The processing of data for other reasons, in particular after an order has been placed, is not affected by this.

This processing is justified by Art. 6 (1) (a) GDPR "consent" and (f) "legitimate interest".

 

Processing when using the contact form

If you contact us, regardless of whether via the contact form integrated on the website, by email or by post, your name, your message and any contact details provided will be stored.

We may use processors in the communication process, to whom these data are then transmitted. Any service providers we engage are processors and do not use these data for other purposes, as they have undertaken towards us.

This processing takes place to enable communication with you. It is justified by Art. 6 (1) (b) "contractual relationship" and/or (f) "legitimate interest".

 

Processing on our website

Even if you do not use the functions described above on our website (shop, contact form, newsletter), the following processing takes place merely by visiting the website:

 

Server logs

Every call of our website is automatically logged by our hosting service provider in so-called server logs. Our hosting service provider is a processor and uses the data exclusively for our purposes, as it has contractually undertaken.

In addition to the address of the web page ("https://franzis.de/…"), the data contain the time of access, your anonymised IP address, the access status, i.e. information on whether an error occurred during the call, the amount of data transferred, in the case of a link the last page, and information on the browser you use, including the language version and the operating system.

These server logs are regularly deleted automatically after 10 days.

The processing serves the maintenance of the servers we use and the defence against attacks from the internet. The information about your browser is also used to technically adapt our websites to your requirements. The processing is justified by Art. 6 (1) (f) "legitimate interest" GDPR.

 

Our own cookies

We use various cookies that may be set when you enter the website.

When you enter the website, a consent manager automatically appears with which you can choose which cookies you agree to. Cookies that establish the functionality of the website, including a cookie for storing your selection, are mandatory. The others are only used with your consent.

In total, the following cookies exist:

• Franzis.de/nocache: This cookie is set automatically. It tells the shop software which pages it should not deliver from the cache. It is deleted when you leave the page.
• Franzis.de/session-1: This cookie is used to implement the shopping cart and to store the pages you last viewed. It is deleted when you leave the page.
• Franzis.de/x-ua-device: This cookie is used to determine the end device for displaying the shop. It is deleted when you leave the page.
• Franzis.de/csrf_token-1: This cookie is a token for the CSRF security function: CSRF protection ensures that every request from the client to the server is provided with a unique "token" that ensures that the request comes from the client. It is deleted when you leave the page.
• Franzis.de/x-cache-context-hash: This cookie stores the information about which user group (e.g. private customer) you belong to and shows you the tax rates relevant for your country. This means you always see the prices that apply to you. It is deleted when you leave the page.
• Franzis.de/sUniqueID: This cookie is used to store the wish list ("Recently viewed"). It is deleted after one year.

 

The processing is justified by Art. 6 (1) (b) "contractual relationship" and/or (f) "legitimate interest" GDPR.

 

Third-party cookies

We integrate third-party services on our website in order to display advertising or adapt our offer to your interests. They are used exclusively with your consent and are therefore justified by Art. 6 (1) (a) "consent" GDPR. The consent also covers the transfer of data to the USA, where there is no level of protection equivalent to European data protection law, pursuant to Art. 49 (1) (a) GDPR:

We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These are Google AdWords, which displays advertising when the Google search engine is used. Google Analytics is also used, a tool with which we can track user behaviour on the website and which serves to adapt the website to your interests. These services are made possible by Google Tag Manager. You can find Google's privacy policy here. You can also set the Google privacy settings individually directly with Google.

We also use Microsoft Advertising (formerly Bing Ads), a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, to display advertising to users of Microsoft search engines. This records click behaviour, order data, user IP and pseudonymous user profiles (no name, only interests are assigned to the profile). You can find the privacy policy here.

For our newsletter and registration for it, we have integrated the service Klaviyo Inc., 125 Summer Street, 6th Floor, Boston, MA 02110, USA. It receives the contact data from the registration form, order data and a customer history. Clicks in the newsletter are also tracked. In addition, geographical data based on the IP address and data on personal areas of interest that Google, Facebook and Instagram have collected from consenting users may be combined by Klaviyo. You can find further information below under "Newsletter dispatch via Klaviyo". You can find the privacy policy of Klaviyo Inc. here.

 

Newsletter

Our website offers the possibility to subscribe to a free newsletter. When you subscribe to the newsletter, the data from the input form are transmitted to us. The only mandatory field when registering is your email address. If you provide further voluntary information, it is used exclusively in the newsletter to address you personally.

The legal basis for processing your data after subscribing to the newsletter is Art. 6 (1) (a) GDPR if the user has given consent. Consent is given as soon as you receive a confirmation email with a confirmation link after subscribing to the newsletter and click on this link. By clicking in the confirmation email, you also give us your consent to receive the newsletter. With this confirmation, the time stamp and your IP address are transmitted. This procedure protects you against possible misuse of your email address and also ensures that the registration can be clearly traced in the so-called "DOI" (double opt-in) procedure.

We use the data collected when you subscribe to the newsletter exclusively for the purpose of sending the newsletter.

You can stop receiving the free newsletter at any time. For this purpose, each newsletter contains a corresponding unsubscribe link. This also enables you to withdraw your consent to the storage of the personal data collected during the registration process. You will not incur any costs other than those of the internet connection.

Alternatively, you can unsubscribe from the newsletter by post to Franzis GmbH, Richard-Reitzner-Allee 2, 85540 Haar, Germany, via our contact form or by email to service@franzis.de.

Newsletter for existing customers
If you purchase products or services on our website and provide your email address in the process, we may use it to send a newsletter. In this case, the newsletter will only be used to send advertising for our own similar goods or services.

The legal basis for sending the newsletter following the sale of goods or services is Section 7 (3) of the German Act against Unfair Competition (UWG) and Art. 6 (1) (f) GDPR. In this respect, data processing is based solely on our legitimate interest in personalised direct advertising.

If you have already objected to the use of your email address for direct advertising purposes, you will not receive this newsletter. However, you can also object at any later time to the use of your email address for the advertising purpose mentioned here with effect for the future by notifying us. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

Newsletter dispatch via Klaviyo
We send newsletters via Klaviyo, Global HQ, 125 Summer St, Floor 6, Boston, MA 02111, USA (http://www.klaviyo.com/; hereinafter referred to as "Klaviyo"). We pass on the data you have entered to Klaviyo pursuant to Art. 6 (1) (f) GDPR to safeguard our legitimate interest in using an effective, secure and user-friendly newsletter system.

Klaviyo uses the transmitted data to send the newsletter on our behalf and for statistical evaluation. For this purpose, the emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way, it can be tracked whether a newsletter message has been opened and which links in it have been clicked. Klaviyo automatically creates general, non-personal statistics on the response behaviour to newsletters.

We also have a legitimate interest in the statistical evaluation of the newsletters in order to optimise our advertising communication. Therefore, pursuant to Art. 6 (1) (f) GDPR, data of the individual newsletter recipient (e.g. email address, time of retrieval, IP address, browser type and operating system) are also recorded and processed by the web beacons. These data allow conclusions to be drawn about the individual newsletter recipient. They are processed by Klaviyo to automatically create statistics showing whether a particular recipient has opened a newsletter message.

To deactivate this data analysis, you must unsubscribe from the newsletter.

Klaviyo may also use the data itself pursuant to Art. 6 (1) (f) GDPR in its own legitimate interest in the needs-based design and optimisation of the service or, for example, for market research purposes to determine which countries the newsletter recipients come from. However, Klaviyo does not use your data itself to contact you or pass it on to third parties.

As a rule, your data are transferred to a Klaviyo server in the USA and stored there. To protect your data in the USA, a data processing agreement based on the standard contractual clauses of the European Commission is in place with Klaviyo. This data processing agreement can be viewed at the following internet address: https://www.klaviyo.com/legal/terms-of-service

Klaviyo's privacy policy can be viewed here: https://www.klaviyo.com/de/legal/privacy/privacy-notice 

We also use Klaviyo to show you messages via pop-ups on our websites. These are displayed based on your browsing behaviour (time spent on the website, websites visited, etc.). Klaviyo is also used to send you push notifications. This processing also takes place exclusively on the basis of the consent you have given pursuant to Art. 6 (1) sentence 1 (a) GDPR.

If you take part in online competitions or contests with us, we must ask for your name, email address, age and address. This allows you to take part in the competition and allows us to check and prevent the participation of minors under the age of 18 in accordance with Art. 8 (1) GDPR. In addition, we can notify you if you win, and the prize can be sent to you.

In the case of special competitions with certain sponsoring partners, we may pass on your data to the sponsoring partner(s) named in each case. In these cases, you will be informed separately and asked for your express consent. You are free to decide whether you consent to the disclosure and wish to take part in the competition or not.

FRANZIS also organises competitions that are linked to subscribing to a newsletter. Alternatively, you can also take part in the competition if you do not wish to receive the newsletter. For this purpose, send us an email to service@franzis.de stating the competition URL and the information to be entered in the form, or send us your details by post to FRANZIS GmbH, Richard-Reitzner-Allee 2, 85540 Haar, Germany.

AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany, is integrated by us to display advertising material on our website and serves as our affiliate partner. AWIN AG receives product data, tracking links, sales data and transaction data. You can find the privacy policy of AWIN AG via this link.

Solute.de GmbH, Zeppelinstraße 15, 76185 Karlsruhe, Germany, uses billiger.de sales tracking to track and evaluate certain user actions performed on our website after a referral from billiger.de. You can find the privacy policy of Solute.de GmbH here.

We also use services of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, to display advertising via Facebook and Instagram, which also involves the use of web beacons ("Facebook pixels"). Product and order data are transmitted in this process. You can obtain the privacy policy via this link.

You can also object to the use of the service directly with Facebook via this link.

On this website, data are collected and stored for marketing and optimisation purposes using technology from The Trade Desk (The Trade Desk Ltd, 1 Bartholomew Close, London EC1A 7BL, United Kingdom,  https://www.thetradedesk.com/). Pseudonymised user profiles may be created from these data, among other things. Browser cookies may be used for this purpose. The data collected with The Trade Desk's technology are not used by The Trade Desk to personally identify the visitor to this website. You can object to the collection and storage of data at any time with effect for the future here. You can find further information on data protection at The Trade Desk here.

Finally, we use an onsite retargeting service from OptiMonk International Zrt., Kassai út 129, 4028 Debrecen, Hungary, to display personalised content and for usage-based redirects within our website. For this purpose, the IP address, browser information, click path, time of visit, mouse movements, information about the operating system and pages visited are processed. You can find OptiMonk's privacy policy via this link.

 

Google Customer Reviews (formerly Google Trusted Stores programme)
We cooperate with Google within the framework of the "Google Customer Reviews" programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This programme enables us to obtain customer reviews from users of our website. After a purchase on our website, you will be asked whether you would like to take part in an email survey by Google. If you give your consent pursuant to Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. Your rating will then be combined with our other ratings and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC in the USA.
You can withdraw your consent at any time by sending a message to the controller or to Google.
You can find further information on Google's data protection in connection with the Google Customer Reviews programme at the following link: https://support.google.com/merchants/answer/7188525?hl=de
You can find further information on data protection for Google Seller Ratings at this link: https://support.google.com/google-ads/answer/2375474

Pinterest
Our websites use plug-ins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. The plug-ins can be recognised, for example, by buttons with the "Pin it" symbol on a white or red background. You can find an overview of the Pinterest plug-ins and their appearance here: https://developers.pinterest.com/docs/getting-started/introduction/

When you call up a website that contains such a plug-in, your browser establishes a direct connection to the Pinterest servers. The content of the plug-in is transmitted by Pinterest directly to your browser and integrated into the page. Through this integration, Pinterest receives the information that your browser has called up the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged in to Pinterest. This information (including your IP address) is transmitted by your browser directly to a Pinterest server in the USA and stored there.

If you are logged in to Pinterest, Pinterest can directly assign your visit to our website to your Pinterest profile. If you interact with the plug-ins, for example by clicking the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed there to your contacts.

For the purpose and scope of the data collection and the further processing and use of the data by Pinterest, as well as your related rights and setting options for protecting your privacy, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy. 

If you do not want Pinterest to directly assign the data collected via our website to your Pinterest profile, you must log out of Pinterest before visiting our website. You can also completely prevent the Pinterest plug-ins from loading with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

The legal basis for processing the data is your express consent pursuant to Art. 6 (1) (a) GDPR. 

Secure connection

The connections to our website are secured with SSL/TLS. This prevents data between your computer and our servers from being "intercepted".

 

Data protection for children

Protecting the privacy of children is an important concern for us. We therefore do not knowingly collect any data from children and adolescents.

 

No other disclosure

Your data are processed securely and treated confidentially by us and our service providers. In particular, we do not sell any data ("address trading"). The processors we engage meet the highest standards of data security and data protection.

All service providers commissioned by us have their registered office in the EU or the EEA, i.e. within the scope of the GDPR. Insofar as they are companies subject to US law, processing only takes place on the basis of your consent.

There is no automated decision-making that produces legal effects concerning you or similarly significantly affects you. Insofar as creditworthiness is checked in the context of a purchase, this only takes place on the basis of your consent vis-à-vis the payment service provider.

 

Your rights

Under the GDPR you have various rights, and complying with them is an important concern for us.

These are

• the right of access, Art. 15 GDPR,
• the right to rectification, Art. 16 GDPR,
• the right to erasure, Art. 17 GDPR, and to restriction of processing, Art. 18 GDPR,
• the right to data portability, Art. 20 GDPR,
• the right to object, Art. 21 GDPR,
• the right to lodge a complaint with a supervisory authority, Art. 77 GDPR, and
• the right to withdraw your consent, Art. 7 (3) GDPR.

 

As a customer, you can partly exercise the right of access and rectification yourself by logging in to your customer account and retrieving or correcting the relevant master and order data, for example when you move.

You can object to the processing on two grounds: either you are in a particular situation that outweighs our interest in the data processing. Details are set out in Art. 21 (1) GDPR. Furthermore, you can always object where processing for direct marketing purposes is concerned. With us, however, this only takes place with your revocable consent anyway.

If you consider processing by us to be unlawful, you can lodge a complaint with a supervisory authority. You can find the supervisory authority responsible for your location, for example, here. The data protection authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 27, 91522 Ansbach, Germany, phone: +49 981 53-1300, email: poststelle@lda.bayern.de,

Withdrawal of consent You are also entitled to withdraw consent once given. However, this does not affect the lawfulness of the processing up to the withdrawal but only has effect for the future. To do so, you can contact us at the address given above or by email at service@franzis.de. Cookie consent can be withdrawn via our consent manager, which you can reach under Privacy settings / Individual settings.

 

You can download this document as a PDF (German version) here.