Privacy Policy

 

1. General information

1.1 The party responsible for data collection and processing within the meaning of data protection law is the:

Peek & Cloppenburg B.V. & Co. KG
Berliner Allee 2
40212 Düsseldorf

(hereinafter referred to as "we")

We are a member of the Peek & Cloppenburg KG group of companies, Düsseldorf, HRA 6862 (hereinafter "P&C Group"). Please note that there are two independent companies Peek & Cloppenburg with their headquarters in Düsseldorf and Hamburg. Where reference is made to Peek & Cloppenburg in this privacy policy, this refers to Peek & Cloppenburg B.V. & Co KG, Düsseldorf, whose store locations can be found here.

1.2 You can reach our data protection officer at

Peek & Cloppenburg B.V. & Co KG
Data protection officer
Berliner Allee 2
40212 Düsseldorf
E-mail: [email protected]

The protection of your personal data is very important to us. We process your data primarily in order to provide a functional and easy-to-use website. We want to ensure that you can use our content and offers via this website. In addition, we only process your data if and insofar as this is permitted by law For further information, please refer to the following statements.

1.3 You can access and save or print out the Peek & Cloppenburg B.V & Co. KG privacy policy at any time at the URL www.peek-cloppenburg.at/de/datenschutzerklaerung.

 

2. Processing of personal data during the use of our website

2.1 Each time you visit our website, our system automatically collects information from your computer system. This data is stored in the log files of our system. The aforementioned data is not stored together with other personal data. We collect the following data:

  • Information about the browser type and version used
  • Information about the language used on your browser
  • Country settings
  • Your operating system
  • Your IP address
  • Date and time of access
  • Websites from which your system accesses our website
  • Websites that are accessed by your system via our website

2.2 It is necessary for our system to process the above-mentioned data in order to guarantee the functionality and delivery of the website. Processing this data also enables us to display our website to you in your preferred language. We also use this data to optimise our website and secure our IT systems. The data is not used for marketing purposes in this context. The legal basis for the processing of this data and the log files is Art. 6 para. 1 lit. f GDPR. Accordingly, our legitimate interest is to be able to provide you with a functional and user-friendly website.

2.3 The data is processed and, in particular, stored for as long as is necessary to fulfil the aforementioned purpose. If data is required to provide the website, it is no longer required once the respective session has ended. Your data will then be deleted automatically. If the data is stored in log files, this is usually the case after fourteen days at the latest. However, if the aforementioned data continues to be stored, your IP address will be deleted or anonymised so that it is no longer possible to identify the accessing internet connection. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.

2.4 Insofar as we evaluate user behaviour on our website beyond this and in a legally permissible manner without express consent, we only use anonymised data that does not allow any conclusions to be drawn about individual persons in order to improve the usability of the website and the user experience for our visitors.

 

3. Use of trackers and scripts

We use the following trackers and scripts on our website:

a) Google Tag Manager 
Google Tag Manager is a tool provided by Google LLC. It enables us to manage website tags via a central user interface. Google Tag Manager itself does not collect any personal data, but is only used to manage tags, which in turn can collect data. We use Google Tag Manager to simplify the integration and management of other tools and services on our website. No personal data is processed.

b) OneTrust Cookie Compliance 
OneTrust is a cookie consent collection and management tool provided by OneTrust, LLC. The tool enables us to obtain and manage your consent to the use of cookies and other technologies in accordance with the General Data Protection Regulation (GDPR) and other relevant laws. Personal data processed by us includes cookie preferences.

c) TYPO3
TYPO3 is a content management system (CMS) used by our hoster iquer.net GmbH & Co KG. TYPO3 allows us to create and manage content for our website. The TYPO3 script is used to dynamically load the content displayed on our website. No personal data is processed.

 

4. Cookies - General

4.1 We use so-called "cookies" on our website. These are text files that are stored in or by your internet browser on your computer system. When you visit our website, a cookie may be stored on your system. This contains a unique string of characters that can be used to identify your browser the next time you visit the website. These are stored on your computer and the data is transmitted from it to our site. Cookies that have already been saved can be deleted at any time. This can also be done automatically by setting your browser accordingly.
 In the following sections "Necessary cookies" (5), "Analysis and statistics cookies" (6), "Advertising cookies" (8), "Social media cookies" (7) and "Functional cookies" (9), we explain in detail which types of cookies we use and which data is processed in each case.

4.2 With the exception of necessary cookies, we only set cookies with your express consent. When you visit our website for the first time, you can either consent to the use of all cookies "Analysis and statistics cookies" (6), "Advertising cookies" (8), "Social media cookies" (7) and "Functional cookies" (9) by clicking "I agree" or select your cookie settings individually by clicking on "Individual settings". Here you can choose which cookie category you would like to activate by clicking on the corresponding slider (blue=activated; grey=deactivated). You can activate or deactivate individual cookies within a category by clicking on "Provider details".
The activation of cookies is voluntary. You can revoke your consent at any time via the "Cookie preferences" link. You can also use our website to its full extent without activating cookies. If you wish to deactivate the use of individual cookies (6-9) and revoke your consent, you can do so by deactivating 
the respective cookie stored at 
under cookie settings.

4.3 Unless other deletion periods are specified in the following statements (in particular 5), the following summarises the storage period, irrespective of the type and purpose of the cookies: Cookies are not subject to a fixed deletion period. Rather, we use cookies based on your consent (6-10) until you revoke it.

 

5. Required cookies

5.1 We use necessary cookies on our website. These are cookies that serve to enable basic functions of the website and the functions that are absolutely necessary for normal visits to the website and navigation on the website. With the help of necessary first-party cookies, we can enable basic functions of the website, such as login, page navigation or the storage of entries during the session. For example, some functions of our website require the browser to be recognised even after a page change. These functions could not be offered without the use of cookies.

5.2 The following data, among others, is processed:

  • Session and device IDs
  • Search terms entered

5.3 Necessary cookies do not require consent. Required cookies are necessary to provide you with the website in a functional and legally compliant manner and to enable you to make use of the offers on our website that you wish to use.

5.4 The legal basis for the further processing of the personal data collected by means of necessary cookies is our legitimate interest in being able to provide you with a functional and user-friendly website (Art. 6 para. 1 lit. f) GDPR). The data collected by the required cookies is not used to create user profiles. The aforementioned data is processed and, in particular, stored for as long as is necessary to fulfil the aforementioned purpose. As a rule, the required cookies are stored until the end of your visit to our website. Depending on the type of browser you are using, a restore of the previously visited page may be activated in the default settings so that the session cookies are automatically deleted after a predefined period of time. The storage period of a session cookie can be up to two years, depending on the setting. You can change this default setting yourself in your browser settings. If cookies are generally deactivated for our website (e.g. by a corresponding setting in your browser), no necessary cookies can be set, which may mean that not all functions of the website can be used to their full extent, for example our website will not be able to recognise your browser and certain content may not be retrievable or data (e.g. from an input mask) may be lost.

5.5 We also use so-called third-party cookies as necessary cookies. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

5.5.1 Cloudflare

Third-party provider:Cloudflare, Inc, 101 Townsend Street, San Francisco, CA 94107, USA
Purpose of the processing:

Page navigation and recognition of the browser even after a page change

Protection of the website from harmful bots.

Processed data:Session ID, IP address, information on the time of the visit to the website 
Data transfer to a third country:Storage and processing takes place on servers in the EU and in the United States of America on the basis of concluded EU standard contractual clauses (SCC).
Storage duration:24 hours

 

5.5.2 OneTrust

Third-party provider:OneTrust Technology Limited, 82 St John St, Farringdon, London EC1M 4JN, UK
Purpose of the processing:

OptanonAlertBoxClosed:
This cookie is set by websites that use certain versions of OneTrust's cookie compliance solution.  It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notification.  It allows the website to display the message no more than once to a user.  The cookie has a lifespan of one year and does not contain any personal information.

OptanonConsent:
This cookie is set by OneTrust's cookie compliance solution. It stores information about the categories of cookies used by the website and whether visitors have given or withdrawn their consent to the use of each category. In this way, website owners can prevent cookies of the individual categories from being set in the user's browser if they have not given their consent. The cookie has a normal lifespan of one year so that returning visitors to the website can remember their preferences. It does not contain any information that can be used to identify the website visitor.

Processed data:Decision by website visitors to activate or deactivate cookies
Data transfer to a third country:Storage and processing takes place on servers in the EU and in the United States of America on the basis of concluded EU standard contractual clauses (SCC).
Storage duration:365 days

 

6. Analysis and statistics cookies

6.1 We also use first-party cookies and third-party cookies (hereinafter collectively referred to as "analysis and statistics cookies") on our website, which enable us to analyse your surfing behaviour. We process data on surfing behaviour in order to create anonymised statistical evaluations, reports and analyses that help us to optimise our processes and workflows .

6.2 The purpose of using analysis and statistics cookies is to improve the quality of our website and its content. We also use them to prevent abusive behaviour when orders are placed. The analysis and statistics cookies tell us how the website is used so that we can constantly improve our offering. We only use analysis and statistics cookies with your consent . Further information on your consent in connection with cookies can be found above under 4.2 . The legal basis for the further processing of personal data collected by means of analysis cookies to improve our website and our offers is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. We use the following third-party cookies to analyse your surfing behaviour. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

6.2.1 Google Analytics
Third-party provider:Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland
Purpose of the processing:Analysis of the surfing behaviour of website visitors to improve our website and our offer.
Processed data:

IP address, customer number, postcode, city), cookie ID, browser information (country settings, browser version, operating system, screen and browser image resolution, device type, browser apps), information about the website and/or advert you previously visited.

We use the code extension "anonymizeIP", which serves to activate IP anonymisation on our website. By using this extension, the IP address is shortened within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full

IP address is transmitted to a server in the USA and truncated there. The IP address transmitted by the browser as part of Google Analytics is not merged with other Google data.

Data transfer to a third country:The storage and processing takes place on servers in the EU and in the United States of America on the basis of concluded EU standard contractual clauses (SCC). Data is not passed on to third parties outside the Google network.
Storage duration:26 months
6.2.2 Google Maps
Third-party provider:Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland
Purpose of the processing:Delivering content; Providing fonts; Improving the service; Displaying maps; Personalisation; Displaying content; Social media; Website security; Displaying maps; Improving Google products and services; Providing a market for tagged data
Processed data:Date and time of the visit; location information; IP address; usage data; URL; search terms; geographic location; IP address; use of the embedded map service (clicks, shifting the map view, etc.); URLs
Data transfer to a third country:The storage and processing takes place on servers in the EU and in the United States of America on the basis of concluded EU standard contractual clauses (SCC). Data is not passed on to third parties outside the Google network.
Storage duration:26 months

 

7. Social media cookies

7.1 We use social media cookies from social networks to show you targeted adverts in the relevant social networks for jobs and offers of interest to you that match your interests. Based on your surfing behaviour, we use analytical models to place and personalise advertisements addressed to you in the social network so that they correspond to your personal interests. We only set social media cookies with your consent. Further information on your consent in connection with cookies can be found above under 4.2. The legal basis for the further processing of personal data collected by means of social media cookies is your consent in accordance with Art. 6 para. 1 a) GDPR.

7.2 In this section, we would like to provide you with an overview of which data we process in this context and to which third-party providers the data is transmitted:

 

7.2.1 Meta Platforms (Facebook/Instagram)
Third-party provider:Meta Platforms Ireland, Ltd, 4 Grand Canal Square, Dublin 2, Ireland
Purpose of the processing:

Collection of personal data to analyse customer behaviour on the website. The aim is the personalised display of social media ads on meta platforms (Facebook and Instagram). In addition, the tracking of personal data is used to measure the success of marketing measures.

If we carry out personalised advertising via Meta Platforms (Facebook/Instagram), we have the option of passing on e-mail addresses in encrypted form as well as information on the associated orders to Meta Platforms.

This is only done if the user concerned has given their consent for this purpose. The transmitted data is then decrypted by Meta Platforms and the information can be assigned to your person with the help of further information, such as the ownership of an account on the social network "Facebook" and "Instagram".

If the user has an account with Facebook or Instagram, they will be presented with the advertising we have booked as part of their existing user relationship with the respective social network. (So-called advanced matching)

Processed data:IP address, website usage data (information about which ad you used to access the website; time spent on the website and which areas of the website were viewed; website loading times, browser and screen settings), postcode, device data, end device, encrypted email address
Data transfer to a third country:The data processed by Meta Platforms may be transferred to countries outside the European Union, in particular to Meta Platforms, Inc, 1601 Willow Rd, Menlo Park, CA 94025, USA. The storage and processing takes place on the basis of concluded EU standard contractual clauses (SCC).
Storage duration:36 months
7.2.2 Linkedin Insigt Tag
Third-party provider:LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Purpose of the processing:

This is a conversion tracking and redirection service.
 This technology allows visitors to our website

see personalised advertising on LinkedIn.

Processed data:Browser information; IP address; device information; referrer URL; timestamp
Data transfer to a third country:USA: The storage and processing takes place on the basis of concluded EU standard contractual clauses (SCC).
Storage duration:30 days
7.2.3 Spotify
Third-party provider:Spotify AB , Regeringsgatan 19, SE-111 53 Stockholm, Sweden
Purpose of the processing:Advertising; optimisation; marketing; connection to Spotify
Processed data:

Browser information; date and time of the visit; IP address; usage data;

Device information; URL; Search terms; Geographical location; Email address; Gender;

Contact information; User account information; Viewed content

Storage duration:365 days
7.2.4 TikTok Pixel
Third-party provider:TikTok, Information Technologies UK Limited, 6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom
Purpose of the processing:Collection of personal data to analyse customer behaviour on the website. The aim is to display social media adverts on the TikTok platform to specific individuals. In addition, the tracking of personal data is used to measure the success of marketing measures
Processed data:IP address, user agent, pixel ID, cookie ID, session ID, mobile advertising ID (IDFA/GAID), browser information, device information, user behaviour, contact with advertising material, interaction with the advertising material, interaction with products, interactions with website services
Data transfer to a third country:USA, United Kingdom. An adequacy decision has been issued by the European Commission for the United Kingdom. Storage and processing takes place on the basis of concluded EU standard contractual clauses (SCC).
Storage duration:13 months

 

8. Advertising - Cookies

8.1 We use advertising cookies (e.g. from third-party providers) to learn more about your surfing behaviour and to display targeted advertising for jobs and offers that match your interests. Based on your surfing behaviour, we use analytical models to personalise advertising addressed to you so that it corresponds to your personal interests. We only set advertising cookies with your consent. Further information on your consent in connection with cookies can be found above under 4.2. The legal basis for the further processing of personal data collected by means of advertising cookies is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

8.2 In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

8.2.1 Google Ads
Third-party provider:Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland
Purpose of the processing:

Collection of personal data to analyse customer behaviour on the website. The aim is to display personalised search engine advertising on Google. In addition, the tracking of personal data is used to measure the success of marketing measures.

When we carry out personalised advertising via Google Ads, we have the option of passing on email addresses in encrypted form as well as information on the associated orders to Google. This only happens if the user concerned has given their consent for this purpose.

The transmitted data is then decrypted by Google and the information can be assigned to the user with the help of further information, such as the ownership of a Google account.

If the user has an account with Google, they will be presented with the advertising we have booked as part of their existing user relationship (so-called Customer Match).

Processed data:IP address, website usage data (information about which advert you used to access the website; time spent on the website and which areas of the website were viewed; website loading times, browser and screen settings), postcode, device data, end device, encrypted email address
Data transfer to a third country:The storage and processing takes place on servers in the EU and in the United States of America on the basis of concluded EU standard contractual clauses (SCC). 
Storage duration:540 days

 

9. Functional cookies

9.1 Functional cookies support our offer and improve the usability of your visit to our website. We also use functional cookies to show you additional functions on our website. This is intended to make your visit to our site more convenient and as comfortable as possible. We only place functional cookies with your consent. Further information on your consent in connection with cookies can be found above under 3.2. The legal basis for the further processing of personal data collected by means of functional cookies is your consent in accordance with Art. 6 para. 1 a) GDPR.

9.2 In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

9.2.1 YouTube video
Third-party provider:Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland
Purpose of the processing:Show videos; Improvement of the service; Payment; Cloud computing; Session management; Providing a market for labelled data
Processed data:P address; Device information; Referrer URL; Viewed videos; IP address; Device information; Viewed videos
Storage duration:8 months

 

10. Legal basis

Your data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to analyse and optimise the use of our website.

 

11. Contact, Brand Ambassador and event registration

You can contact us via various contact forms on our website, by e-mail or by telephone.

11.1 Contact forms

11.1.1 If you enter data in the input mask provided for this purpose in the contact form on the website, it will be transmitted to us and processed by us.

11.1.2 Brand Ambassador - internal employees

Mandatory fields:

  • First name
  • Surname
  • Personnel number
  • House number
  • Position/job title
  • Society
  • Country selection
  • Brand Ambassador Profile
  • Information on motivation
  • Confirmation that manager is aware of application as Brand Ambassador & name of manager

Optional:

  • Department/specialist area

11.1.3 Event registration - external interested parties

Mandatory fields:

  • First name & surname
  • e-mail
  • Store/location
  • Date selection

Optional:

  • Upload for PDF files for CV, cover letter
  • Social media profile
  • Where did you discover the event
  • Current status: Pupil, student, professional

11.1.4 As soon as your message is sent, the following device data is also saved:

  • Your IP address
  • Date and time of dispatch

 

12. Your rights as a user

We summarise your rights under the GDPR below.

12.1 Right to revoke the declaration of consent under data protection law - Art. 7 para. 3 GDPR

You can revoke your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Please address your cancellation to:

[email protected]

or by post to:

Peek & Cloppenburg B.V & Co. KG
Customer service
Berliner Allee 2
D-40212 Düsseldorf.

or use the cancellation options as listed elsewhere in this privacy policy (e.g. by changing your cookie settings after giving your consent).

12.2 Right to information - Art. 15 GDPR

You can request comprehensive information about your personal data and the circumstances of the processing, such as the purposes for which this data is processed or the duration of storage.

12.3 Right to rectification - Art. 16 GDPR

You can request that incorrect data concerning you be corrected.

12.4 Right to erasure - Art. 17 GDPR

In principle, you can request that we delete the data relating to your person if this data is no longer required for legal reasons or may no longer be processed by us.

12.5 Right to restriction of processing - Art. 18 GDPR

You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the period of time required to verify the accuracy, and in the event that you request restricted processing instead of deletion in the case of an existing right to deletion; furthermore, in the event that the data is no longer required for the purposes pursued by us, but you need it for the assertion, exercise or defence of legal claims and if the successful exercise of an objection between us and you is still disputed.

12.6 Notification obligation - Art. 19 GDPR

We are obliged to inform all recipients to whom your data has been disclosed of any rectification or erasure of your data or restriction of processing. This only does not apply if the information is impossible for us or involves a disproportionate effort. We will inform you about these recipients if you request this.

12.7 Right to data portability - Art. 20 GDPR

You are entitled to receive the personal data concerning you from us in accordance with Art. 20 GDPR in a commonly used, machine-readable format or to have it transmitted to another controller.

12.8 Right to object - Art. 21 GDPR

If personal data is processed for the performance of tasks carried out in the public interest (Art. 6 para. 1 lit. e GDPR) or to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR), you can object to the processing of your personal data at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless

  • there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
  • the processing is necessary for the establishment, exercise or defence of legal claims.

You can object to the use of your data for the purpose of direct advertising at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the purpose of direct advertising.

12.9 Right not to be subject to an automated decision - Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

An automated decision is permitted in exceptional cases if you have either (i) given your express prior consent or (ii) the decision is necessary for the conclusion or fulfilment of a contract between you and us or (iii) applicable legal provisions permit this and these provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests.

In cases (i) and (ii), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests. This includes that you can explain your point of view, contest the automated decision and request a personal consultation with one of our employees.

12.10 Right to lodge a complaint with a supervisory authority - Art. 77 GDPR

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of data concerning you is in breach of the General Data Protection Regulation. 

The contact details of the supervisory authority in Austria are as follows:

Austrian Data Protection Authority, 
Barichgasse 40-42, 1030 Vienna, 
E-mail: [email protected].

 

13. Changes to the privacy policy

We reserve the right to update this privacy policy as necessary in order to adapt it to changes in the legal framework or changes to the service and data processing.