Data Protection

Introduction

This website is operated by her1 GmbH, Oranienstraße 185, 10999 Berlin. The protection of your personal data is very important to us. We take this issue seriously and therefore inform you in the following about the handling of your personal data. 

Insofar as we collect, manage, process or use personal data from you in the context of the order processes required for purchase, this is done only within the framework of German and European data protection law.


Data collection and usage

a) Personal data

The term personal data is defined in the Federal Data Protection Act as the individual information about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your civil name, your address, your telephone number, or your date of birth. 

b) Principle of anonymous data use

Unless otherwise stated in the following sections, no personal data is collected, processed, or used when using our website. When you access our website, some information is transmitted, such as the IP address, type, and version of the web browser used, the operating system used, the website from which you came and the time of the request. This data cannot be used by us to identify the individual user. The information is only evaluated statistically and used exclusively to improve the attractiveness, content and functionality of our website. You can find more details on statistical evaluation under point g) Cookies.


c) Registration/ordering process

If you would like to order something on our website, we require personal information from you, which will be stored for future purchases. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. After completing your purchase, you can have your data deleted at any time by contacting our customer service.

We use the data you provide to process your order. For this purpose, we pass on your address data to a commissioned shipping company and, if necessary, your payment data to our payment service providers.

We use the personal data you provide exclusively to the extent that your data is necessary for the fulfilment and processing of our services.


We collect and store the following data from you for the order:

  • First name
  • Last name
  • E-mail (username)
  • Telephone number (optional)
  • Delivery and billing address

We only use your telephone number for queries about our services and - if you have consented - also for the purpose of advertising our products. We need your email address so that we can confirm receipt of your order and communicate with you (e.g. to send you confirmation of receipt of your order). Subject to your consent, we will also use your email address to send you advertising for our products.

We use the "SendCloud" shipping portal of SendCloud GmbH, Kanalstr. 10, 80538 Munich, Germany, to send your package. We only pass on your data to SendCloud for the purpose of processing your online order. Your data will only be passed on to the extent necessary for the processing of your order. Details on the data protection of SendCloud GmbH can be found at https://www.sendcloud.de/datenschutz/.

d) Payment data

  • Credit Card/PayPal/Klarna
  • The personal data you provide in the context of our offer also serve to process your order, i.e. to carry out the payment. We need your name and address in order to be able to enforce our payment claims in the event of non-payment. We need your e-mail address so that we can confirm your order electronically.
  • Your bank details or credit card details will be processed for payment purposes by the following parties, depending on the payment method selected:
  • PayPal (Europe) S.à.r.l. et Cie., S.C.A., 22-24 Boulevard Royal, L- 2449 Luxemburg
  • Stripe Deutschland GmbH, Prielmayerstr. 3, 80335 München
  • Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Schweden

We would like to point out that Stripe Deutschland GmbH transmits your personal data to bodies necessary for processing the transaction, in particular to credit institutions, banks and credit card institutions involved. Your personal data will also be processed there in order to complete your payment.

e) Deletion/Blocking

We store your data for as long as it is necessary to fulfil the intended purpose or for as long as legal retention periods make storage necessary. Afterwards, your data will be deleted or blocked in accordance with legal regulations.

f) Newsletter and delivery of promotional information

You will only receive promotional information at your email address if you have consented to the use of your email address for this purpose. We will not send any promotional emails or newsletters without your consent. Of course, you can revoke your consent to receive newsletters at any time by clicking on the unsubscribe link in the newsletter and following the instructions. Messages within the framework of the contractual relationship with the user do not belong to promotional information. This includes the sending of technical information, information on payment processing, queries about orders, and comparable messages. Users can subsequently request to be removed from the notification list by sending an email to the contact options given above. As part of the registration process, the provider stores the registration and confirmation time and the IP address of the user. The provider is legally obliged to log the registrations in order to be able to prove proper registration.

We use the "Omnisend" platform of Omnisend Limited Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom to send promotional emails. Your data will only be passed on to "Omnisend" for the purpose of email marketing and automation. "Omnisend" uses your data to send and statistically analyse our email campaigns. You can view the privacy policy of "Omnisend" at: https://www.omnisend.com/privacy.

g) Cookies

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

h) Social Plug-Ins

This website uses social plugins from the following providers:

  • Facebook (Betreiber: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
  • Twitter (Betreiber: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
  • Instagram (Betreiber: Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA)
  • Pinterest (Betreiber: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA)

These plugins usually collect data from you by default and transmit it to the servers of the respective provider. In order to protect your privacy, we have taken technical measures to ensure that your data cannot be collected by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. Only by clicking on the respective symbol are the plugins activated and you thereby give your consent for your data to be transferred to the respective provider. After activation, the plugins also collect personal data such as your IP address and send it to the server of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website in question is called up. This also allows the providers to create profiles about your usage behaviour. This also happens if you are not a member of the social network of the respective provider. If you are a member of the social network of the provider and you are logged into the social network during your visit to this website, your data and information about your visit to this website can be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, type and purpose of data processing and about rights and setting options for protecting your privacy, please refer to the privacy policy of the respective provider of the social network. These are available at the following addresses:

i) Customer Service

This website uses the web-based ticket system "Zendesk" of Zendesk International Ltd, 55 Charlemont Place, Saint Kevin's, Dublin, D02 F985 Ireland. The service is used to manage requests made via the contact form on our website. If you do not agree with the data processing by Zendesk, you have alternative options to contact her1 GmbH, e.g. by email, telephone, or post.

j) Data disclosure

Your data will not be transferred to third parties unless we are legally obliged to do so, the transfer of data is necessary for the implementation of the contractual relationship, or you have previously expressly consented to the transfer of your data. External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery, only receive your data insofar as is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. If our service providers come into contact with your personal data, we ensure that they comply with the provisions of data protection laws just as her1 GmbH does.

k) Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress. To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

l) Right of access

Upon request, we will inform you in writing, in accordance with the applicable law, whether and what personal data we have stored about you. In addition, you have the right to correct, block, or delete this personal data in accordance with the legal provisions.

 

m) Contact Data Protection Officer

You have a right to free information about the data we have stored about you and, if applicable, a right to correction, blocking, or deletion of this data. If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, blocking, or deletion of data, as well as revocation of any consent given or objection to a particular use of data, please contact us directly by email at datenschutz@her.one or, in the case of confidential information, by letter at

her1 GmbH
personally locked (confidential)
Legal / Datenschutzbeauftragter
Oranienstraße 185
10999 Berlin

n) Changes to the data protection notice

We reserve the right to change and expand the data protection information.

 

Last modified: November 2019