Privacy Policy
Data Protection Statement
Offmoda (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect the personal data you provide when using our ecommerce platform and related services.
1. Controller’s identity and contact details
This data information statement governs data processing by
OFFMODAHarju Maakond ,Kesklinna Linnaosa,Sakala Tn 7-2 Estonia,Tallinn 10141
Phone: +37258515035
Email: info@offmoda.comWebsite: www.offmoda.com
For the following websites / applications: www.offmoda.com, OFFMODA App
2. Data protection officer’s contact details of data protection officer
The company’s data protection officer can be reached at:
OFFMODA Harju Maakond ,Kesklinna Linnaosa,Sakala Tn 7-2 Estonia,Tallinn 10141
Email: info@offmoda.com
3. Purposes of data processing, legal bases and legitimate interests pursued by Controller or third party, as well as categories of recipients
3.1. Accessing our websites / applications
3.1.1. Log Files
Whenever Services are used, the Internet browser of your end device sends information to the server of our Services, which are then temporarily stored in so-called log files. The data sets contain the following data stored until they are automatically deleted: date and time of access, name of accessed page, IP address of requesting device, referrer URL (source URL from which you accessed our Services), transmitted data volume, upload time as well as product and version information of browser used and name of your access provider.
The legal basis for any processing of the IP address is Art. 6 (1) letter f) GDPR. Our legitimate interest is inherent in
ensuring smooth connection;
making use of our Services attractive; and
evaluating system security and stability.
Your identity cannot be inferred directly from the information, nor can we determine it. The information is stored and automatically deleted once the aforementioned purposes have been implemented. The span of time until deletion depends on need.
3.1.2. Cookies, Tracking, social media functions
We use cookies or similar technologies (also referred to collectively as “cookies”) on various pages in order to make visits to our Services attractive, to enable the use of certain functions and to statistically assess the use of our Services. Cookies are small text files that your browser generates automatically and that are stored on your end device (laptop, tablet, smartphone, etc.) whenever you visit or use our Services. Cookies do not harm your end device, and they contain no viruses, trojans or other malware. Information generated in connection with a given end device are stored in the cookie. However, this does not mean that we discover your identity and/or can infer who you are. Most of the cookies used are deleted once the browser session ends (so-called session cookies). They enable us, for instance, to offer shopping cart information across different pages, which tell you how many items are currently in your shopping cart and what your current shopping total is. Other cookies remain on your end device and allow us to recognize your end device when you return (permanent, so-called persistent cookies). These cookies in particular serve the purpose of making our Services user-friendly, more effective and safer. For example, these technologies make it possible for us to display information in our Services that are specifically tailored to your interests.
We use cookies to provide and optimize our Services. Many of them require your consent. Only cookies that are indispensable for the provision of our Services are exempted from this requirement. Based on their purpose, we divide cookies and similar technologies into three categories:
Indispensable cookies
For our Services to work, these cookies are indispensable. For instance, this is true for cookies storing log-in data following registration in our online shop, which allow users to stay logged in even after they navigate to another page in our online store, as well as for those ensuring that a user-specific configuration of service functions (selected language, etc.) remains in place across sessions. In addition, we use cookies of this kind for compiling so-called reach reports to determine how our Services are being used, the better to provide them to our users in a form that reflects their needs. These cookies also contribute to the safe and proper use of our Services. Under the law, we do not need to obtain your consent to use indispensable cookies.
Please visit our Preference Center here to find out which cookies fall into the category of indispensable cookies.
Functional Cookies
These cookies enable us to provide expanded functionalities and personalization. It may be us deploying them or third-party service providers whose services we use to support our own. If you do not allow these cookies, some or all of these services may not work properly. These cookies also make it possible for us to do market research. The use of these cookies requires your consent.
Please visit our Preference Center here to find out which cookies fall into the category of functional cookies.
Marketing Cookies
These cookies may be deployed by us as part of our Services or by our partners to show you relevant contents / ads – both on our pages and those of third parties. This may entail the creation of so-called profiles based on your interests. Typically, this information does not allow a person to be identified directly since only pseudonymous browser and/or device data are used. If you do not allow these cookies, you will encounter fewer relevant contents / ads tailored to your interests. The use of these cookies requires your consent. Please visit our Preference Center here to find out which cookies fall into the category of marketing cookies.
Insofar as we use cookies with your consent, you grant it by clicking the “Ok” button on the banner shown upon your visit as you browse our Services – if applicable, after setting certain preferences. If you do not wish to give your consent, simply click on “Settings” and “Confirm Selection.”
By clicking the “Ok” button, you consent to the use of cookies. By the same token, we obtain your consent for the processing of your data on the basis of these cookies, where needed, which includes the transmission of these information to our marketing partners (third parties). Our marketing partners likewise use cookies and other technologies to personalize, measure and analyze contents / ads.
Right to revoke
You can revoke your consent either in whole or in part at any time with effect for the future by changing your settings in our Preference Center here.
3.4. Online presence and service optimization
3.4.1. Google Analytics
For purposes of needs-based design and the ongoing optimization of our pages, we use Google Analytics, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”), on the basis of Art. 6 (1) letter f) GDPR. Acting on our behalf, Google uses cookies to create pseudonymized user profiles. The information generated as a result of your use of this website, such as
browser type / version;
operating system used;
referrer URL (previously visited page);
host name of accessing computer (IP address); and
time of server request,
are put to use by Google on our behalf in order to evaluate the use of the website, compile reports about website activities and to provide other services related to website and Internet use for us. The IP address transmitted by your browser as part of these Google Analytics activities is stored only in truncated form, and the data related to your use of the website is not combined with other Google data.
You can prevent the cookies (including Google Analytics cookies) from being stored by adjusting the settings of your browser software; please note, however, that if you do, you may not be able to take full advantage of all of the functions of this website. In addition, you can block Google from assessing and processing the information generated by your use of this website by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on, and this is especially true for browsers on mobile end devices, you can prevent any assessment by Google Analytics by clicking on this link. If you would like to change your cookie settings, please click here. An opt-out cookie will be deployed to prevent any future assessment of your data during visits to this website. The opt-out cookie works only for this browser and only for our website, and it is placed on your device. If you delete the cookies in this browser, you will have to replace the opt-out cookie. For additional information about data protection in connection with Google Analytics, please visit the Google Analytics website.
3.7. Social-media functions
We integrate social-media functions of various social networks with our Services on the basis of Art. 6 (1) letter a) GDPR in order to boost our enterprise’s reach through these channels. It is the operator of such social network that is responsible for ensuring compliance with data protection law.
For information about the purpose and scope of the collection, any further processing and the use of the data by the provider in question as well as your related rights and settings designed to protect your privacy, please see the provider’s data protection statements, links for which are included below.
On some websites, we use plug-ins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The link to Facebook’s data protection statement is here: Facebook.
This website also uses a WhatsApp share button. You can use this button to share otto.de contents via the WhatsApp application on your mobile phone. The button is a hyperlink. No personal data are transmitted to the WhatsApp operator or other third parties when the button appears on this web page. It is not until you use the WhatsApp share button that the WhatsApp operator learns which content is being shared and that the button is used on this website. For more information about how WhatsApp handles personal data, please see the operator’s privacy statement under WhatsApp.
This website uses plug-ins from the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). The Pinterest plug-in is evident in the “Pin It” button on our page. Whenever you click the “Pin It” button while being logged into your Pinterest account, you can place links to contents of our pages in your Pinterest profile. This allows Pinterest to match your visit to our pages to your user account. Please note that we do not receive information about the content of data so transmitted or their use by Pinterest. For additional information, please see the Pinterest privacy policy: Pinterest.
3.8. Customer account / user account
In order to provide you with the greatest-possible degree of comfort, we give you the option of storing your personal data permanently in a password-protected customer account / user account.
Customer accounts are created on a voluntary basis as a rule. If you create a customer account, any of your data collected here is processed on the basis of Art. 6 (1) letter b) GDPR. Once a customer account has been set up, no further data need be input. In addition, you can view and change the data stored about you in your customer account at any time.
Only if you wish to transact orders on our website / applications is it a requirement that a customer account be opened to implement the contract. In addition to the data requested for purposes of the order, you must provide a password of your choice to set up a customer account. Along with your email address, this password serves as your means of access to your customer account. Please keep your personal access data confidential and, in particular, do not share them with unauthorized third parties. Please note that you remain logged in even after leaving our website unless you actively log out. You can delete your customer account at any time. Please note, however, that the data you can view in your customer account are not deleted along with the account if you have placed an order with us. Your data are deleted automatically once the retention periods to which we are subject under the commercial and tax codes have expired. The legal basis for processing is Art. 6 (1) letters c) and f) GDPR.
3.9. Payments
We process your payment information for the purpose of transacting payment – e.g., when you purchase or take advantage of a product and/or service via www.aboutyou.com. Depending on the method of payment, we forward your payment information to third parties (e.g., to your credit-card provided in cases of credit-card payments). The legal basis for processing is Art. 6 (1) letters a), b) and f) GDPR.
3.10.1. Paypal
For payments via PayPal, your payment data are forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter” PayPal”), for the payment to be transacted. PayPal reserves the right to obtain a credit report when payment is made by PayPal, PayPal direct debit or, where available, PayPal “on account.” PayPal uses the result of such credit inquiry as it relates to the statistical probability of default of payment for purposes of making a decision whether the method of payment in question should be approved. The credit report may contain probability scores. Insofar as scores inform the result of the credit inquiry, they are rooted in a scientifically recognized process in mathematical statistics. The scores are calculated on the basis of address data, among other factors. For additional information related to data protection, including the credit reporting agencies used, please see. PayPal privacy policy.
4. Processors
As part of the processing of your data, we avail ourselves of the services of so-called processors. A processor is a natural or legal person, public authority, agency or other body which processes personal data on our behalf, although we continue to be responsible for data processing. Processors do not use the data for their own purposes but process them exclusively for the controller.
5. Duration of data storage and data erasure
OFFMODA stores personal data only so long as is necessary for the purposes stated in the data protection statement, especially for the performance of our statutory and contractual obligations. If applicable, we will store your personal data for other purposes as well if and to the extent that applicable law permits such added storage for certain purposes.
If you close your customer account / user account, we will erase all personal data stored. Insofar as full erasure is impossible or unnecessary for reasons of law, we will block such data. A block is put in place, for example, if duties of retention under the commercial or the tax code apply – e.g., under the German commercial code (HGB) or the German tax code (AO). These codes require us to retain information for tax and financial audits for a period of up to ten years. Even to the extent that no statutory duty of retention applies, we may decline to effect immediate erasure where applicable law provides for an exemption. This is the case, for instance, if the information in question may yet be needed for the ongoing transaction of a contract or the pursuit or defense of rights (e.g., in cases of complaints). The pivotal criterion when it comes to the length of a block is the applicable statutory periods of limitation, upon the expiration of which we will delete the information.
6. Recipients outside of EU
With the exception of the instances of processing discussed above, we will not share your data with recipients domiciled outside of the European Union or the European Economic Area. The instances of processing discussed entail the transmission of data to the servers of the providers of tracking or targeting technologies working on our behalf. These servers are located in the U.S. Data are transmitted on the basis of so-called standard contractual clauses of the EU Commission.
7. Your Rights
7.2. Right to object
Subject to the conditions of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the specific circumstances of the data subject. The above general right to object applies to all purposes of processing described in this data protection statement, which are legitimized by Art. 6 (1) letter f) GDPR. By contrast to the specific right to object geared toward data processing for advertising purposes, we are obligated to heed a general objection of this kind only if you state reasons of overriding significance (e.g., potential hazard to life or health).
7.3. Right to revoke
Insofar as we process data on the basis of your consent, you are entitled to revoke your consent at any time. Revoking your consent does not have the effect of rendering ineffective such data processing as may have been undertaken on the basis of your consent until such revocation.