Thank you for your interest in our online shop. We take the protection of your privacy very seriously. This page contains detailed information about how your data is processed.1. Controller and contact details
The data controller is TD Entertainment C.V. The controller processes the data provided by the data subject in accordance with the provisions of the European General Data Protection Regulation (hereinafter GDPR). The contact details of the controller are:
- Address: Het Kwadraat, Lübeckweg 2, 9723 HE Groningen, The Netherlands
- Fax: +49 (0)40 / 301 87 605
- Email: firstname.lastname@example.org
2. Access data and hosting
You do not need to provide any personal information to visit our website. Each time a web page is accessed, the web server stores a so-called server log file, which contains the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data), and documents the retrieval.
This access data is processed solely for the purpose of ensuring trouble-free operation of the website and so that we can improve our service. In accordance with Art. 6 (1)(1)(f) GDPR, this serves to protect our legitimate interest in the correct presentation of our services on the basis of a balancing of interests. All access data will be deleted no later than seven days after you have completed your visit to the page in question.
Third-party hosting services
We commission a third party to provide us with the services for hosting and displaying the website. This serves to safeguard our legitimate interest regarding the correct presentation of our services on the basis of a balancing of interests. All data collected within the context of the use of this website or in forms provided in the online shop for this purpose as described below are processed on this third party’s servers. Processing on other servers only takes place within the framework explained here. This service provider is located within the European Union or the European Economic Area.
3. The collection and use of data for the purposes of concluding a contract and opening a customer account
We collect personal data when you voluntarily provide it to us as part of placing your order, contacting us (e.g. via a contact form or email) or when opening a customer account. Mandatory fields are marked as such. This is the data that we need in order to process the contract, to deal with your correspondence or to open a customer account. You cannot complete your order, open an account or contact us without providing this information. You can see which data is collected from the respective form on the website. We use the data provided by you in accordance with Art. 6 (1)(1)(b) GDPR for contract processing and for the processing of your enquiries. Once the contract has been completed or your customer account has been deleted, your data will be restricted for further processing and then deleted once the fiscal and commercial retention periods have elapsed, unless you have expressly consented to the further use of your data, or where we reserve the lawful right to use the data beyond this as set out in this declaration. You can delete your customer account at any time: simply send a message to the contact details provided below or use the delete customer account option within your customer account settings.
4. Transfer of data to delivery companies
In order to fulfil the contract and in accordance with Art. 6 (1)(1)(b) GDPR, we pass on your data to the delivery company commissioned with the delivery of your goods, insofar as this is necessary. This information usually encompasses your first name, surname, address, payment information, email address and, if applicable, your telephone number.
5. Transfer of data to payment service providers
We provide you with various payment processing methods on our website. We use external payment service providers for this purpose. Depending on which payment service provider you select during the order process, we pass on the data collected to the selected payment service provider for the processing of payments.
The transfer of your payment data to the respective payment service providers takes place on the basis of Art. 6 (1)(a) GDPR (consent) and Art. 6 (1)(b) GDPR (processing for the performance of a contract). You can revoke your consent to data processing with the respective payment service provider at any time.
A revocation does not impact the data that needs to be processed, used or transferred to process the payment required as part of the contract.
Novalnet AG (“Novalnet”)
Novalnet AG, Payment Institute (ZAG), Feringastr. 4, 85774 Unterföhring, Germany. If you select SEPA direct debit or credit/debit card payment during the order process in our online shop, your data will be automatically transferred to Novalnet. The personal data transferred to Novalnet is usually surname, first name, email address, order number, customer ID and billing address, as well as any other data necessary to process a payment. Some personal data relating to the respective order is also required to process the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank sort code, card number, expiry date and CVC code, as well as information on goods, services and prices.
This data is mainly transferred for the purpose of identity verification, payment administration and fraud prevention. In particular, we will transfer your data to Novalnet if there is a legitimate interest for this data transfer. The personal data exchanged between ourselves and Novalnet may be shared with credit agencies by Novalnet. The purpose of this transfer is to check identity and creditworthiness. Novalnet also passes your data onto service providers and/or subcontractors insofar as this is necessary for the fulfilment of contractual obligations or if the data is to be processed. Further information on data processing by Novalnet can be found at: https://www.novalnet.com/privacy-policy/
Unzer E-Com GmbH (“Unzer”)
Unzer E-Com GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany. If you select SEPA direct debit, ApplePay, Bancontact, P24 or credit/debit card payment during the order process in our online shop, your data will be automatically transferred to Unzer. This data includes surname, first name, email address, order number, customer ID and billing address, together with the data required to carry out the transaction (item, invoice amount, interest charges, number of instalments, due dates, total amount, invoice number, tax, currency, order date and time). The personal data exchanged between ourselves and Unzer may be transferred to credit agencies by Unzer. The purpose of this transfer is to check identity and creditworthiness. Unzer may contact the following credit agencies: • Schufa Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany • Infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany • CRIF Bürgel GmbH, Leopoldstraße 244, 80807 Munich, Germany • Bisnode Austria Holding GmbH, Jakov-Lind Straße 4/1, A-1020 Vienna, Austria • Dun & Bradstreet Schweiz AG, Grossmattstraße 9, CH-8902 Urdorf, Switzerland. Unzer also passes on your data to service providers or subcontractors, insofar as this is necessary to fulfil contractual obligations or where the data is to be processed. Further information on data processing by Unzer can be found at: https://www.unzer.com/en/datenschutz/.
iDEAL payments, Currence iDEAL B.V, Gustav Mahlerplein 33-35, Amsterdam, The Netherlands. iDEAL is available as a payment method for our Dutch customers. When paying with iDEAL, you will be redirected to your online bank to authorise payment via two-factor authentication. You will then receive an immediate notification of the success or failure of the payment. The exact procedure depends on the respective bank. As a rule, the following personal data is transferred to iDEAL: surname, first name, email address, order number, customer ID, billing address and delivery address. Further information on data processing by iDEAL can be found at: https://www.ideal.nl/en/privacy-cookie-statement/.
Sofort GmbH (“Sofort”)
Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. Sofort is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). If you select “immediate payment” during the order process in our online shop, your data will be automatically transferred to Sofort. This data includes your surname, first name, email address, order number, customer ID and billing address. Depending on the payment method chosen, it may be necessary for Sofort to process your credit card details and carry out a credit check. Sofort also uses your data to process your payment and send you an invoice. Further information on data processing by Sofort can be found at: https://www.klarna.com/uk/privacy/
6. Cookies, web analytics and Facebook Pixel
We use so-called cookies on various pages of our website in order to make visiting our website an attractive proposition and to enable the use of certain features so we can display relevant products or conduct market research. This serves to safeguard our legitimate interest in an optimised presentation of our offering in accordance with Art. 6 (1)(1)(f) GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). The length of time these cookies are stored on your device can be found in your web browser’s cookie settings. You can set up your browser so you are notified when cookies are about to be stored, so you can decide whether to accept or refuse the cookies, either on a case-by-case basis or in general. Each browser differs in the way it manages cookie settings. The help menu of each browser provides further information on this, including explaining how to change your cookie settings. This information can be found under the following links for the respective browsers:
- Internet Explorer™: https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari™: https://support.apple.com/guide/deployment/manage-safari-cookies-depf7d5714d4/web
- Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en&sjid=2066334397715197800-EU
- Firefox™: https://support.mozilla.org/en-US/kb/total-cookie-protection-and-website-breakage-faq
- Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies
If your browser does not accept cookies, the functionality of our website may be limited.
Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de) for the purpose of website analysis. This serves to safeguard our legitimate interest in an optimised presentation of our offering in accordance with Art. 6 (1)(1)(f) GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union. The full IP address will only be transmitted to a Google server and shortened there in exceptional cases. The anonymised IP address that is transmitted by your browser as part of Google Analytics will not be combined with other Google data. The data collected within this context will be deleted once the purpose for its collection has elapsed and we have stopped using Google Analytics.
You can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en .
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. This causes an opt-out cookie to be stored on your device. Please note: if you delete your cookies, you must click the link again.
Use of Facebook Pixel
On the basis of legitimate interest (Art. 6 (1)(f) GDPR), we use Facebook Pixel without the Custom Audience Comparison provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for the protection of the privacy of users, can be found on the following website: https://www.facebook.com/about/privacy/ .
If you are a member of Facebook and do not want Facebook to collect data about you via this website and link it to your member data stored on Facebook, you must log out of Facebook and delete your cookies before using our website.
You can object to the use of your data by Facebook and can opt out accordingly at this website: https://www.facebook.com/settings?tab=ads .
As part of this Facebook usage, data is also transmitted to Facebook's parent company, Facebook Inc., Deborah Crawford 1601 Willow Road Menlo Park, California 94025, USA. There is no corresponding adequacy decision by the European Commission. However, Facebook Inc. is a member of the EU‐US Privacy Shield. Further information on the EU‐US Privacy Shield can be found at: https://www.dataprivacyframework.gov/s/.
Use of Hotjar
You can object to the storage of a user profile and information about your visit to our website by Hotjar, as well as the setting of Hotjar tracking cookies on other websites, by clicking on this opt-out link.
We use the services of Advertising Alliance GmbH from Hamburg. User profiles are created using pseudonyms for advertising purposes so web pages can be designed based on the needs of customers. The profiles only contain information that applies to a sufficiently large group of people. The profiles are not merged with other information that allows the user to be identified. Both the provider and the Advertising Alliance ensure this by keeping the technical and organisational processes for data collection, processing and usage separate. You can find further information and an option to object to the collection of data at https://advertising-alliance.de/datenschutz/.
Alternatively, you can activate the “Do Not Track” option in your browser’s privacy settings. This causes the browser to automatically inform the system that the user does not want usage profiles to be created. The Advertising Alliance recognises and honours this notification.
7. Advertising via marketing networks
Google AdWords Remarketing
We use Google Adwords to advertise this website in the Google search results and on third-party websites. For this purpose, the so-called remarketing cookie is stored on your browser by Google when you visit our website. This cookie automatically enables interest-based advertising via a pseudonymous cookie ID and based on the pages you visit. This serves to safeguard our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1)(1)(f) GDPR. Once this purpose has elapsed and we have stopped using Google AdWords Remarketing, the data collected within this context will be deleted. Any further data processing will only take place if you have agreed to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalise the ads you see on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to form target groups.
Google AdWords Remarketing is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). You can deactivate the remarketing cookie via this link. In addition, you can find out more information about cookies and can change your settings at the Digital Advertising Alliance.
Bing Ads Conversion Tracking
Our website also uses conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Microsoft). If you access our website via a Microsoft Bing advert, Microsoft Bing Ads will place a cookie on your computer (conversion cookie). This allows Microsoft Bing and us to recognise when someone has clicked on an advert, has been redirected to our website and has reached a previously determined landing page (conversion page). We only have access to information showing the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user in question is provided. If you do not wish to participate in the tracking process, you can also refuse to accept the cookie required for this – for example, using your browser settings to deactivate the automatic setting of cookies. In addition, Microsoft may be able to track your usage behaviour across several of your electronic devices through so-called cross-device tracking, so it can display personalised ads on or in Microsoft websites and apps. You can disable this behaviour by visiting https://account.microsoft.com/privacy/ad-settings . Further information on data protection and the cookies used by Microsoft Bing can be found on the Microsoft website at https://privacy.microsoft.com/en-US/.
8. Contact information and your rights
As a data subject, you have the following rights:
- In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein.
- In accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect data or the completion of your personal data stored by us.
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is necessary:
- to exercise the right to freedom of expression and information,
- to comply with a legal obligation,
- for reasons of public interest, or
- to assert, exercise or defend legal claims.
In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data, insofar as:
- you dispute the accuracy of the data,
- the processing is unlawful but you oppose its deletion,
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- pursuant to Art. 21 GDPR, you have objected to the processing.
- In accordance with Art. 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller.
- In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work, or that of our company headquarters.