is required so that we know who the request is from and can respond to it. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out pursuant to Art. 6(1)(1)(a) GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after the request submitted by you has been dealt with.

3. Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only share your personal data with third parties if:

You have given your express consent pursuant to Art. 6(1)(1)(a) GDPR,
the disclosure is necessary pursuant to Art. 6(1)(1)(f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
there is a legal obligation for the disclosure pursuant to Art. 6(1)(1)(c) GDPR, and
this is legally permissible and necessary pursuant to Art. 6(1)(1)(b) GDPR for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our website. These are small text files that make it possible to store specific, user-related information on the user's device while they use the website.

Cookies make it possible, in particular, to determine the frequency of use and the number of users of the pages, to analyse behaviour in the use of the pages, and also to make our offering more user-friendly. Cookies remain stored after the end of a browser session and can be retrieved when you visit the page again. If you do not wish this, you should set your internet browser to refuse the acceptance of cookies.

Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software. Information is stored in the cookie that arises in each case in connection with the specific device used. This does not, however, mean that we thereby gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offering more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are deleted automatically after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your device for a specific defined period. If you visit our site again to use our services, it is automatically recognised that you have already been with us and what inputs and settings you have made, so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you (see section 5). These cookies enable us to automatically recognise that you have already visited us when you visit our site again. These cookies are automatically deleted after a defined period of time.

The data processed through cookies are necessary for the purposes mentioned in order to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(1)(f) GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that a notice always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all the features of our website.

5. Analysis Tools / Plug-ins

a) Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6(1)(1)(f) GDPR.

With the tracking measures used, we want to ensure a needs-based design and the ongoing optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you.

These interests are to be considered as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

aa) Google Analytics

For the purpose of needs-based design and ongoing optimisation of our pages, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google").

In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as:

Browser type/version,
Operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of the server request

are transmitted to a Google server in the USA and stored there. The information is used to:

evaluate the use of the website,
compile reports on website activity, and
provide further services associated with website use and internet use for the purposes of market research and the needs-based design of these internet pages.

This information may also be transferred to third parties where required by law or where third parties process this data on our behalf. Your IP address will never be merged with other data from Google. IP addresses are anonymised so that attribution is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all the features of this website in full.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be set which prevents the future collection of your data when you visit this website.

The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help:
https://support.google.com/analytics/answer/6004245?hl=de

ab) Google AdWords Conversion Tracking

To statistically record the use of our website and to evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking.

A cookie (see section 4) is set by Google AdWords on your computer if you have reached our website via a Google advertisement.

These cookies expire after 30 days and are not used for personal identification.

If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to that page.

ac) Google Maps

Our website uses the Google Maps product from Google.

By using this website, you consent to the collection, processing and use of automatically collected data by Google Inc., its representatives and third parties.

The terms of use for Google Maps can be found at:
Google Maps Terms of Use

6. Social Media Plug-ins

We use social plug-ins from social networks on our website on the basis of Art. 6(1)(1)(f) GDPR in order to make our company better known through them.

The underlying promotional purpose is to be considered a legitimate interest within the meaning of the GDPR.

Responsibility for ensuring that operations are compliant with data protection law lies with the respective provider.

We integrate these plug-ins using the so-called two-click method in order to best protect visitors to our website.

a) Facebook

Social media plug-ins from Facebook are used on our website to make it more personal. We may use the "LIKE" or "SHARE" button for this purpose. This is a service offered by Facebook.

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Facebook's servers. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the webpage.

Through the integration of the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website – even if you do not have a Facebook account or are not currently logged in to Facebook.

This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account.

If you interact with the plug-ins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to:

evaluate your use of our website with regard to the advertisements displayed to you on Facebook,
inform other Facebook users about your activities on our website, and
provide further services associated with the use of Facebook.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and settings options for protecting your privacy, please refer to Facebook's privacy policy:
https://www.facebook.com/privacy/policy

b) Instagram

Our website uses so-called social plug-ins ("plug-ins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

The plug-ins are identified by an Instagram logo, for example in the form of an "Instagram camera".

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Instagram's servers. The content of the plug-in is transmitted directly from Instagram to your browser and integrated into the page.

Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website – even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account.

If you interact with the plug-ins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed to your contacts there.

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and settings options for protecting your privacy, please refer to Instagram's privacy policy:
https://privacycenter.instagram.com/policy

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website.

You can also completely prevent the loading of Instagram plug-ins using appropriate add-ons for your browser.

c) Pinterest

Our website uses so-called social plug-ins ("plug-ins") from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest").

The plug-ins are recognisable, for example, by buttons with the label "Pin it" on a white or red background.

An overview of the Pinterest plug-ins and their appearance can be found here:
https://developers.pinterest.com/docs/getting-started/introduction/

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Pinterest's servers. The content of the plug-in is transmitted directly from Pinterest to your browser and integrated into the page.

Through this integration, Pinterest receives the information that your browser has accessed the corresponding page of our website – even if you do not have a Pinterest profile or are not currently logged in to Pinterest.

This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.

If you are logged in to Pinterest, Pinterest can directly associate your visit to our website with your Pinterest profile.

If you interact with the plug-ins, for example by clicking the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed to your contacts there.

For the purpose and scope of data collection and the further processing and use of data by Pinterest, as well as your related rights and settings options for protecting your privacy, please refer to Pinterest's privacy policy:
https://policy.pinterest.com/de/privacy-policy

If you do not want Pinterest to directly associate the data collected via our website with your Pinterest profile, you must log out of Pinterest before visiting our website.

You can also completely prevent the loading of Pinterest plug-ins using appropriate add-ons for your browser.

7. Rights of Data Subjects

You have the right:

pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (if not collected by us), and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
pursuant to Art. 16 GDPR to demand the immediate rectification of inaccurate or completion of your personal data stored by us;
pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
pursuant to Art. 7(3) GDPR to withdraw your consent given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or of our registered office.

8. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, to the extent that there are grounds relating to your particular situation or the objection is directed against direct marketing.

In the latter case, you have a general right to object which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, an email to the following address is sufficient:
shop@sassamode.com

9. Data Security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or padlock symbol in the lower status bar of your browser.

Our security measures are continuously improved in line with technological developments.

B. Data Protection in the Context of Contractual Relationships

We collect, process and use personal data in the context of a contractual relationship only to the extent permitted or required by the EU General Data Protection Regulation (GDPR), the BDSG (Federal Data Protection Act) or another legal provision, or where you have given your consent.

Notice on Data Processing

1. Name and Contact Details of the Controller and the Data Protection Officer

Controller: Sassa Mode GmbH
legally represented by the managing directors: Alexander Kerschbaumer, Michael van Snek, Remco Vermeij

Mauchentalstraße 71, 72574 Bad Urach, Germany

Email: info@sassamode.com
Phone: +49 (0)7125/1441-0
Fax: +49 (0)7125/1441-85

Data Protection Officer: Nathan Binkowski
Address: c/o Mauchentalstraße 71, 72574 Bad Urach, Germany
Email: binkowski@suedwesttextil-service.de

2. Collection and Storage of Personal Data and the Nature and Purpose of Their Use

When you place an order with us, we collect the following information:

Salutation, first name, last name
A valid email address
Address
Telephone number (landline and/or mobile)
Information necessary for the execution of the order

The collection of this data is carried out:

to identify you as our customer,
to be able to advise you appropriately,
for correspondence with you,
for invoicing purposes,
to handle any liability claims that may arise and to assert any claims against you.

The data processing is carried out at your request and is necessary pursuant to Art. 6(1)(1)(b) GDPR for the stated purposes for the appropriate handling of the order and for the mutual fulfilment of obligations under the contract.

The personal data collected by us for the purpose of placing an order will be stored pursuant to Art. 6(1)(1)(c) GDPR until the expiry of the statutory retention obligations (under the HGB, StGB or AO) and then deleted, unless you have consented to storage beyond this period pursuant to Art. 6(1)(1)(a) GDPR.

3. Disclosure of Data to Third Parties

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only share your personal data with third parties if:

You have given your express consent pursuant to Art. 6(1)(1)(a) GDPR,
the disclosure is necessary pursuant to Art. 6(1)(1)(f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
there is a legal obligation for the disclosure pursuant to Art. 6(1)(1)(c) GDPR, and
this is legally permissible and necessary pursuant to Art. 6(1)(1)(b) GDPR for the processing of contractual relationships with you.

a) Transport Service Providers

The personal data collected by us will be passed on to the transport company commissioned for delivery as part of the processing of the contract, to the extent necessary for the delivery of the goods.

b) Credit Institutions

We pass on your payment data to the commissioned credit institution in the context of processing payments.

c) PayPal

If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal, we will pass on your payment data to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" via PayPal. PayPal uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method.

The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, are incorporated into the calculation of the score values.

For further data protection information, including information on the credit agencies used, please refer to PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

d) Klarna

If you choose a payment method as part of the Klarna checkout, payment processing is carried out by the payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

You can read about the collection and processing of your personal data by Klarna for the purpose of payment processing in Klarna's privacy policy at the following link:
Klarna Privacy Policy

Our checkout solution is provided by Klarna (Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden) and uses cookies to provide you with an ideal, personalised online experience when using the Klarna checkout.

A detailed list of the cookies and an explanation of their respective purposes can be found at:
Klarna Cookie Policy

e) Social Plug-ins

We use social plug-ins from social networks on our website on the basis of Art. 6(1)(1)(f) GDPR in order to make our company better known through them.

The underlying promotional purpose is to be considered a legitimate interest within the meaning of the GDPR.

Responsibility for ensuring that operations are compliant with data protection law lies with the respective provider.

We integrate these plug-ins using the so-called two-click method in order to best protect visitors to our website.

4. Links to External Websites (Facebook, Instagram and Pinterest)

In our email communication with you, links to Facebook and YouTube are used which contain information and offers from our company.

On our website www.sassamode.com, under the "Data Protection" section, you can find information on the purpose and scope of data collection as well as the further processing and use of data by Facebook and YouTube, as well as your related rights and settings options for protecting your privacy.

There you will also find further information and the privacy notices of Facebook, Instagram and Pinterest.

5. Rights of Data Subjects

You have the right:

pursuant to Art. 7(3) GDPR to withdraw your consent given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data (if not collected by us), and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
pursuant to Art. 16 GDPR to demand the immediate rectification of inaccurate or completion of your personal data stored by us;
pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or of our registered office.

6. Right to Object

If you wish to exercise your right to object, an email to the following address is sufficient:
info@sassamode.com

C. Currency and Amendments to This Privacy Policy

This privacy policy is currently valid and was last updated on 26 April 2018.

As a result of the further development of our website and offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.

The current version of the privacy policy can be accessed and printed at any time on the website www.sassa.eu under the "Data Protection" section.