Information on data protection for customers and interested parties

Section 1: Data protection information on processing data in accordance with Articles (Art.) 13, 14 and 21 of the General Data Protection Regulation (GDPR) and Art. 19 and 20 of the Swiss Data Protection Act (DSG)

We take data protection very seriously and would like to let you know how we process your data and what rights and claims you are entitled to under the data protection regulations. Valid since 25 May 2018.

The data protection information set out below concerns activities carried out by all members of the Jack Wolfskin Group pertaining to data privacy as well as services provided on behalf of external companies (see companies listed under 1 below. Personal data is processed in the same way and according to the same principles for the listed companies, meaning that uniform data protection information is applicable.

1. Body responsible for data processing and contact information

Body responsible within the meaning of data protection law:
Jack Wolfskin Ausrüstung für Draussen GmbH & Co. KGaA
Jack Wolfskin Kreisel 1
65510 Idstein/Ts., Germany
Telefon +49 6126 954 0
Fax +49 6126 954 159
info@jack-wolfskin.com

Jack Wolfskin Retail GmbH
Jack Wolfskin Kreisel 1
65510 Idstein/Ts., Germany
Telephone +49 6126 954 0
Fax +49 6126 954 159
info@jack-wolfskin.com

JW Stargazer Holding GmbH
Jack Wolfskin Kreisel 1
65510 Idstein/Ts., Germany
Telephone +49 6126 954 0
Fax +49 6126 954 159
info@jack-wolfskin.com

The bodies stated above decide autonomously on the processing of your personal data.

Your data may be received by or disclosed to the listed members of the Jack Wolfskin Group. You can find more details concerning the categories or recipients of your data under 4. below.

Contact details of our Data Protection Officer:
Jack Wolfskin Ausrüstung für Draussen GmbH & Co. KGaA
Data Protection Officer
Jack Wolfskin Kreisel 1
65510 Idstein/Ts.
datenschutz@jack-wolfskin.com

2. Purposes and legal basis on which we process your data

We process personal data in line with the provisions governing the General Data Protection Regulation (GDPR), the German Privacy Act (BDSG), the Swiss Data Protection Act (DSG), the Telecommunications Telemedia Data Protection Act (TTDSG) as well as other applicable data protection regulations, (details below).

What individual data is processed and how the data is used in detail depend largely on the purposes of the processing.

More details and further information regarding the reasons for data processing can be found in the respective contracts, agreements, forms, declaration of consent and/or other information made available to you (e.g. as part of using our website or included in our T&Cs). Furthermore, this data protection information may be updated over time, and you can read about this on our website at https://www.jack-wolfskin.fi/Data-Protection.html.

2.1 Processing required in order to perform a contract or prior to entering into a contract (Art. 6 Para. 1 b) GDPR and Art. 31 Para. 2a DSG)

Processing of personal data is performed in order to undertake our contractual agreements with you and to carry out your orders or, at your request, to carry out measures and activities which are part of pre-contractual relations, e.g. with interested parties. The processing serves, in particular, to provide deliveries of our products as well as the services associated with them in accordance with your instructions and wishes. The scope of the processing extends to personal data that is necessary for the respective service, measure or activity.

This primarily concerns communication with yourself regarding agreements, validation regarding transactions, orders and any other agreements made, as well as quality assurance based on corresponding documentation, goodwill procedures, measures to control and optimise business processes and the performance of general due diligence, control and monitoring by affiliated companies (e.g. parent company); statistical evaluations for corporate management, costing and controlling, reporting, internal and external communication, crisis management, accounting and tax assessment of operations, risk management, assertion of legal claims and defence when faced with legal disputes; ensuring IT security (incl. system and plausibility tests) and general security, e.g. building and system security, ensuring and exercising domiciliary rights (e.g. by means of access controls); ensuring integrity, authenticity and availability of data, preventing and investigating criminal offences; control by supervisory bodies or control bodies (e.g. audit).

2.2 For the purposes of legitimate interest pursued by ourselves or by a third party (Art. 6 Para. 1 f) GDPR or Art. 31 Para. 1 DSG)

Apart from fulfilling the provisions governing a contract or pre-contractual agreement, your data may be processed, where necessary, in order to preserve our legitimate interests or those of a third party, especially for following reasons, which also represent our legitimate interests or those of third parties:

• The further development of services and products as well as existing systems and processes;
• Obtaining information and exchanging information with credit agencies, insofar as this goes beyond our economic risk;
• Checking and optimising processes for needs analysis;
• Advertising or market and opinion polls, unless you have rejected to the use of your data;
• Disclosure of personal data as part of due diligence in company sale negotiations;
• For comparison with European and international anti-terror lists, insofar as this goes beyond the legal obligations;
• Enrichment of our data, including by means of use or research of publicly available data;
• Statistical evaluations or market analysis;
• Benchmarking;
• Assertion of legal claims and defence in legal disputes that cannot be directly attributed to the contractual relationship;
• Limited storage of data, where deletion is not possible or only possible with an undue amount of effort as a result of the special way in which the data is stored;
• Development of scoring systems or automated decision-making processes;
• Prevention of, and investigation into, criminal offences, unless exclusively for the fulfilment of legal requirements;
• Prevention of fraud;
• Building and system security (e.g. by means of access control and video monitoring), insofar as this goes beyond the general duty of care;
• Internal and external inspections, safety checks;
• Listening into or recording telephone conversations for quality assurance and for training purposes;
• For obtaining and maintaining certifications of a private or official nature;
• For ensuring and exercising domiciliary rights by means of appropriate measures, using video monitoring to protect our customers and employees as well as to secure evidence in the event of criminal offences and their prevention.

If you would like to receive further information to consider how your interests may be affected, please contact us or our Data Protection Officer.

2.3 As part of the person giving their consent (Art. 6 Para. 1 a) GDPR and Art. 31 Para. 1 DSG)

Processing personal data for certain reasons (e.g. using your email address for marketing purposes, including bonus and loyalty programmes) may also occur as a result of you having given your consent. You can revoke your consent at any time. This also applies to revoking consent that you may have given us prior to 25 May 2018 when the GDPR came into force. You will be informed separately about the reasons and consequences of revoking consent or refusing to give consent in the relevant text, where consent is required.

Generally speaking, revoking consent is only effective from that point onwards. Processing that has taken place prior to the revocation being made is not affected and remains lawful.

2.4 For the purposes of compliance with a legal obligation (Art. 6 Para. 1 c) GDPR or Art. 31 Para. 1 DSG) or in public interest (Art. 6 Para. 1 e) GDPR or Art. 31 Para. 1 DSG)

Like everyone involved in economic activity, we are also subject to a large number of legal obligations. These are primarily legal requirements (e.g. trade and tax legislation) as well as regulatory or other official requirements, where applicable, e.g. court judgements. Reasons for processing include checking identity and age, preventing fraud and money laundering, the prevention as well as the combatting of, and investigation into, the financing of terrorism and criminal offences where assets are endangered, comparisons with European and international anti-terror lists, compliance with tax control and reporting obligations and archiving of data for the purposes of data protection, data security and inspection by tax and other authorities. Moreover, the disclosure of personal data may be necessary as part of official/judicial measures for gathering evidence, criminal prosecution or enforcing civil claims.

3. Data categories processed by us, insofar as this data has not been received directly from yourselves, and origin

Permissible personal data gleaned from other companies or other third parties (e.g. credit agencies, address database publishers) is processed, where this is necessary for rendering our services. Furthermore, we process personal data that we have legitimately taken, obtained or purchased from reliable sources and are legally able to process, including publicly available sources (such as telephone directories, commercial and association registers, civil registers, debtor registers, press, Internet and other media).

Relevant personal data categories may include, in particular, the following:

• Personal data (name, date of birth, place of birth, gender, nationality, marital status, occupation/industry and comparable data)
• Contact details (address, email address, telephone number and similar data)
• Address data (registration details and comparable details)
• Confirmation of payment/available funds from banks and credit institutes
• Information regarding your financial situation (credit status, including credit score, i.e. data for assessing economic risk)
• Customer history, order history, including clothing sizes
• Data pertaining to the use of telemedia services we offer (e.g. time when our websites, apps or newsletters, IP address, our pages/links clicked on or entries and comparable data were clicked on)
• Image and video data

4. Recipients or categories of recipients of your data

Members of the Jack Wolfskin group listed under 1. above refer to internal offices or organisational units that receive your data, in order to comply with our contractual or legal duties, or which require your data for handling or implementing our justified interest. Your data will only be forwarded to external parties

• as part of processing contracts (e.g. including payment services providers);
• in conjunction with advertising campaigns undertaken by Jack Wolfskin Stores, when it is sent to Jack Wolfskin Store operators;
• where you have a customer account or take part in a Jack Wolfskin loyalty scheme, in conjunction with registering for your customer account or a Jack Wolfskin loyalty scheme as well as making a purchase in a participating Jack Wolfskin Store or from the official Jack Wolfskin Online Shop to the Jack Wolfskin Store operators;
• for the purpose of complying with legal requirements, according to which we are required to provide data or pass on data if deemed to be in the public interest (see 2.4 above);
• Where external service providers act as commissioned sources or take over tasks and process data on our behalf (e.g. external data centres, support/maintenance of computers/IT applications, providers of evaluation, chat and comment functions, archiving, document processing, call centre services, compliance services, controlling, data screening for anti-money laundering purposes, data validation or plausibility checks, data destruction, purchasing/procurement, customer administration, letter shops, marketing, media technology, research, risk controlling, billing, telephony, website management, auditing services, banks and credit institutes, printers or companies involved in data disposal, courier services, logistics);
• as a result of a justified interest on our part or the justified interest of a third party as stipulated in 2.2 above (e.g. by authorities, credit agencies, debt collection agencies, solicitors and lawyers, courts, assessors, companies as well as committees and supervisory bodies belonging to the company group);
• if you have consented to your data being passed on to third parties.

With the exception of the above, your data will not be forwarded to third parties. Where we commission service providers as part of order processing, your data is subject to the same security standards there as with us. In other instances, recipients may only use the data for the purpose intended when the data is sent to them.

5. Duration of data storage

We process and store your data for the duration dictated by our business relationship. This also includes the time leading up to the contractual relationship (pre-contractual legal relationship) and performance of a contract.

Furthermore, we are subject to various legal retention and documentation requirements, including those subject to the German Commercial Code (HGB) and German Tax Code (AO). Periods for storage or documentation specified in the respective legal arrangement are up to ten years over and beyond the end of the business relationship or pre-contractual legal relationship.

Further, special legal requirements may necessitate longer retention periods such as safeguarding evidence as part of the statutory statute of limitations. In accordance with Sections 195 et seq. of the German Civil Code (BGB), the regular statute of limitations period is three years; there are instances where the statute of limitations applies up to 30 years.

Where data obligations are no longer required for fulfilment of contractual and legal obligations and rights, data is deleted regularly, unless - temporary - further processing is required for the purposes stated under 2.2 above due to an overriding legitimate interest. Such an overriding legitimate interest also exists where, for example, a deletion is not possible or would require undue effort as a result of the special type of storage, and processing for other reasons cannot be done by means of suitable technical and organisational measures.

6. Processing your data in a third country or by an international organisation

Transmitting data to parties in states located outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) or to Switzerland will only take place if deemed necessary to perform an order/contract from or with yourself, where prescribed by law (e.g. tax reporting reasons), as part of a justified interest on our part or by a third party, or you have given us your consent to do so.

In this respect, the processing of your data in a third-party country may also take place in conjunction with the involvement of service providers in the context of order processing. Where there is no resolution passed by the EU Commission on an appropriate level of data protection for the country in question, we guarantee that your rights and freedoms are adequately protected in accordance with the EU data protection regulations through appropriate contracts in accordance with Art. 46 Para. 2 c) GDPR and Art. 16 Para. 2d DSG . Detailed information in this respect is available upon request.

Information on appropriate or reasonable guarantees, as well as the possibility of obtaining a copy from you, can be requested from the company Data Protection Officer.

7. Your data protection rights

Under certain conditions, you are able to assert your data protection rights against us

• You are entitled to request information from us about your data stored by us in accordance with the provisions governing Art. 15 GDPR (possibly with restrictions under Section 34 of the BDSG) and Art. 25 DSG (possibly with restrictions according to Art. 26 DSG).
• Any stored data about you will be corrected upon your request and in line with Art. 16 GDPR and Art. 32 Para. 1 DSG, should this be inaccurate or incorrect.
• If you request us to do so, we will delete your personal data in accordance with the principles of Art. 17 GDPR and Art. 32 Para. 2c DSG, insofar as other legal provisions do not oppose this (e.g. legal storage obligations or restrictions according to Article 35 of the Federal Data Protection Act (BDSG)) or there is an overriding interest on our part (e.g. to protect our rights and claims).
• Taking into account the requirements of Art. 18 GDPR and Art. 32 Para. 2a DSG, you may request restricted processing of your data.
• Further, you can object to the processing of your data in line with Art. 21 GDPR, meaning that we have to stop processing your data. However, this right to object will only apply – except for direct marketing in accordance with Art. 21 Para 2 GDPR – under very special circumstances in your personal situation, wherein our applicable company rights may oppose your right to object. More detailed information pertaining to your right to object can be provided under 10 below.
• You are also entitled to receive your data in a structured, commonly used and machine-readable format or to transmit it to a third party in line with the prerequisites of Art. 20 GDPR or Art. 16 of the Swiss Data Protection Regulation (DSV) in writing or in the format, in which the data is available.
• Moreover, you are entitled to revoke any consent given regarding the processing of personal data with respect to the future (see 2.3 above).
• Further, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You are also welcome to contact our Data Protection Officer in confidence at any time. You do not have the right to lodge a complaint with the Swiss Data Protection Officer.

Any application to exercise your rights should, wherever possible, be made in writing and sent to the aforementioned address or addressed directly to our Data Protection Officer.

8. Scope of your duties to provide your data

You only need to provide data that is necessary for us to be able to establish and conduct a business relationship or for a pre-contractual relationship or details that we are legally obliged to collect. If we do not have this data, we are generally not able to enter into or carry out the requested agreement or, indeed, to comply with our legal obligations. This may also apply to data that is required later on in the business relationship. Where we request additional data from you, you will be made aware, separately, that the information concerned is made on a voluntary basis.

9. Existence of automated decision-making in individual cases (including profiling)

We do not employ any purely automated decision-making processes in accordance with Art. 22 GDPR and Art. 5g DSG. Should we ever use this method on an individual basis in the future, we will inform you separately where this is legally prescribed.

In some circumstances, your data is sometimes processed with the aim of assessing certain personal aspects (profiling).

Evaluation technologies and methods are used, where applicable, in order to let you know about specific products and to be able to advise you in a targeted manner. These are described in more detail in our extended data protection statement for our website. These enable needs-based product design, communication and advertising, including market and opinion research.

These procedures may also be used to be able to assess your credit rating and creditworthiness as well as to combat money laundering and fraud. “Credit scores” are used to determine your credit rating and/or creditworthiness. As far as a credit score is concerned, a mathematical process is applied to determine the probability with which a customer will meet their contractual payment obligations. These scores help us to e.g. assess the creditworthiness, the decision-making process in the context of product deals, and are incorporated into our risk management. The calculation is based on mathematically and statistically recognised and proven methods and is based on your data, especially income, expenses, current liabilities, occupation, employer, length of service, experience from past business relationship, contractual repayment of previous loans as well as information provided by credit agencies.

Details on nationality and specific categories of personal data in accordance with Art. 9 GDPR and Art. 5c DSG are not processed.

10. Detailed information on your right to object Art. 21 GDPR

1. 1. You have the right, at any stage, to object to the processing of your personal data that is done as a result of Art. 6 Para. 1 f GDPR (data processing for the purposes of pursuing legitimate interests) or Art. 6 Para. 1 e GDPR (data processing carried out in public interest) if there are reasons for this that emerge from your particular situation. This is also true for profiling based on this provision within the context of Art. 4 (4) GDPR.
   If you object, we will no longer process your personal data, unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. 2. We may also process your personal data, in order to conduct direct marketing. If you do not wish to receive advertising, you have the right to object to this at any time; this also applies to profiling, insofar as it is associated with such direct marketing activities. We will take this objection into account for future activities.
   Data will no longer be processed for purposes of direct marketing if you object to the processing of your data for these purposes.

The objection can be made informally and can be addressed to n

Jack Wolfskin Ausrüstung für Draussen GmbH & Co. KGaA
Jack Wolfskin Kreisel 1
65510 Idstein/Ts.

Our data protection statement as well as information on our data processing as part of data protection in line with Art. 13, 14 and 21 GDPR and Art. 19 and 20 DSG may change from time to time. Any amendments made will be published on this site. Older versions can be viewed in an archive.

Data protection information last updated: 16.01.2023

---

JACK WOLFSKIN Retail GmbH, a private limited company, founded under the laws of Germany and entered in the commercial register of the District Court of Wiesbaden under HRB 24710, with registered offices at Jack-Wolfskin-Kreisel 1, 65510 Idstein/Ts., Germany (hereinafter referred to as “we”, “us” or „JACK WOLFSKIN”), is responsible for this website as well as for the internet-based services and applications (hereinafter “website”).

Data protection is an important issue for JACK WOLFSKIN. Consequently, we strictly adhere to the regulations of the German privacy protection and data protection laws as well as the relevant international privacy protection and data protection regulations.

The data protection statement set out below will give you an insight into how we use and protect your personal data if you visit our website.

1. Collection, processing and use of personal data

In some cases, e.g. when registering and using your customer account (e.g. login), filling in forms, during the order process or service requests, you will explicitly transfer your data to us.Here, your data is processed for the purposes stated in Section 1 Subsection 2, unless further or other information is provided below.

Consequently, we will use and process your data, as stated below, depending on the case in question:

• Your contact information (e.g. name, address, email address, phone number, date of birth);
• Information to carry out your order (e.g. information on items ordered, delivery and billing details and payment information such as e.g. bank, credit card or other payment details);
• Information on orders and services (e.g. order and contact details/order history, details about defective items, previous correspondence);
• Other information that you have explicitly provided (e.g. your personal profile, registration data, product references, wish lists/notepads, ratings and comments, chat messages, data relating to bonus and loyalty programmes (e.g. Jack WolfskinCard), etc.).
  
  Any personal data that you provide to us as a result of using our website will be processed by us in the manner set out in our data protection statement.

2. Credit check and debt collection

2.1 Klarna's data protection policy

To be able to offer you Klarna’s payment methods, it may be that we pass on your personal data (i.e. contact and order data) to Klarna during checkout. As a result, Klarna decides which payment methods and conditions can be offered to you. Personal data submitted will be processed in accordance with the following provisions.

2.2 Debt collection

Your personal data is transferred to Paigo GmbH, Gütersloher Str. 123, 33415 Verl, solely for the purpose of debt collection services

3. Cookies and related data processing

We use cookies and similar technologies (e.g. local storage, session storage) referred to in this data protection statement as "cookies", which store information on end devices (e.g. laptops, smartphones, tablets) or access information already stored on the end device. Our general aim is to make our website even more user-friendly, effective and secure. For instance, cookies are used for the navigation and functionality of our website, where necessary, so that e.g. the current shopping basket status is saved.

First and foremost, we would like to rely on session cookies, which are automatically deleted when you leave our website.

We use cookies, in particular, to optimise and improve the online experience of our website. Consequently, your data is sometimes recorded by us or by a third party commissioned by us through the interaction between your end device and our website. This information may include (but is not limited to):

• Your device's IP address (i.e. IP address of your computer, tablet etc.);
• Information about your use of the website (e.g. time and date of your visit, referral URLs or page views);
• Information about your device (e.g. type and version of your internet browser and version of your operating system).
  This data can be used to generate user profiles. Cookies can also be used for this.
  The storage of information such as cookies and other technologies in your end device, or access to information already stored in your end device is only carried out if you give your consent (e.g. Section 25 Para. 1 TTDSG). Consent is not required if the sole purpose of storing information in your end device or the sole purpose of accessing information in your end device is to carry out the transmission of communication over a public telecommunications network or if it is strictly necessary, in order for us to provide you with a telemedia service that you have specifically requested.

Cookies used on our website are subdivided into the following categories. By adjusting cookie settings at any time, you can specify which cookie categories you would like to activate and which you would like to deactivate.

3.1 STRICTLY NECESSARY

Cookies are used to guarantee the basic functions of our website, e.g. shopping basket. Our website does not work without these cookies. Consequently, these settings cannot be deactivated if you wish to use our site.

3.2 PERSONALISATION

Cookies help us personalise our website for users. Based on your last visit to our website and the knowledge collected there about your behaviour in our Online Shop, we are able to make suitable product suggestions on our website via our Online Shop system (Salesforce Einstein). For example, the website's homepage may contain products that were of interest during the last website visit.

Personalisation basically involves the use of cookies to improve your user experience with us in the Online Shop. This does not include any advertisements or marketing measures outside the context of our Online Shop.

3.3 STATISTICS

3.3.1 DYNAMIC 1001

The dynamic tracking system is used to measure the performance of the Jack Wolfskin Online Shop’s different advertising channels. It is provided by our technical and statistical service provider Dynamic 1001 GmbH.

When you visit the website https://www.jack-wolfskin.co.uk data from your browser is collected for statistical analysis. Data is passed on to Dynamic 1001 GmbH as a technical and statistical service provider.

Data is collected via a pixel that is embedded in the pages of our Online Shop. Information such as the operating system, browser used, associated advertising material, referrer (i.e. from which web page the user is forwarded) and the IP address are stored anonymously when you come into contract through contact with the Dynamic servers.

When an order is placed, data such as order number, customer number, shopping basket and the order value are transferred to Dynamic 1001 GmbH, so that they can pass on the correct commission to the advertising partners. Cookies and pixels are used to collect data.

This is based on your consent, which you can revoke in our consent management platform or activate or deactivate yourself via your browser settings.

Personal data mentioned above is stored for a maximum of two years.

3.3.2 GOOGLE ANALYTICS

a) General use of Google Analytics

We use "Google Analytics" on our website, a service provided by Google Ireland Limited, Ireland ("Google") to analyse websites if and insofar as you have given us your consent to do so (Art. 6 Para. 1a) GDPR or Art. 31 Para. 1 DSG, in order to process your personal data; Section 25 Para. 1 TTDSG for the use of cookies and similar technologies, see also section 3).

Google Analytics helps us to obtain information about recent visits to our website and how users move around the different areas of our website, so that we can analyse this and understand how users make use of our website, but also so that we can make our website even better for our users, particularly more intuitive. Google Analytics helps us, in particular, to measure how users interact with websites and the content of websites. The following data is processed: online, cookie, client and device identifiers – i.e. IP addresses.

Google acts as our processor, meaning that Google only processes the aforementioned personal data on our instructions. We are responsible for the data processing.

Google Analytics also uses cookies to analyse how you use the website. Cookies are small text files saved on your computer. The information about your visit to our website collected via cookies, including your IP address that has been anonymised before saving using the “anonymizeIp” method, so that it can no longer be traced back, is transferred to a Google server in the USA and saved there.

By anonymising the IP address, only a shortened version of IP addresses from Member States of the European Union or the European Economic Area is transmitted to Google in the USA. Only in specific cases will the complete IP address be transferred to the Google server in the USA and shortened there.

On behalf of this website’s operator, Google uses this information to analyse your use of our website. Reports are created for this purpose, with which we can see how users behave on the website. However, we cannot (and do not want) to identify users in this context. We only wish to see, for example, that a user arrived on the website via a Google search query, looked at shoes and then left the site again. Other reports show us which subpages are accessed and how often.

You can prevent the storage of cookies and the processing of the aforementioned personal data by revoking your consent in our consent management platform or by changing the corresponding settings in your browser. You can also deselect here: https://tools.google.com/dlpage/gaoptout?hl=de

Your personal data, as stated above, is stored for a maximum of 26 months.

We use Google Analytics – described in more detail below – for the following:

• when you have given your consent
• with server-side tracking and
• with enhanced conversions.

Providing personal data is neither contractually nor legally required, and it is not necessary in order to conclude a contract. If you do not provide your personal data, this will have no impact on you.

Automated decision-making in line with Art. 22 GDPR or profiling according to Art. 5 g DSG does not take place.

Further information and deselection options are available at:https://policies.google.com/privacy (Privacy Policy) and at https://support.google.com/analytics/answer/6004245?hl=de.

b) Google Analytics - consent mode

We use Google Analytics on our website, along with the "consent mode", a Google feature. The Google Analytics consent mode works in such a way that advanced settings can be made for marketing and analysis in conjunction with Google Analytics.

With the help of the Google Analytics consent mode, you can decide whether you wish to allow cookies for advertising and/or analysis purposes in conjunction with Google Analytics. If you do not wish to allow advertising via the consent mode, no cookies are used for advertising. Initially, only our analyses remain unaffected if we set a cookie ourselves. However, we will not use our cookies for analysis if you have opted out. In instances where you have opted out of cookies for advertising and analysis in conjunction with Google Analytics, we are sent a cookie-free ping that helps us better understand our advertising efforts without cookies:

we have preset that the user's consent is required on our website before Google Analytics is used for advertising purposes. How the consent mode works and what data is collected depend on what type of consent you give. You can decide for yourself - as described above - whether certain tracking codes or associated code fragments (i.e. tags) and cookies on our website may be used for advertising and/or analysis purposes or not ("tag granted" or "tag denied"). This is a solution from Google to further strengthen privacy protection.

If you have consented to the consent mode, "cookieless pings" are also transmitted to us. Pings are sent from every page of our website on which Google Analytics is integrated. These pings may include the following information: time stamp; user agent; referrer; randomly generated number for each page loaded; indication of consent status; indication of whether the current page or the page before it in the user's navigation to the page contained advertising click information in the URL (especially "Google Click Identifier" (GCLID), see below); information about the consent management platform used (e.g. developer ID) and other information we may select (e.g. order number, conversion value). We have selected the following information: time stamp, user agent, referrer, ad click information, Boolean information about consent status, a generated random number. These pings increase the accuracy/precision of "modelling" (see below).

Furthermore, we use the "Enable URL pass-through" function. This function enables Google Click Identifiers (GCLID) to be appended to the URL. This parameter is passed to the URL when an ad is clicked, thus allowing the ads to be associated with our advertising campaigns. In a few instances, this also already done when the advertisement is displayed. We link the data with Google Ads and Google Analytics functions, and offline conversion tracking is also carried out by us. This helps us to manage our marketing activities more efficiently and to show users only ads that are relevant to them. These identifiers are only stored if the user agrees to Google Analytics.

Due to information available to us as part of your consent via the consent mode, we are able to process data as described under Google Analytics consent and this privacy policy.

Modelling is also carried out where we receive more detailed information that enables us to report or optimise our advertising activities. Modelling allows us to better quantify the impact of our marketing efforts and is done using a so-called prohabilistic method, i.e. it takes probabilities into account. This is done using available data that enables modelling via the use of machine learning and historical trends. Relevant data for us here is, for instance, which source an anonymous user used to reach the website and whether they looked at a product or put it on the watch list. As far as we are concerned, the extent to which you as a user represent a "conversion" is taken into account. Conversion is relevant for us in terms of our advertising activities and is therefore counted. The fact whether a product is added to the shopping basket, the user behind this is unknown and also not relevant for the modelling, it is exclusively about the behaviour of the unknown.

As part of Google Analytics consent mode, the following personal data is processed, provided that consent for statistics and marketing has been obtained: your IP address (also anonymised), the URL (including advertising click information in the URL parameters such as GCLID), advertising and analysis cookies and device IDs. Moreover, information displayed is processed as part of the pings. If no consent is given, the IP address is recorded anonymously and deleted after the country information is recorded. Advertising and analysis cookies are not collected.

We process data in the consent mode to close the gaps in conversion measurement if we are unable to link user interactions to conversions.

We store your data in connection with the consent mode for max. 26 months.

c) Google Analytics with server-side tracking

We also use Google Analytics with server-side tracking.

Server-side tracking replaces client-side tracking in that data between the user's end device and the website is no longer transmitted via the browser but via data that the server requests, in order to show the user the desired website. Furthermore, the events on the website are no longer loaded independently by scripts of external partners after receiving consent, but the sovereignty now rests with Jack Wolfskin directly.

Data received on our servers includes First Party Identifier (FPID), which is stored via a cookie in your browser. The cookie is set with the HttpOnly flag, meaning that it is not accessible to JavaScript in the browser. Only the web server can read the cookie's value. This prevents cross-site tracking, as JavaScript-readable cookies are often used for cross-site profiling. In our case, data is then forwarded to Google Analytics, so that we can create analyses of visitor behaviour on our website in conjunction with server-side tracking, in order to continuously improve the website. It is therefore not possible for us to draw any conclusions about a specific user.

Data processing via our cloud, the Google Cloud, which is also provided by Google Ireland Limited by way of commissioned processing, takes place in Frankfurt.

Data is also stored in conjunction with the use of server-side tracking for 26 months (Google Analytics).

d) Google Ads Enhanced Conversion

We use Google Ads Enhanced Conversion for people who surf the internet with a registered Google account. In online marketing, conversions are generally considered as the execution of a desired action by the user. For “enhanced conversion”, however, only the online purchase (i.e. a conversion) is relevant.

For example, you can reach our website via advertising and turn into a buyer of one of our products after using our website. Google Ads Enhanced Conversion enables us to measure the success of our advertising measures in this context even more precisely. This generally works by clicking on one of our advertisements (e.g. on YouTube) and being redirected from there to our website. If you buy something from our website, your email address is collected and forwarded to Google in a secure hashed form for enhanced conversion. The fact that your data has been hashed means that it is not possible to draw conclusions about the content and length of the data (hash standard SHA256). If your data is with Google, the hashed data sent by us is matched with the advertising event data collected and hashed by Google with the desired action, in order toclarify the conversion (i.e. assign it to our marketing measure).

We use Google Ads Enhanced Conversion in the tag-based version. If a logged-in user (e.g. on YouTube) clicks on an advertisement, he or she is redirected to our website and enters their data (e.g. email address) in a field selected by us in the context of an order, which is then hashed and securely transmitted to Google. Google "matches" the hashed user data with the hashed user data stored there and reports the conversion to us.

Conversion modelling can also be used in this process. Please refer to our explanations concerning the Google Analytics consent mode.

The reason why we process your data is the efficient control and ongoing optimisation of our marketing measures and our Online Shop configuration.

When using enhanced conversion, data is received solely by Google.

Your data is stored for 26 months.

3.3.3 Adobe Analytics

We are also able to use "Adobe Analytics" on our website, a statistical web analysis from Adobe Systems GmbH, Georg- Bauchle-Ring 58, 80992 Munich, Germany, if and insofar as you give us your consent to do so (Art. 6 Para. 1 a) GDPR or Art. 31 Para. 1 DSG). This technology collects statistical data about visits to our website for optimising our website and improving our services. Data collected is only passed on to Adobe Systems GmbH. Adobe's technology also uses cookies (i.e. text files) which are saved to your computer to analyse how you use the Internet. As your IP address is anonymised before it is passed onto Adobe Systems GmbH, it is not possible to identify an individual user. Adobe technology works with session cookies, which are deleted at the end of your internet browsing session.

You can prevent the use of cookies and the processing of personal data mentioned above by revoking your consent in our consent management platform, accessible here, or by changing the corresponding settings in your browser.For more information on Adobe Systems GmbH data protection policy, please visit:
https://www.adobe.com/de/privacy/policy.html

If you have any questions about the data collected by Adobe Analytics, please contact us at info@jack-wolfskin.com.

3.3.4 GOOGLE RECAPTCHA

We integrate the function for detecting bots such as when making entries in online forms ("ReCaptcha") from Google Ireland Limited (= provider), Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

You can find the Google data protection policy here:
https://www.google.com/policies/privacy/
It is also possible to deactivate it using the following link:
https://adssettings.google.com/authenticated

3.3.5 Improving the presentation

This site uses web fonts for a uniform display of fonts, which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

If your browser does not support web fonts, a standard font is used.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy at https://policies.google.com/privacy?hl=de .

3.4 MARKETING

We use cookies to provide you with certain social networking features, to measure and optimise our advertising campaigns as well as targeting them to appropriate users. This also involves retargeting. Retargeting in online marketing is the process by which a visitor to a website is tagged and subsequently targeted with adverts on other websites. Cookies lasting up to 90 days are also used for this.

As with website tracking, data is also collected pseudonymously here. Jack Wolfskin uses the services of the following service providers to implement its online marketing measures:

• Google DV360
  Our website uses Google DV360 developed by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, USA (processor), which processes data for analysis, marketing and optimisation purposes. This includes data analysis and retargeting, thereby helping us to improve our marketing measures and our website. Personalised advertisements for our products are displayed based on a user's online behaviour, depending on the user's interest or potential interest in our products. The efficacy of our advertisements is also measured. Consequently, data such as online, cookie, device and client identifiers as well as IP addresses are processed and used via Google DV360 to link advertising contacts and clicks on advertisements with your use of our website. This allows us to determine whether you are visiting our website through ads you have seen or what products you are interested in,and helps us to use our advertising budget more efficiently. Data collected may also be used by us to deliver advertising based on your interests (e.g. products viewed). Pseudonymous online identification numbers (online ID) such as cookie IDs, IP address, device IDs, advertising ID / IDFA (e.g. on Android or Apple smartphones) are used to collect data. No unique user-related data such as your name or address is stored. All IDs used allow us to recognise your end device or your internet browser. The above data is not used for the aforementioned purposes without your consent. Consequently, the legal basis for data processing is your consent in accordance with Art. 6 Para. 1a) GDPR or Art. 31 Para. 1 DSG. If you do not wish Google DV360 to collect data (any more), you can proceed as follows:

You can revoke your consent in our consent management platform or deactivate the information directly at Google
https://adssettings.google.com/authenticated
Your aforementioned personal data is stored no longer than for 13 months.

• Taboola
  You can also use the NAI Opt Out Tool to opt out of receiving targeted advertising from Taboola and from other NAI member companies.
  
  
  
• Google Analytics
  We also use Google Analytics to measure our marketing activities. For details, see 3.3.2 above.
  
  
• AWIN
  We process your personal data such as user browser data and order ID, in order to carry out an affiliate marketing campaign. This enables us to track which third party website, app or other technology provider has referred potential customers to our websites and apps ("referrer"). In return, we are able to pay the referrer a commission for those referrals to our website. We wish to run online advertising campaigns that are remunerated according to performance. We work with Awin, which helps us to implement this affiliate marketing campaign. You can find the Awin data protection policy here. It contains information about your rights in relation to data processing by Awin.

In some instances, Awin may maintain a restricted profile that relates to you. However, this will not reveal your identity, online behaviour or other personal characteristics. The sole purpose of this profile is to track whether a forwarding was started on one device and completed on another.

In some cases, Awin and the referrer may receive and process your aforementioned personal data, in order to implement the affiliate marketing campaign together with us. Likewise, we receive personal data of potential customers from Awin and the referrers, which can be subdivided into the following categories: cookie data, data relating to the website, app or technology from which a potential customer was referred to us and technical information about the device you are using.

Your personal data is stored for no longer than 36 months.

• Target Performance GmbH
  Target Performance GmbH allows us to participate in advertising auctions for advertising space and to display advertising content on websites. Target Performance GmbH enables target group-specific or user-oriented advertising based on the users' interests.

Cookie IDs, mobile advertising IDs, cross-device IDs, partner IDs are used, browser type and browser settings, information about the operating system of the end device used by the user, IP addresses, information about a user's interaction and activity on websites and mobile applications, including the time of interaction or activity, the Internet addresses involved and the search terms entered in a search engine, as well as location information (city, region, postcode) are processed. The data is collected both from the user and from third parties.

If you do not want retargeting, you can also click on the following link:
https://ad.ad-srv.net/privacy/672p1lyu7kil/

• Emego GmbH
  Emego GmbH supports us in carrying out on-site advertising measures based on the user’s consent. Here, target groups are created from the users’ behavioural data. This is then used for targeted management and implementation of on-site campaigns.

Specifically, the following data is processed:

• Time of the visit to the website

• URL

• Browser used (e.g. Firefox, Safari, Internet Explorer ...)

• Operating system used (e.g. Windows 11, Apple OS, ...)

• Screen resolution

• Referrers transmitted

• Data transmitted via the tracking pixel used

Besides revoking consent, data processing can be stopped at any time by clicking on the following link:
http://www.usemax.de/index.php?l=rm&kunde=&id=1

• Outbrain
  Outbrain Inc., 39 W 13th Street New York, NY 10011, USA, makes it possible to target those Internet users with advertising who have already shown interest in our offers on the pages of our partners, or to collect data about them. The technology depends on cookie-based analysis of user behaviour. These ads will only appear on Outbrain ad spaces – either Outbrain Engage ad spaces or the Outbrain Extended Network. If you do not wish to be shown interest-based advertising, you can also deactivate this function here:https://www.outbrain.com/legal/privacy#advertising_behavioral_targeting
  
  
• Google AdWords / Google Ads
  With the help of Google Adwords, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, USA, we display interest-based advertising about our products based on the user's online behaviour and profile, and measure the effectiveness of our ads. Advertising is provided and displayed, including limiting ads and not displaying ads that are not desired by the user. Advertisements are also specifically personalised, whereby this depends on the user's settings. The legal basis for data processing is consent in accordance with Art. 6 Para. 1a) GDPR or Art. 31 Para. 1 DSG.

The following data is processed, also in the USA: online, cookie, device and client identifiers and IP addresses.

The duration of processing is 13 months .

Besides revoking consent, settings for data processing are also possible at any time by going to the following link:
https://adssettings.google.com/authenticated

• Facebook / Meta
  With the help of Google Adwords, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, USA, we display interest-based advertising about our products based on the user's online behaviour and profile, and measure the effectiveness of our ads. Advertising is provided and displayed, including limiting ads and not displaying ads that are not desired by the user. Advertisements are also specifically personalised, whereby this depends on the user's settings. The legal basis for data processing is consent in accordance with Art. 6 Para. 1a) GDPR or Art. 31 Para. 1 DSG.

The following data is processed, also in the USA: online, cookie, device and client identifiers and IP addresses.

The duration of processing is 13 months .

Besides revoking consent, settings for data processing are also possible at any time by going to the following link:

https://adssettings.google.com/authenticated

▪ Facebook/Meta

We use Meta services for advertising, recommendations, insights and measurement.

The following data is processed:

-HTTP header: IP address, browser info, referrer URL, page location, pixel-specific data: pixel ID, meta cookie (fr, fbc, fbp). Other data: form field designations (not values), page meta data

The data processing is based on the respective consent according to Art. 6 Para. 1a) GDPR or Art. 31 Para. 1 DSG.

The duration of data processing is up to two years.

Further information is available athttps://www.facebook.com/privacy/policy/

Settings for data processing are also possible at any time under the following link:https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

• Pinterest/br>We use the Pinterest ad service for our advertising. This also measures the effectiveness of our advertising and is targeted to the user target groups in a targeted manner.

Conversion data is processed, i.e. data on purchases and website activities that are made available to us, for example, via a Pinterest tag, conversion upload or via so-called mobile measurement integration. The conversion data is described in more detail below:

The data collected by the Pinterest tag includes HTTP header information transmitted by a standard HTML tag call, including: IP address, user agent and cookie IDs; optional unique identifiers such as OrderID and email address; and optional purchase-related parameters.

The following data is included in mobile measurement integration: Device identifier (such as an IDFA) and other information about the mobile device.

User-defined modelling does not take place.

Conversion data is used for advertising (targeted), i.e. data is relevant to adverts and ad reporting, as well as for measuring ad effectiveness. Pinterest itself may also use conversion data to optimise its own models used in the recommendations and ads provided by Pinterest (e.g. for conversion optimisation), also in combination with data from Pinterest or data from other sources, and train these models.

If we wish to advertise something to a specific target group, we also provide Pinterest with a customer list target group via a corresponding function, so that we can target the advertising campaign to these target groups.

In order to be able to carry out the respective advertising measure, a unique identifier such as a customer email address, an identifier for mobile ads (IDFA) or another identifier is matched by Pinterest in hashed form, in order to assign users to a Pinterest account and to be able to play out targeted advertising via target groups. Once the appropriate matching has been done, all identifiers that we have provided to Pinterest are deleted.

Further information is available at:

1. Pinterest data protection policy: https://policy.pinterest.com/en/privacy-policy
   
2. Pinterest advertising services agreement: https://business.pinterest.com/en/pinterest-advertising-services-agreement/
   
3. Pinterest ad data terms https://policy.pinterest.com/en/ad-data-terms
   

Data processing is done in the USA and Ireland and exclusively on the basis of consent pursuant to Art. 6 Para. 1 a) GDPR or Art. 31 Para. 1 DSG.

• Interactive Performance Germany GmbH
  This website uses technology from Interactive Performance Deutschland GmbH https://interactiveperformance.de
  and its technology partners to process data such as the user's shortened IP address, the usage behaviour on our website for optimisation and marketing purposes, specifically remarketing . This data is also used to analyse visitor behaviour and to create pseudonymous user profiles. Cookies are used for this, which enable an Internet browser to be recognised on a subsequent visit. Without your express consent, the aforementioned data is not processed for these purposes (Art. 6 Para. 1 a) GDPR or Art. 31 Para. 1 DSG), nor will any of the cookies described in more detail be set. Visitors' IP addresses are shortened before storage.

The aforementioned personal data is processed for a maximum of 30 days.

• Twiago
  Data processing can also be stopped at any time using the following link:
  https://control.twiago.com/privacy.php?lang=0
  
  
• Passcreator
  With Passcreator, Walter-Gropius-Str. 15, 80807 Munich, we can create Apple Wallet and Android Wallet cards for our Jack WolfskinCard, so that the user does not need a physical card. Rather they can show their Jack WolfskinCard at any time via their mobile device. The data processing concerns the name, the JackWolfskin card number and the e-mail address.

The duration of the processing is up to two years and is based on consent.

Further information is also available in the data protection policy:https://www.passcreator.com/de/datenschutzerklaerung.html

• Bazaarvoice
  We use Bazaarvoice Inc, 10901 Stonelake Blvd, Austin, Texas, USA to collect product and shop reviews.

Bazaarvoice allows us to receive reviews from you about products and our Online Shop and to respond to your reviews. Your email address is used as well as information about which products you have purchased.

The processing takes place on the basis of consent.

You can find more information about data protection at Bazaarvoice here:https://www.bazaarvoice.com/de/legal/datenschutzrichtlinie/

• Criteo
  Our website uses cookies/advertising IDs for advertising purposes. This allows us to show our ads to visitors interested in our products on partner websites, apps and emails. Retargeting technologies use cookies or ad IDs and show ads based on your previous browsing behaviour. The use of these cookies or advertising IDs as well as the processing of personal data for the purposes described (Art. 6 Para. 1 a) GDPR or Art. 31 Para. 1 DSG) is based on your consent.

We may share information such as technical identifiers from your registration information on our website or our CRM system with trusted advertising partners. This means that your devices and/or environments may be linked because we and our advertising partners recognise them. This enables us to show you our advertising in a targeted manner, which is what we understand by retargeting described above.

• Amnet GmbH
  Use of Amnet technology (Amnet GmbH)
  We use the services of Amnet GmbH (Alsterufer 3, 20354 Hamburg) to remunerate sales partners. Specifically, this means that information is collected, measured and analysed about recent visits to the website related to lead or purchase events carried out by the user and relevant to one of our advertising campaigns, in order to also document referred customers and transactions that have taken place and to determine whether or not the transaction is related to any of Amnet's channels. Here, a single click-related or session-related ID is obtained from a GET parameter in the current URL and stored in a cookie. These cookies solely serve to correctly assign the success of an advertising medium of the sales partner and the corresponding billing. Personal data is not collected, processed or used in this context. Only the information about when a particular advertising medium was clicked on by an end device is placed in a cookie.

This is based on the consent you have given in advance.

You can prevent the use of cookies by revoking your consent in our consent management platform, accessible here.

Personalised advertising campaigns by Amnet GmbH
In order to carry out personalised advertising campaigns, we process certain data about users' online activities on this website. This data includes: online identifiers (e.g. cookie ID/mobile advertising ID), information about specific pages visited, products viewed or added to the shopping basket and subsequently purchased, together with time stamps and technical device and search program details. We commission Amnet GmbH, an advertising technology company, to run advertising campaigns based on this data and to display personalised ads to users. Where this data is "personal data" within the scope of the GDPR or DSG, Jack Wolfskin acts as the controller and Amnet GmbH acts as the processor.

We set the online identifiers described and process personal data listed for the purposes described on the basis of your consent. You can prevent this by revoking your consent in our consent management platform, shown here.

You can also find more information at:
https://www.mediaintelligence.de/privacy-optout.do

• Adtriba GmbH
  Our website uses technology from Adtriba GmbH - Veilchenweg 26b, 20253 Hamburg, Germany (https://www.adtriba.com), from which user profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are evaluated, in order to improve our products, services and design in line with requirements. Cookies may be used for this purpose. These are small text files that are stored locally on the end device of the visitor to the site and thus enable recognition when visiting our website again. The pseudonymised user profiles are not merged with personal data about the bearer of the pseudonym without separate, express consent.This website collects and uses information across apps and devices for reporting purposes. This is explicitly not personal data, from which information about individual users can be viewed and traced back to specific users. Techniques are used to track users across apps and devices, including cookie and ID synchronisation.You can object to the collection and storage of data, at any time, with effect for the future by contacting us at the URL https://privacy.adtriba.com the tracking by Adtriba (opt-out from Adtriba Tracking).
  
  
• SAIZ GmbH
  </brWe use the services of SAIZ on our website(SAIZ GmbH, Nostiltzstr. 23, 10961 Berlin, Germany) (hereinafter: “SAIZ”).
  SAIZ collects, processes and stores the personal details of visitors to our website in order to provide personalised size and fit recommendations, statistical analysis and business cost optimisation.
  In this respect, when visitors come to our website and consent to having their personal data (as described below)
  processed by SAIZ, the following information, in particular, is processed:
  

• Age
• Gender
• Height in cm
• Chest size
• Hip size
• Waist size
• Weight
• Information on body physique and body shape
• IP address
• Browser information
• Date and time of access
• Referrer URL
• Session ID
• Time stamp
• Anonymised usage data
• Purchase information
• Device’s operating system

SAIZ collects this data using persistent cookies that remain on the user’s device who has visited the website.
SAIZ stores the profiles of the respective visitor in the local browser of the visitor to the website.The data, thereby collected, is processed by SAIZ in the European Union.

Provided the aforementioned data is neither required by law nor prescribed in contracts, and is not required for concluding contracts, there is no obligation to provide this data.
Where the aforementioned data is not provided, we are unable to provide the content that has been requested, nor are we able to make a size recommendation.

The purposes of collecting and processing data by SAIZ are:

• Calculating size (size recommendation, testing the fit of the products)
• Promoting sales and/or increasing turnover by means of cost optimisation (size recommendation, testing the fit of theproducts)
• Marketing purposes (customisation and testing the fit) as well as
• Analysis purposes (conversion tracking).

The recipient of the data collected is SAIZ GmbH and their external service providers:

▪ DataDog Inc.
▪ Microsoft Corp.
▪ Google LLC
▪ Amazon Web Services Inc

whereby, in connection with the use of these service providers, it has ensured, through appropriate agreements with said external service providers, that the personal data collected is stored on servers in the EU. Nevertheless, it cannot be completely guaranteed that there will be no data transfer to a third country in the course of SAIZ deploying service providers as their subcontractors.

Should there be a processing of personal data in a third country, this may only take place if the special requirements of Art. 44 et seq. GDPR are fulfilled. This includes, in particular, the conclusion of standard data protection clauses ("EU-SCC"), and a so-called "Transfer Impact Assessment" ("TIA") was carried out by SAIZ.The necessary legal basis for the processing personal data by SAIZ is Article 6 (1) 1a GDPR (consent). In other words, the personal data of the respective visitor to the website will only be processed with the prior consent of the visitor to the website.

This consent is obtained via the cookie banner. You can revoke, at any time, your consent to cookie banners. The visitor’s personal data will be deleted as soon as the processing purposes for which they were collected have been achieved, or you have revoked your consent to the collection of data. For further information on the duration of storage, please refer to the website via the cookie banner/cookie settings. You can revoke your consent to having your data processed at any stage via the cookie banner.

Further information on data processing by SAIZ can be found at:

https://www.saiz.io/datenschutz

4. DATA STORAGE

We will only store data received and collected in the Member States of the European Union. When we disclose your information to the recipients described in this data protection policy, they may also process your information outside of Europe, as described. In these cases, we have concluded "standard data protection clauses" in accordance with Art. 46 Para. 2 c) GDPR or Art. 16 Para. 2d DSG (see also Section 1, Subsection 6: Processing your data in a third country or by an international organisation). We will take all reasonable technical and organisational precautions to protect your data from unauthorised use or unlawful publishing, deletion, loss or unlawful changes.

5. SOCIAL PLUG-INS / Social Media

a) Our website is linked to social media and uses social plug-ins ("Plug-ins") of the following social network providers ("Providers") if you have activated them:

• Facebook
  The social network is run by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). The plug-ins(the "like" button) are identified by the Facebook logo or the reference "Facebook Social Plug-in".

You can find the Facebook data protection policy here:
https://www.facebook.com/about/privacy/

• Twitter
  Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (Twitter). These plug-ins are identified by the Twitter logo.You can find the Twitter data protection policy here:
  https://twitter.com/privacy
  
  
• Pinterest
  Pinterest, Inc., 808 Brannan St. San Francisco, CA 94103- 4904, USA (Pinterest). These plug-ins (the "pin-it" button) are identified by the Pinterest logo.

You can find the Pinterest data protection policy here:
https://policy.pinterest.com/de/privacy-policy

• TikTok
  Tik Tok Technology Ltd., 10 Earlsfort Terrace, Dublin D02 T380, Ireland.

You can find the TikTok data protection policy here:
https://www.tiktok.com/legal/page/eea/new-privacy-policy/de-DE

• LinkedIn
  LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

You can find the LinkedIn data protection policy here:
https://de.linkedin.com/legal/privacy-policy?

• Vimeo
  Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.

Information on the Vimeo data protection policy is here:
https://vimeo.com/privacy

• Youtube
  We have embedded YouTube videos on our website, which you can access directly from our website via youtube.com. To be able to view videos on our website, you must activate the respective video by giving your consent. No data is transmitted to YouTube without your consent.

We use plug-ins from YouTube, which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. These plug-ins are identified by the YouTube logo.

You can find the YouTube data protection policy here:
https://www.youtube.com/static?&template=privacy_guidelines

• Flickr
  We use the plug-ins from Flickr, which is run by Yahoo! Inc., 01 First Avenue, Sunnyvale, CA 94089, USA (Flickr). These plug-ins are identified by the Flickr logo.

You can find the Flickr data protection policy here:
https://info.yahoo.com/privacy/de/yahoo/eu/

• Google
  We also use Google Maps on our website so that you can find our stores more easily via interactive maps (e.g. to make an appointment for a consultation). If you activate these interactive maps, data is shared with Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The aforementioned plug-ins enable you to interact with these social networks (e.g. through likes or posts) and the users there (e.g. your network or your friends) or to access content (e.g. videos, interactive maps).

When you are using a website with a plug-in from one of the aforementioned providers and you have activated it by giving your consent, your internet browser is automatically linked with the respective provider's server. The plug-in content is directly transferred by the provider to your internet browser, which integrates the data onto the website.

By integrating plug-ins, the provider sees which websites you have visited. When you are logged into the provider's website, the provider can follow your visit to our website and associate it with your account. When you interact with the plug-in, e.g. by clicking the "like" button or adding comments, your internet browser sends the relevant information directly to the provider,who then stores it.

If you do not wish the provider to capture your data during your visit to our website, you should log out of the providers’ websites before your visit.

You can revoke your consent at any time without affecting the lawfulness of the processing until revocation.

For all further information on the collection and use of data, as well as your rights and settings options for data and privacy protection, please refer to the data protection policy of the respective provider linked above

b) When you visit our websites on our social platforms, you use these websites and functions (e.g. sharing functions, comments, likes, ratings) on the basis of your own decision. Consequently, you should be aware that the providers of these social media platforms themselves process data about you, such as your IP address, for their own purposes. The protection of your privacy is also determined by these social media providers through decisions on the use of cookies or other technologies such as web beacons, JavaScripts, pixels.

Details of data processing in connection with our Facebook Fan Page and our associated joint responsibility under data protection law with Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, can be found in Section 3 (Supplementary Privacy Notice for our Facebook Fan Page).

c) Furthermore, you should know that the aforementioned providers can also use the data collected about you to create user profiles and for advertising purposes. They can link your personal data to your existing user account there. Personal data may be processed even if you do not have a user account with one of these providers or if you are logged out of your user account there.

At the same time, data processing by these providers may also take place outside Europe (especially the USA). To ensure an appropriate level of data protection, we have concluded standard data protection clauses with the providers.

6. Newsletter

If you would like to receive details of our current offers, we would recommend you subscribing to our newsletter.To register, we use the so-called double opt-in procedure, so that you receive the newsletter at your e-mail address, and third parties are unable to use your email address for this purpose. After you have registered, an email is sent to the email address that you have stated, which requires that you confirm that the email address is correct. If we do not receive this confirmation within 72 hours, your data is automatically deleted.

Besides your e-mail address and other information provided by you when registering, we also store your IP address and the time of your logins and, in the case of electronic registration, your confirmation. We store this data to document your registration and to be able to clarify any possible misuse of your personal data. We process your data to send the newsletter (legal basis Art. 6 Para. 1 a) GDPR or Art. 31 Para. 1 DSG).Our newsletter is sent to you via our provider (see below) as part of a commissioned processing contractEmarsys eMarketing Systems GmbH stores your personal details in the EU.For more information on Emarsys eMarketing Systems GmbH data protection policy, please visit: https://emarsys.com/de/datenschutzrichtlinie/

Tracking pixels

Our newsletters contain web beacons or tracking pixels. Cookies are small image files that are stored on our website. When you open the newsletter and download the images, we link your registration data with the specific identification number of the newsletter. This link enables us to evaluate your usage behaviour concerning our newsletter and also our website. This type of tracking is not possible if you deactivate the display of images by default in your email programme (and also do not download images manually), which can lead to the newsletter not being displayed in full or not all functions being usable.The data obtained from tracking is stored for one year from the time you unsubscribed and is then deleted.You may, of course, revoke your consent concerning the receipt of our newsletter as well as the tracking details above at any stage. This is simply done by clicking on the “unsubscribe” link which appears in every newsletter. You can also send an email to datenschutz@jackwolfskin.com or write a letter to the contact address given in the Legal Notice.

Customer match

We collect customer data, including, but not limited to, email addresses, from various sources such as our Customer Relationship Management (CRM) system and the Customer Data Platform (hereinafter: “CDP“). This data is used to improve our marketing measures and your customer experience by tailoring advertising, services and offers to your interests.Provided that you have given us your express consent, we give your personal data in this respect (e.g. email address, first name and surname) to the service provider in charge of our CDP:

Bloomreach B.V.

Fred. Roeskestraat 109

1076 EE, Amsterdam

Netherlands

We signed a data processing agreement with Bloomreach in line with Art 28 GDPR.For details on our Data Protection Regulations, please click here:

For the purpose of customer matching and to display customised advertising, we create so-called customer match lists, meaning that you data stored at Bloomreach may be passed on to our partners. In order to make use of customer match lists, encrypted (i.e. hashed) user data (email address, telephone number, postal address, identifiers specific to a customer) are transferred to our partners and uploaded on their system. Our partners then compare whether the transmitted user data matches the existing data they have. In turn, this can be used to create target groups that can be used to control adverts/campaigns. The process of comparing data can take up to 48 hours. Once the comparison and compliance check have taken place, your data is deleted.

Our partners are:

Meta Platforms Ireland Limited
Block J, Serpentine Avenue, Dublin 4,Ireland
https://www.facebook.com/privacy/policy

Google Ireland Limited Gordon House,
Barrow Street, Dublin 4, Ireland
https://business.safety.google/privacy/?hl=de

Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park,
Leopardstown, Dublin, Ireland 18, D18 P521
https://privacy.microsoft.com/de-de/privacystatement

Emarsys eMarketing Systems GmbH
Zeppelinstr. 2 85399 Hallbergmoos Germany
https://emarsys.com/de/privacy-policy/

This only occurs if we have received your consent. You can revoke your consent at any time with effect from that point onwards. This is simply done by clicking on the “unsubscribe” link which appears in every newsletter. You can also send an email to datenschutz@jack-wolfskin.com or write a letter to the contact address given in the Legal Notice.

Data protection information last updated on 16.01.2023

---

Jack Wolfskin uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, for the information service offered here.

We wish to point out that this Facebook page as well as its functions are used at your own discretion. This is particularly the case concerning the use of interactive functions (e.g. comments, shares, feedback). Alternatively, you can also access the information on this page on our website at https://www.jack-wolfskin.com abrufen.

In connection with Facebook Fan Pages, we are jointly responsible with Facebook for the processing of your personal data under data protection law.

Our joint responsibility extends to analysing with Facebook how you use our Facebook Fan Page. This is done using Facebook Page Insights, which provides us with information about your use of our Fan Page, which is the purpose of the processing. The use of Facebook Page Insights may include demographic data and interactions with the Fan Page. When you visit our Facebook page, Facebook collects, among other things, your IP address using cookies on your end device. We ourselves only receive anonymised statistics and have no access to the processing of the associated personal data. For further information on the above, please click on the following link: https://de-de.facebook.com/help/pages/insights.

As we are jointly responsible for data protection with Facebook, we have concluded a joint responsibility processing agreement in accordance with Art. 26 GDPR. This agreement serves, in particular, to fulfil our responsibility to protect your personal data and to clearly regulate the tasks involved. The essence of this agreement is available at: https://www.facebook.com/legal/terms/page_controller_addendum.

Data collected in this context is then processed by Facebook Ltd. And possibly transferred to countries outside of the European Union. The information received by Facebook and how it is used is described in general by Facebook in its data use policy. There, you will also find details of how you can contact Facebook as well as options for placing adverts. The data use policy can be accessed via the following link:https://de-de.facebook.com/about/privacy.

You can find Facebook’s full data use policy here: https://de-de.facebook.com/full_data_use_policy

Facebook does not, ultimately, give any indication as to how Facebook uses data derived from visits to its pages for its own purposes, to what extent activities carried out on a Facebook page is attributed to individual users, how long Facebook stores this data and whether data gleaned from a visit to a Facebook page is forwarded to third parties. We are therefore unable to answer these questions.

When calling up a Facebook page, the IP address of your end device(s) used for this is transferred to Facebook. According to Facebook, this IP address is anonymised (well at least for "German" IP addresses). Facebook also stores information about its users’ end devices (e.g. as part of the login notification function); this enables Facebook, if necessary, to assign IP addresses to specific users.

If you are currently logged onto Facebook as a user, you will find a cookie with your Facebook ID on your end device. This means that Facebook is in a position to know that you have called up this page and how you used it. This is also true for all other Facebook pages. Facebook buttons embedded in websites allow Facebook to record your visits to these pages and to assign these details to your Facebook profile. These details then mean that content or advertisements can be tailored accordingly.

If you do not wish for this to be the case, you should either look to log out of Facebook or disable the “remain logged in” function, delete the cookies and restart your device. This results in Facebook information that could be used to identify you directly being deleted. Furthermore, you can use our Facebook page without revealing your Facebook ID. If you click on interactive functions of our Facebook page (i.e. like, comment, share, news etc.), a Facebook log-in screen appears. After logging in, you will once again be recognised by Facebook as a specific user.More details on how you can manage and/or delete information about yourself can be found on the following Facebook support pages:https://de-de.facebook.com/about/privacy

For your information – we, as the provider of this information service, do not record or process any data resulting from your use of our service.The latest update on our data protection statement can be viewed here: https://www.jack-wolfskin.co.uk/Data-Protection.html#facebookFanpage

If you have further questions or queries on the information provided, please contact us at socialmedia@jack-wolfskin.com erreichen.

Data protection information last updated 30.07.2024

---

Data protection statement from 31 October 2023

Data protection statement from 16 January 2023

Data protection statement from 26 April 2022

Data protection statement from 01 March 2022

Data protection statement from 20 September 2021

Data protection statement from 22 July 2021

Data protection statement from 29 June 2021

Data protection statement from 16 June 2021

Data protection statement from 10 May 2021

Data protection statement from 27 April 2021

Data protection statement from 11 March 2021

Data protection statement from 05 October 2020

Data protection statement from 03 September 2020

Data protection statement from 27 March 2019

Data protection statement from 1 October 2018

Data protection statement from 27 September 2018

Data protection statement from 27 August 2018

Data protection statement from 18 Juli 2018

Data protection statement from 18 June 2018

Data protection statement from 18 May 2018

Data protection statement for our website from August 2015