Data Protection Declaration
Status: May 2018
1.1. The company that bears the responsibility for complying with data protection legislation is:
Peek & Cloppenburg KG
We are a member of the consortium Peek & Cloppenburg KG, Düsseldorf, commercial register A 6862 (hereinafter ‘P&C Group’). Please note that there are two independent Peek & Cloppenburg companies with headquarters in Düsseldorf and Hamburg respectively. To the extent that reference is made to Peek & Cloppenburg in this Data Protection Declaration, it concerns Peek & Cloppenburg KG, Düsseldorf, the location of whose department stores can be found here.
1.2. You can contact our data protection officer here:
Peek & Cloppenburg KG
Data Protection Officer
Berliner Allee 2
1.3. Protecting your personal data is very important to us. We chiefly process your data in order to ensure that our website is both functional and user-friendly. We want to make sure that you can use our content and offers via these web pages. Furthermore, we only process your data if and to the extent that it is permitted by law. Further information can be found in the following sections.
2. Processing your personal data when you use our website
2.1. Every time you view our website, our system automatically collects data and information about your computer system. These data are saved in our system’s log files. The aforementioned data are not saved together with any other personal data. We collect the following data:
- information about the type and version of browser you use
- your operating system
- your IP address
- the date and time you view the web page
- the websites that your system accesses via our website
- Websites, die von Ihrem System über unsere Website aufgerufen werden
2.2. It is necessary for our system to save your IP address temporarily in order to send our website to your computer. For the duration of your visit to our website, your IP address must therefore be saved. Consequently, saving this information in log files is conducive to the reliable performance of the website. In addition, we use these data to optimise our website and keep our information technology systems secure. In this context, these data are not used for marketing purposes. The legal basis for the temporary storage of these data and these log files is Art. 6(1)(f) of the General Data Protection Regulation (hereinafter: ‘GDPR’).
2.3. These data are stored until the purpose of their collection has been achieved. Insofar as data are required in order to make the website available, this requirement ceases to apply upon ending the respective session. Thereafter your data are deleted automatically. In the event of your data being saved in log files, this deletion will take place after seven days at the latest. Should the aforementioned data continue to be stored, your IP address will be deleted or encrypted so that it is no longer possible to identify the Internet connection used to view the website. The gathering of data in order to make the website available and the storage of data in log files are essential to the operability of the website.
2.4. To the extent that we analyse your behaviour on our website after you have used it, we use your data exclusively in an anonymised or pseudonymised form to improve the usability of the web page and our visitors’ user experience. Pseudonymising means that traits that enable an unambiguous personal identification are removed and replaced by a new value. Without knowing this value, it is not possible to decode your data. You can find more details about this process in chapter 3 of this Data Protection Declaration.
3.1. We use so-called ‘cookies’ on our website. These are text files that are saved on your computer system in or by your Internet browser. When you visit our website, a cookie can be saved on your system. This cookie contains a unique string of characters that allow your browser to be identified the next time you visit the website. In the following sections, we explain in detail which types of cookies we use and which data are processed by them.
3.6. The following applications require cookies for technical reasons:
- applying language settings
- logging in
- remembering search terms
3.7. The legal basis for the processing of personal data using cookies is Art. 6(1)(f) of the GDPR. The data collected by cookies that are required for technical reasons are not used to compile user profiles. To the extent that you opt out of the use of these cookies or configure your browser accordingly, our website will not recognise your browser and this may result in you being unable to see certain content or in data (e.g. in an input mask) being lost.
- the search terms you entered
- the frequency of page visits
- your use of website functions
3.9. We use analysis cookies for the purpose of improving the quality of our website and its content. Thanks to analysis cookies, we can find out how the website is used, meaning that we can constantly optimise what we offer. This purpose also includes our legitimate interest in processing personal data according to Art. 6(1)(f) of the GDPR. When you first visit our website, you will be shown a banner with which we advise you of the use of such cookies and ask for your consent. In this respect, the additional legal basis is Art. 6(1)(a) of the GDPR.
3.10. If you opt out of using these cookies or configure your browser accordingly, you will face no disadvantages. All website functions will continue to exist.
3.11. On our website, we use analysis cookies by Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: ‘Google’). The information produced by the cookie about your use of our online content is generally transmitted to a Google server in the USA and stored there. For Google Analytics, the following applies:
- Google will use this information on our behalf to analyse the use of our online content, to compile reports about the activities within this online content and to provide us with other services associated with the use of this online content and Internet use. Pseudonymous user profiles may be created from the processed data.
- We only use Google Analytics with activated IP anonymisation. That means that your IP address will be abbreviated by Google within the member states of the European Union or in other signatory countries to the treaty on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the USA and abbreviated there. The IP address shared by your browser is not combined with any other data by Google.
- You can prevent the saving of cookies by using a corresponding setting in your browser software; furthermore, you can prevent Google’s acquisition of the data produced by the cookie and related to your use of the online content as well as the processing of these data by Google by downloading and installing the browser plug-in that is available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
4. Social networks
4.1. Our web pages contain simple links to the following social networks:):
- Facebook (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
- Instagram: (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
- Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
- Google Plus (operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
- YouTube (operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
- Xing (operator: XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany)
- Whatchado (operator: whatchado GmbH, Möllwaldplatz 4/39, 1040 Vienna, Austria).
4.2. Data is only shared with the named social media operators when the corresponding symbol button (e.g. the ‘f’ of Facebook or the camera of Instagram) is clicked. If you click on a symbol button like this, a page belonging to the corresponding social media operator will open in a pop-up window. There you can publish information about our products in line with the provisions of the social media operator.
4.3. When you click on a link to a social network, a connection is established with the servers of that social network. We have no influence on the extent of the data collected by the respective social network.
4.4. If you are already logged on to a social network while visiting our web pages, the operator of that social network may be able to match your visit to that page with your personal account as soon as you click on the link to the social network.
4.5. If you are not a member of any social network, it is nevertheless possible that the social networks may receive and store your IP address as well as information about the browser and operating system that you are using. The extent and purpose of this data collection as well as the processing and use of this data by the social networks and information about your rights and settings options to protect your privacy can be found in the data privacy statements of the respective social network. These can be accessed via the following addresses:
- Facebook: http://www.facebook.com/policy.php
- Instagram: https://help.instagram.com/155833707900388
- Twitter: http://www.twitter.com/privacy
- GooglePlus: http://www.google.com/intl/de/privacy/
- YouTube: https://policies.google.com/privacy?hl=de
- Xing: https://privacy.xing.com/en/privacy-policy
- Whatchado: https://www.whatchado.com/en/terms
4.6. If you are a member of a social network and would like to limit the collection of data via our website as well as the amalgamation of your user data with the data saved about you by the social network, you should log out of the social network before visiting our web pages. We encourage you to apply the corresponding add-ons to your browser as necessary (for example the so-called ‘Facebook Blocker’). However, we cannot guarantee the effectiveness of such solutions.
5.1. You can contact us via email.
5.2. In the event that you make contact with us, you can opt out of the storage of your personal data at any time. All you need to do is to send an informal message with this information to the contact details mentioned above. However, please be advised that in this event it will not be possible for us to respond to your message.
5.3. The legal basis for processing your data in this respect is Art. 6(1)(f) of the GDPR, as we have a legitimate interest in these data. Should you make contact via email in the context of concluding a contract, then Art. 6(1)(b) of the GDPR also forms the legal basis for us processing this data.
5.4. We process personal data from emails exclusively for the purpose of responding to your message. In this respect no data is passed on to third parties. We delete your data as soon as their storage is no longer necessary to achieve the respective purpose. This applies to personal data entered into the input mask of the contact form and to those conveyed via email once the respective correspondence with you is closed. The correspondence is considered closed when circumstances suggest that the issue concerned has been conclusively resolved.
5.5. Should the data be required in order to comply with a contract or to carry out pre-contractual measures, the data can only be deleted early to the extent that this is permitted by contractual or legal obligations. Precisely which storage periods apply in this context must be determined on an individual basis for the respective contracts and contractual parties.
6. Transfer of personal data to service providers
We collaborate with service providers who process certain data on our behalf. This occurs exclusively in accordance with the respectively applicable data protection legislation. Moreover, we have entered into agreements with our service providers – where legally required – pertaining to them processing data on our behalf which satisfy the requirements of Art. 28 of the GDPR and give the service providers instructions about handling these data. By means of careful selection and regular monitoring, we ensure that our service providers take all organisational and technical measures necessary to protect your data.
7. Your rights as a user
Below we have summarised your rights according to the GDPR and the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
7.1. Right to withdraw your consent to the processing of your personal data – Art. 7(3) GDPR
You can withdraw your consent at any time. As a result of your previous consent, withdrawing your consent does not affect the legality of the processing that took place prior to you withdrawing that consent. You can withdraw your consent to future processing via email at:
or by post at:
Peek & Cloppenburg KG
This has no effect on the legality of the data processing that took place prior to this withdrawal of your consent.
7.2. Right of access – Art. 15 GDPR, section 34 BDSG
You can request comprehensive information about the data pertaining to you and the circumstances in which they are processed, such as the purposes for which these data are being processed or the duration of their storage.
7.3. Right to rectification – Art. 16 GDPR
You can request the rectification of any incorrect data pertaining to you.v 7.4. Right to erasure – Art. 17 GDPR, section 35 BDSG
In principle, you can request that we delete all data pertaining to you if these data are no longer required or may no longer be processed for legal reasons.
7.5. Right to restriction of processing – Art. 18 GDPR
You have the right to prohibit the further processing of your personal data, e.g. if your data cannot yet be deleted due to conflicting duties pertaining to the preservation of records.
7.6. Notification obligation – Art. 19 GDPR
We are obliged to inform all recipients to whom your data have been disclosed about any rectification to or erasure of your data or any restriction to their processing. This rule will apply unless it is impossible for us to provide this information or involves disproportionate effort. We will inform you about these recipients if you ask us to do so.
7.7. Right to data portability – Art. 20 GDPR
You are entitled to receive from us the personal data concerning you in a commonly used, machine-readable format. If we process your data for the purpose of direct advertising, you have the right to object. This also applies to profiling, to the extent that this is connected to such direct advertising. After objecting, your data will no longer be processed for this purpose.
7.8. Right to object – Art. 21 GDPR
If we process your data due to a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object for reasons relating to your particular situation. This also applies to profiling based on this provision.
7.9. Right not to be subject to a decision based solely on automated processing – Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing, including profiling, if this has legal effects concerning you or similarly affects you.
By way of exception, an automated decision is permitted if (i) you previously declared your explicit consent, or (ii) the decision is necessary for entering into or performance of a contract between you and us, or (iii) this is authorised by effective legislation and this legislation lays down suitable measures to safeguard your rights and freedoms as well as your legitimate interests.
In the cases referred to in points (i) and (ii), we implement suitable measures to safeguard your rights and freedoms as well as your legitimate interests. This includes your right to express your point of view, to contest the automatic decision and demand human intervention by one of our employees.
7.10. Right to lodge a complaint with a supervisory authority – Art. 77 GDPR
You have the right to lodge a complaint with the competent supervisory authority if you believe that our processing of the data concerning you infringes the General Data Protection Regulation.