Datenschutz
Data protection
Introduction
We, 0bis3 Babyshop , Gelsenkirchen (hereinafter: "We"), as the operator of the online service, are responsible for processing the personal data of users of the online service. Our contact details can be found in the online service's imprint; the contact persons for questions regarding the processing of personal data are listed directly in this privacy policy.
We take the protection of your privacy and your personal data very seriously. We collect, store, and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.
With this privacy policy, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of our online service.
Personal data
Personal data is information about an identified or identifiable natural person. This includes all information related to your identity, such as your name, email address, or postal address. Information that cannot be linked to your identity (such as statistical data, such as the number of users of the online service) is not considered personal information.
You can generally use our online service without revealing your identity and without providing any personal data. We will then only collect general information about your visit to our online service. However, for some of the services offered, personal data will be collected from you. We will then generally only process this data for the purposes of using this online service, in particular to provide the requested information. When personal data is collected, only the data that is absolutely necessary must be provided. In addition, further information may be possible, but this is then voluntary. We will indicate in each case whether certain fields are mandatory or voluntary. We will then provide the specific details in the corresponding section of this data protection declaration.
Automated decision-making based on your personal data does not take place in connection with the use of our online offering.
Processing of personal information
We store your information on specially protected servers within the European Union. These servers are protected by technical and organizational measures against loss, destruction, access, alteration, or distribution of your data by unauthorized persons. Access to your data is only possible for a few authorized individuals. These individuals are responsible for the technical, commercial, or editorial maintenance of the servers. Despite regular checks, complete protection against all threats is not possible.
Your personal data is transmitted over the internet in encrypted form. We use SSL (Secure Socket Layer) encryption for data transmission.
Disclosure of personal data to third parties
We generally use your personal information only to provide the services you request. If we use external service providers to provide our services, their access to the data is also solely for the purpose of providing the service. We implement technical and organizational measures to ensure compliance with data protection regulations and also require our external service providers to do so.
Furthermore, we will not share your data with third parties without your express consent, especially not for advertising purposes. Your personal data will only be shared if you have consented to the sharing of the data or if we are authorized or required to do so by law and/or official or court orders. This may, in particular, involve providing information for the purposes of criminal prosecution, averting danger, or enforcing intellectual property rights.
To the extent that we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the specific requirements of Articles 44 et seq. of the GDPR and also require our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is guaranteed in particular by an adequacy decision of the EU Commission or by appropriate safeguards pursuant to Article 46 GDPR.
Legal basis for data processing
If we obtain consent for the processing of your personal data, Art. 6 (1) (a) GDPR is the legal basis for data processing.
To the extent that we process your personal data because this is necessary to fulfill a contract or within the framework of a contractual relationship with you, Art. 6 (1) (b) GDPR constitutes the legal basis for data processing.
If we process your personal data to fulfill a legal obligation, Art. 6 (1) (c) GDPR is the legal basis for data processing.
Article 6 (1) (f) GDPR also serves as the legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.
In this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.
Data deletion and storage period
We generally delete or block your personal data whenever the purpose for which it was stored no longer applies. However, storage may continue beyond this period if required by legal requirements to which we are subject, such as statutory retention and documentation obligations. In such a case, we will delete or block your personal data after the relevant requirements have expired.
Use of our online offering
Information about your computer
Each time you access our website, we collect the following information about your computer, regardless of your registration: your computer's IP address, your browser's request, and the time of this request. The status and volume of data transferred during this request are also recorded. We also collect product and version information about the browser and computer's operating system used. We also record the website from which you accessed the website. Your computer's IP address is stored only for the duration of your use of the website and is then deleted or anonymized by truncation. The remaining data is stored for a limited period of time.
We use this data to operate the online service, in particular to identify and correct errors, to determine the utilization of the online service, and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.
Use of cookies
Like many websites, our online offering uses cookies. Cookies are small text files stored on your computer and save certain settings and data for exchange with our online offering via your browser. A cookie typically contains the name of the domain from which the cookie file was sent, as well as information about the age of the cookie and an alphanumeric identifier.
Cookies allow us to recognize your computer and make any presets and preferences immediately available. The cookies we use are – where possible – so-called session cookies, which are automatically deleted after the end of the browser session. In some cases, cookies with a longer storage period may also be used so that your presets and preferences can be taken into account the next time you visit our website.
Most browsers are set to automatically accept cookies. However, you can disable cookies or configure your browser to notify you when cookies are sent. You can also manually delete previously stored cookies via your browser settings. Please note that if you refuse cookies or delete necessary cookies, you may be unable to use our online services or only to a limited extent.
If cookies are not required for our online offering, we will ask you to consent to the use of cookies when you first access our online offering. With regard to non-essential third-party cookies, you will find a more detailed description of the services we use below. The legal basis for the associated data processing, including any data transfer, is your consent within the meaning of Art. 6 (1) (a) GDPR. Consent once given can be revoked at any time with future effect, in particular by changing the selected settings.
The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offering within the meaning of Art. 6 (1) (f) GDPR and – insofar as contracts are concluded or fulfilled via our online offering – the fulfillment of the contract within the meaning of Art. 6 (1) (b) GDPR.
Session ID analysis
If you decide not to accept cookies, we will analyze your visit to our website in pseudonymized form using a session ID. The session ID is a code assigned to the visitor as a pseudonym for the duration of their visit to this website in order to recognize the visitor's actions during this visit. The data collected and stored in this way will not be merged with personal data about the bearer of the pseudonym. As part of the analysis, the data collected via the session ID will be passed on to Google Tag Manager and Google Analytics. It cannot be ruled out that data will be transferred to servers in the USA and that security authorities could therefore possibly have access to the data.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the optimization and needs-based design of our online offering.
Integration of third-party services
For some functions in our online offering, we rely on third-party services. These services are predominantly optional features that you must explicitly select or use. We have entered into contractual agreements with the respective providers regarding the provision or integration of their services and, to the best of our ability, ensure that these third-party providers also provide transparent information about the extent of their processing of personal data and comply with data protection regulations.
Google Tag Manager
For our online offering we use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: “Google”). The Google Tag Manager is a tag management system (TMS) with which tags, i.e. tracking codes and associated code fragments, can be managed on our website. The Google Tag Manager can be used to integrate Google services into a website. When the Google Tag Manager is used, a connection is established to the Google servers. This means that the IP address of the browser on the device used by the visitor to this website is stored by Google. It cannot be ruled out that in this context data will be transmitted to Google in the USA and that US security authorities may gain access to the data. However, cookies are not set in connection with the use of the Google Tag Manager.
Further information about Google Tag Manager and data processing by Google can be found here:
https://support.google.com/tagmanager/answer/6102821?hl=de
https://www.google.com/policies/privacy/
Our legal basis for using Google Tag Manager is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the tracking codes in our online offering, which enable us to analyze the use of our online offering and to improve and personalize our services.
Google Analytics
We use Google Analytics for statistical analysis. Google Analytics is a web analytics service provided by Google.
As part of Google Analytics, Google uses cookies, among other things, for evaluations. The type and extent of use and analysis of cookies are determined by Google. The information generated by the cookies about your use of the website is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA, which could give government agencies access to this data. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.
Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us as the operator of the online service with other services relating to website activity and internet usage. Google may also use the data for its own purposes. For these purposes, Google may, for example, create a profile of user behavior or link the data with other data, for example with an existing Google account. We have no influence whatsoever on these data processing operations. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For more information, please see Google's privacy policy, which is linked below.
We also use the "demographic characteristics" feature of Google Analytics. This allows us to create reports containing information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third parties. You can deactivate this feature at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the following paragraph. Further information on the "demographic characteristics" feature can be found on Google at https://support.google.com/analytics/answer/2799357?hl=de.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information can be found at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our website, Google Analytics has been extended by the code "anonymizeIp();" to anonymize IP addresses, whereby the last octet is deleted.
Cookies will only be set if you have given your express consent. Our legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR.
Google Enhanced Conversion Tracking
We use Google Enhanced Conversion Tracking for our online offering.
Google Enhanced Conversions supplement the existing conversion tags. Conversion tracking is used to create statistics to determine the total number of website users and to obtain information about the actions they have performed. Enhanced conversions allow conversions to be recorded even more precisely. Conversion data from our online offering that we, as the controller of the online offering, collect ourselves and provided by the user can be sent to Google in encrypted form using enhanced conversions. The data of website visitors is encrypted using a one-way hash algorithm SHA256; no conclusions can be drawn about the person. Enhanced conversions are used for customers who have themselves provided data such as their email address, name, home address, or telephone number, for example, as part of a customer account. Based on this information, customers are assigned to corresponding Google accounts in which they were logged in when an interaction with the online offering took place. In this context, it cannot be ruled out that data will be transmitted to the USA and that US security authorities may therefore gain access to this data.
Further information can be found in the Google Privacy Policy at https://policies.google.com/privacy and at https://support.google.com/google-ads/answer/9888656.
The use of this service is subject to your express consent. The legal basis for the use of the service is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.
Google Enhanced Conversions supplement the existing conversion tags. Conversion tracking is used to create statistics to determine the total number of website users and to obtain information about the actions they have performed. Enhanced conversions allow conversions to be recorded even more precisely. Conversion data from our online offering that we, as the controller of the online offering, collect ourselves and provided by the user can be sent to Google in encrypted form using enhanced conversions. The data of website visitors is encrypted using a one-way hash algorithm SHA256; no conclusions can be drawn about the person. Enhanced conversions are used for customers who have themselves provided data such as their email address, name, home address, or telephone number, for example, as part of a customer account. Based on this information, customers are assigned to corresponding Google accounts in which they were logged in when an interaction with the online offering took place. In this context, it cannot be ruled out that data will be transmitted to the USA and that US security authorities may therefore gain access to this data.
Further information can be found in the Google Privacy Policy at https://policies.google.com/privacy and at https://support.google.com/google-ads/answer/9888656.
The use of this service is subject to your express consent. The legal basis for the use of the service is Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.
Google Forms
We use Google's "Google Forms" service to conduct surveys. Surveys are regularly integrated in conjunction with a server call, usually operated by Google. This transmits information about which of our websites you have visited to the server. The IP address of the browser you use is also stored. It cannot be ruled out that data will be transmitted to the USA and that US security authorities may have access to this information. We have no influence over further data processing by Google.
Further information on data processing by Google can be found in Google's privacy policy, which you can access here: www.google.com/policies/privacy/ . Data processing in connection with the conduct of surveys is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.
Google Fonts
Google Fonts are sometimes used as external fonts for our online offering. We do not use Google fonts ourselves, but integrated third-party providers can access Google Fonts. Google Fonts come from Google and are made freely available. These Google Fonts are integrated by calling a server, usually a Google server. This transmits to the server which of our websites you have visited. The IP address of the browser on the device of the visitor to these websites is also stored by Google. It cannot be ruled out that data will be transmitted to the USA in this context and that US security authorities may gain access to the data under certain circumstances. Further information on data processing by Google can be found in Google's privacy policy, which can be accessed at www.google.com/fonts#AboutPlace:about and www.google.com/policies/privacy/. The legal basis for the integration of Google Fonts is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR; this legitimate interest is the optimization of our online offering.
Retargeting and remarketing
Retargeting or remarketing refers to technologies that allow users who have previously visited a particular website to be shown suitable advertising even after they have left that website. To do this, it is necessary to recognize internet users beyond their own website, for which cookies from the relevant service providers are used; previous usage behavior is also taken into account. For example, if a user looks at certain products, these or similar products can later be displayed as advertisements on other websites. This is personalized advertising that is tailored to the needs of the individual user. For this personalized advertising, it is not necessary for the user to be identified beyond recognition. The data used for retargeting or remarketing is therefore not merged with other data by us.
We use such technologies to display ads online. We rely on third-party providers to display these ads. We use services from Google, Microsoft, Pinterest, and Hatch, among others, which enable the automatic display of products of interest to internet users. This function is implemented using cookies. It cannot be ruled out that, in the course of this process, data will be transferred to Google in the USA and that US security authorities will gain access to the relevant data.
Associated cookies will only be stored if you have given your consent. Our legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.
For further information about these technologies, please refer to the privacy policies of the respective provider, which are listed below:https://policies.google.com/privacy?hl=de.Microsoft: https://privacy.microsoft.com/de-de/privacystatementPinterest: https://policy.pinterest.com/de/privacy-policyHatch: https://www.gethatch.com/en/privacy-policy/
Facebook Custom Audience
Our website contains integrated remarketing tags from Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (hereinafter: “Facebook”). When you visit our website, a direct connection is established between your browser and the Facebook server via the remarketing tags. This tells Facebook that you have visited our website using your IP address. This allows Facebook to associate your visit to our website with your Facebook account – provided you are registered there. We can use the information obtained in this way to display advertisements on Facebook. It cannot be ruled out that data will be transferred to Facebook servers in the USA and that, under certain circumstances, US security authorities may gain access to the relevant data. We would like to point out that we have no further knowledge of the content of the data transferred or how Facebook uses it. For more information, please see Facebook’s privacy policy at www.facebook.com/about/privacy/.
The legal basis for the use of remarketing tags is your consent in accordance with Art. 6 (1) (a) GDPR. If you do not wish to have data collected via Facebook's remarketing tags, you can also deactivate the use of Facebook Custom Audience via the following link: www.facebook.com/ads/website_custom_audiences/.
Google Maps
We use the Google Maps service for our online offering. Google Maps is a service provided by Google. Only technically necessary cookies are set for the maps integrated into our online offering.
To comply with data protection regulations, the terms of use for the map service contain data protection regulations designed to protect you. Google's terms of use for the map service can be found at https://www.google.com/intl/de_US/help/terms_maps.html. Google's general explanations regarding data protection can be found at https://policies.google.com/privacy?hl=de&gl=de.
The legal basis for the integration of the map service is the legitimate interest pursuant to Art. 6 (1) (f) GDPR; our legitimate interest lies in providing maps for your orientation.
Gstatic
We use the Gstatic service as a Google domain. Gstatic helps, in particular, to load content on Google more quickly from our content delivery networks. The domain reduces bandwidth usage, increases network performance, and generally accelerates the loading of Google services. When used, it cannot be ruled out that data will be stored on Google servers in the USA. This could potentially allow US security authorities to access the data stored there. This use is in our legitimate interest in providing the best possible presentation of our online offering in accordance with Art. 6 (1) (f) GDPR. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.
Facebook Pixel
We use the Facebook pixel for statistical evaluations and to improve the effectiveness of our advertising. The Facebook pixel is an analysis tool from Meta Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (“Meta”). With the help of the pixel, we can measure the effectiveness of our advertising and display our ads to specific target groups.
The Facebook pixel establishes a connection to the Meta servers when you visit our website. Each time the website is accessed, certain information about the user is transferred to Meta. A cookie with a storage period of one year is also set. It cannot be ruled out that US security authorities may gain access to the data when the data is transferred to the USA. The data transferred includes the IP address and information about the browser used and the website user. Information about the website from which our online offering was accessed is also transferred. It also records which buttons are clicked by the website user and which pages are called up as a result of such a click. The information entered by the user in the fields of online forms is also recorded.
Further information about this from Meta can be found at https://de-de.facebook.com/business/help/742478679120153 (general information about the Facebook pixel) and in the privacy policy at http://www.facebook.com/about/privacy/ .
If you do not wish your data to be processed to display personalized advertising via the Facebook pixel, you have the option of refusing your consent or objecting to data processing at the following link: www.facebook.com/ads/website_custom_audiences/. The legal basis for data processing in connection with the use of the Facebook pixel is your consent in accordance with Art. 6 (1) (a) GDPR.
The Facebook pixel establishes a connection to the Meta servers when you visit our website. Each time the website is accessed, certain information about the user is transferred to Meta. A cookie with a storage period of one year is also set. It cannot be ruled out that US security authorities may gain access to the data when the data is transferred to the USA. The data transferred includes the IP address and information about the browser used and the website user. Information about the website from which our online offering was accessed is also transferred. It also records which buttons are clicked by the website user and which pages are called up as a result of such a click. The information entered by the user in the fields of online forms is also recorded.
Further information about this from Meta can be found at https://de-de.facebook.com/business/help/742478679120153 (general information about the Facebook pixel) and in the privacy policy at http://www.facebook.com/about/privacy/ .
If you do not wish your data to be processed to display personalized advertising via the Facebook pixel, you have the option of refusing your consent or objecting to data processing at the following link: www.facebook.com/ads/website_custom_audiences/. The legal basis for data processing in connection with the use of the Facebook pixel is your consent in accordance with Art. 6 (1) (a) GDPR.
Hotjar
We also use Hotjar for statistical evaluations. Hotjar is a web analysis service provided by Hotjar Ltd, Level 2, St Julians Business Centre 3, Elia Zammit Street, 3155 St Julians STJ, Malta (“Hotjar”). Hotjar uses cookies that enable analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Hotjar server in Ireland and stored there. Website visitors receive a unique user ID that can be assigned to them on return visits. IP addresses of visitors are suppressed before they are saved. The last octet of the IP address is set to 0 so that the full IP address is not recorded. The first three octets of the IP address are only used to determine the visitor’s geographical location. On behalf of the operator of this website, Hotjar will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
If you do not want Hotjar to collect data, you can deactivate it here: https://www.hotjar.com/legal/compliance/opt-out.
Further information can be found at https://www.hotjar.com/legal/policies/privacy or https://www.hotjar.com/legal/compliance/gdpr-commitment (general information about Hotjar and data protection). The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
Clarity
For statistical analysis on our website, we use the Microsoft Clarity service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter: “Microsoft”). Microsoft uses cookies, among other things, to evaluate user behavior. The information generated in this way about your use of our website is transferred to Microsoft servers and stored there. It cannot be ruled out that data will be transferred to the USA and that this could potentially allow government agencies to access this data. We have made the technical default settings so that the data is pseudonymized by Microsoft before being transferred to the Microsoft servers, in particular by means of IP masking (pseudonymization of the IP address). The analysis of user behavior is based on a pseudonymous user ID. In addition, other pseudonymized data such as usage data (e.g. access times, content visited), meta and communication data (e.g. IP address, devices used), location data (e.g. information on the geographical location of the device) and movement data (e.g. mouse movements and scrolling movements) are used. The data is processed to evaluate the use of our online offering. According to Microsoft, the information stored on Microsoft's servers can also be used for advertising purposes. We have no influence on further data processing by Microsoft. Further information on data processing at Microsoft can be found at: https://clarity.microsoft.com/ and https://privacy.microsoft.com/de-de/privacystatement. The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
Facebook fan page
In addition to our own online presence, we also operate a fan page on the social network Facebook. We use the fan page to inform about our activities and provide a channel for communication. The operator of the social network Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta"). In this regard, we use the technical platform and services of Meta.
Delimitation of responsibility
We would like to point out that you use the fan page and its functions at your own risk, especially with regard to interactive functions such as commenting, sharing or rating. Alternatively, you can also access the information offered via the fan page on our homepage.
Within the scope of the possibilities offered by Facebook, we try to ensure the protection of your privacy and your private data. To the extent that your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the fan page into the Facebook offering, please also note that personal data is also processed by Meta. When you visit the fan page, Meta records, among other things, your IP address and other information that may be stored in the form of cookies on the device you use or in the respective browser. We have no influence on data processing by Meta; in particular, Facebook does not act as a processor for us under our responsibility. Data processing by Facebook is subject - at least according to Meta - to Facebook's guidelines, which can be found at https://de-de.facebook.com/policy.php. We would like to point out that the data collected about you by Meta in this context may also be transferred outside the European Union.
Under data protection law, Meta and we are jointly responsible for the operation of the fan page and the analysis of user data when visiting the fan page. In accordance with data protection regulations, we have entered into an agreement with Meta regarding the delimitation of responsibility.
Within the scope of the possibilities offered by Facebook, we try to ensure the protection of your privacy and your private data. To the extent that your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the fan page into the Facebook offering, please also note that personal data is also processed by Meta. When you visit the fan page, Meta records, among other things, your IP address and other information that may be stored in the form of cookies on the device you use or in the respective browser. We have no influence on data processing by Meta; in particular, Facebook does not act as a processor for us under our responsibility. Data processing by Facebook is subject - at least according to Meta - to Facebook's guidelines, which can be found at https://de-de.facebook.com/policy.php. We would like to point out that the data collected about you by Meta in this context may also be transferred outside the European Union.
Under data protection law, Meta and we are jointly responsible for the operation of the fan page and the analysis of user data when visiting the fan page. In accordance with data protection regulations, we have entered into an agreement with Meta regarding the delimitation of responsibility.
From a data protection perspective, we assume joint responsibility for the operation of the fan page between Facebook and us. In accordance with data protection regulations, we have entered into an agreement with Facebook to allocate responsibility.
Facebook Insights
Meta offers fan page operators the opportunity to obtain an overview of the use of the fan page and its users through the Page Insights function. Page Insights primarily allows statistical data to be accessed and evaluated. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated itself. Further information on the functionality and responsibility for the Page Insights function is available from Facebook at https://www.facebook.com/legal/terms/page_controller_addendum.
Facebook Messenger
Users registered with Facebook also have the option of communicating directly via Facebook Messenger. If you contact us via Messenger, the data you transmit will be stored and used by us exclusively to answer your inquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and processing customer inquiries, evaluating them, and monitoring misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation is over. For us, the conversation is over when the circumstances indicate that the matter in question has been conclusively resolved. You have the right to revoke your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about Facebook
If you have any questions about our use of personal data in connection with the use of the Facebook fan page, please feel free to contact us or our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on Facebook, please contact Meta directly.
Instagram account
We also have an account on the social network Instagram. We use the Instagram account to inform about our activities through our own publications and offer another channel for communication with us. The social network Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta"). Please remember that you use Instagram and its features at your own risk, especially with regard to interactive functions such as commenting, sharing, or rating.
Data protection responsibility
To the extent possible with Instagram, we endeavor to ensure the protection of your privacy and your private data. To the extent that your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this privacy policy apply without restriction. Due to the integration of the account into the Meta offering, please also note that personal data is also processed by Meta at the same time. When you access our Instagram content, Meta records, among other things, your IP address and other information that may be stored in the form of cookies on the device you use or in the respective browser. We have no influence on data processing by Instagram; in particular, Meta does not act as a processor for us under our responsibility. Data processing by Facebook is subject – at least according to Meta – to Meta's guidelines, which can be found at https://www.facebook.com/help/instagram/155833707900388. We would like to point out that the data collected about you by Meta in this context may also be transferred outside the European Union.
From a data protection perspective, Meta and we have separate responsibilities for operating the Instagram account and the associated communication and analysis options. To the extent that your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is generally the case if you communicate directly with us using the “Instagram Direct Messaging” function and transmit your data to us in the process. To the extent that your personal data is processed by Meta and Meta alone decides on the purposes and means of data processing, Meta is solely responsible for this data processing. This applies in particular to the analysis of user behavior by Meta for its own purposes.
Instagram Insights
Meta offers Instagram account operators the opportunity to obtain an overview of account usage and its users via the "Instagram Insights" function. Instagram Insights primarily allows statistical data to be accessed and evaluated. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated under its own responsibility. The data we receive from Meta is mostly anonymized data and statistics. To the extent that we receive personal data in this context, we are responsible for our further processing of this data to evaluate the usage of our Instagram account. Meta provides further information on Instagram Insights at https://help.instagram.com/1533933820244654.
Instagram Direct Messaging
On Instagram, you have the option of communicating with us directly using the "Instagram Direct Messaging" function. If you contact us using the Instagram Direct Messaging function, the data you transmit will be stored and used by us exclusively to answer your inquiry. The legal basis for processing your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in recording and processing customer inquiries, evaluating them, and monitoring misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation is over. For us, the conversation is over when the circumstances indicate that the matter in question has been conclusively resolved. You have the right to revoke your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about Instagram
If you have any questions about our use of personal data in connection with the use of our Instagram account, please feel free to contact us or our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on the Instagram social network offered by Meta, we ask you to contact Meta directly.
TikTok
In addition to our own online offering, we also operate a channel on the social network TikTok. We use the TikTok channel to provide information about our activities and offer a channel for communication. The social network TikTok is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom (hereinafter: “TikTok”).
We would like to point out that you use the social network TikTok and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. likes, shares and comments).
Processing of personal data
The data collected about you when you use the service will be processed by TikTok and may be transferred to countries outside the European Union. The data processed includes, among other things, the data you provide voluntarily, such as your name, username, date of birth, email address, and telephone number; the content you create, upload, or receive; information from contacts, purchase information, and other information you provide; your IP address, the application you use, information about the device and operating system you use (including device ID and application ID), information about websites you visit, your location, your mobile phone provider, and information about your use of the service. This data is assigned to the data in your TikTok account. We have no influence on the type and scope of the data processed by TikTok, the type of processing and use, or the transfer of this data to third parties. Information about which data is processed by TikTok and for what purposes can be found in TikTok's privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
We process the data you enter on TikTok, in particular your username and the content published under your account, to the extent that we may share or link to your posts, respond to them, or create posts on our own initiative that refer to your account. The data you freely publish and distribute on TikTok will thus be incorporated into our offering and made available to our followers.
You can restrict the processing of your data in the general settings of your TikTok account as well as under "Account and Privacy Settings" and "Security". In addition, you can restrict TikTok's access to contact data, photos and videos, location data, etc. in the settings on mobile devices. However, this depends on the operating system used. Further information on these points can also be found at https://support.tiktok.com/de/account-and-privacy and https://support.tiktok.com/de/safety-hc..
TikTok Analytics
TikTok offers the operators of TikTok accounts the opportunity to obtain an overview of the use of the account and its users via the "Analytics" function. TikTok Analytics can primarily be used to access and evaluate statistical data. We use the data from TikTok Analytics to make the TikTok account as attractive and efficient as possible. For this purpose, TikTok provides us with data that TikTok has generated itself under its own responsibility. The data we receive from TikTok is mostly anonymized data and statistics. If we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our TikTok account. TikTok provides further information on Analytics at https://www.tiktok.com/analytics and https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/.
Direct messages
On TikTok, you have the option of communicating with us directly using the “Direct Messages” function. If you contact us using the Direct Messages function, the data you transmit will be stored and used by us exclusively to answer your inquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, in the evaluation of customer inquiries and in monitoring misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation is over. For us, the conversation is over when the circumstances indicate that the matter in question has been conclusively resolved. You have the right to revoke your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about TikTok
If you have any questions about our use of personal data in connection with the use of our TikTok account, please feel free to contact us at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at TikTok, please contact TikTok directly.
We would like to point out that you use the social network TikTok and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. likes, shares and comments).
Processing of personal data
The data collected about you when you use the service will be processed by TikTok and may be transferred to countries outside the European Union. The data processed includes, among other things, the data you provide voluntarily, such as your name, username, date of birth, email address, and telephone number; the content you create, upload, or receive; information from contacts, purchase information, and other information you provide; your IP address, the application you use, information about the device and operating system you use (including device ID and application ID), information about websites you visit, your location, your mobile phone provider, and information about your use of the service. This data is assigned to the data in your TikTok account. We have no influence on the type and scope of the data processed by TikTok, the type of processing and use, or the transfer of this data to third parties. Information about which data is processed by TikTok and for what purposes can be found in TikTok's privacy policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
We process the data you enter on TikTok, in particular your username and the content published under your account, to the extent that we may share or link to your posts, respond to them, or create posts on our own initiative that refer to your account. The data you freely publish and distribute on TikTok will thus be incorporated into our offering and made available to our followers.
You can restrict the processing of your data in the general settings of your TikTok account as well as under "Account and Privacy Settings" and "Security". In addition, you can restrict TikTok's access to contact data, photos and videos, location data, etc. in the settings on mobile devices. However, this depends on the operating system used. Further information on these points can also be found at https://support.tiktok.com/de/account-and-privacy and https://support.tiktok.com/de/safety-hc..
TikTok Analytics
TikTok offers the operators of TikTok accounts the opportunity to obtain an overview of the use of the account and its users via the "Analytics" function. TikTok Analytics can primarily be used to access and evaluate statistical data. We use the data from TikTok Analytics to make the TikTok account as attractive and efficient as possible. For this purpose, TikTok provides us with data that TikTok has generated itself under its own responsibility. The data we receive from TikTok is mostly anonymized data and statistics. If we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our TikTok account. TikTok provides further information on Analytics at https://www.tiktok.com/analytics and https://www.tiktok.com/creators/creator-portal/en-us/tiktok-content-strategy/understanding-your-analytics/.
Direct messages
On TikTok, you have the option of communicating with us directly using the “Direct Messages” function. If you contact us using the Direct Messages function, the data you transmit will be stored and used by us exclusively to answer your inquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, in the evaluation of customer inquiries and in monitoring misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation is over. For us, the conversation is over when the circumstances indicate that the matter in question has been conclusively resolved. You have the right to revoke your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about TikTok
If you have any questions about our use of personal data in connection with the use of our TikTok account, please feel free to contact us at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at TikTok, please contact TikTok directly.
Registration
You can register to use our online services. To do so, you must provide the information requested during registration, such as your name, address, and email address. We also record the date and time of registration and your IP address. During the registration process, we will obtain your consent to use this data. This gives you the advantage of not having to re-enter this information each time you use the service or place an order.
The legal basis for processing data for registration purposes is Art. 6 (1) (a) GDPR if consent has been given. If you register with us to fulfill or initiate a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.
The information requested as a mandatory field during registration is required to fulfill or initiate a contract with us for certain services. However, you are not obligated to register; you can also order as a guest. In this case, however, you will be required to enter all the data required to process the contract with each order.
Upon registration, an account will be created for you. We will store the data in the account as long as an active customer relationship exists. If no activity is detected over a period of three years, the customer relationship status will be set to inactive. You can request deletion of your account at any time.
We offer the option of registering via Facebook Connect. Facebook Connect is provided by Facebook. When you use Facebook Connect, Facebook profile data and public data from your Facebook profile are transmitted to 0bis3 Babyshop. To simplify registration for the use of our website, we use and process your first and last name, gender, age, hometown, email address and Facebook ID. If you are already a 0bis3 Babyshop customer, only your Facebook ID is processed. Your Facebook account is linked to your 0bis3 Babyshop account via your Facebook ID. This means you can log in to our services using your Facebook login details by clicking on the “Login with Facebook” button. In addition, Facebook learns that you are currently using the 0bis3 Babyshop service each time you log in in this way. You can revoke the link to Facebook at any time on Facebook. Please also read Facebook’s privacy policy.
The legal basis for the use of Facebook Connect is your consent in accordance with Art. 6 (1) (a) GDPR.
BabyOne Card
If we provide the service of 0bis3 Babyshop Card, you can apply for the 0bis3Babyshop Card online during registration or at a later date. The 0bis3 Babyshop Card can also be applied for in store or by mail. The 0bis3 Babyshop Card offers various benefits, such as collecting bonus points and a personalized birthday surprise.
If you would like to apply for the 0bis3 Babyshop Card, in addition to the general information, we will also ask for your date of birth (for the personalized birthday surprise) and your postal address (for sending information) during registration. You may also provide a telephone number on a voluntary basis.
We also ask for information about your children, which is also voluntary. If you would like to provide information about your children, you can provide their name, date of birth, and gender. We will then use this information to identify your needs for goods and services and to make the most suitable offers for you and your child.
Applying for the 0bis3 Babyshop Card is voluntary. If you decide to apply, the legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.
Order processing
We use your personal data when placing orders only within our company and affiliated companies, as well as with the company commissioned to process orders.
Storage and data transfer for orders
For order processing, we work with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. For example, we pass on your address details (name and address) to the respective transport company that delivers the ordered products to you. The legal basis for this is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary to fulfill the contract with you.
We store the data for as long as it is necessary to fulfill the contract. In addition, we store this data for the fulfillment of post-contractual obligations and due to retention periods under commercial and tax law for the period prescribed by law. This retention period is generally 10 years to the end of the respective calendar year.
Payment processing
Depending on the payment method chosen, payment processing for orders may be carried out by engaging a service provider.
When paying by credit card, your necessary data such as name, address and purchase details will be forwarded to the respective credit card company.
When paying via PayPal, you will be redirected to the PayPal website via a link. Your personal data will be processed during this process. This includes your name, address, email address, telephone number (if applicable), and account or credit card information. Please note the general terms and conditions, terms of use, and privacy policy of PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg, available at www.paypal.com.
When paying with Sofortüberweisung, you will be redirected via a link to the Sofortüberweisung website, a service provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich, which is part of Klarna Bank AB (publ), Sveavägen 46111 34 Stockholm, Sweden. Your personal data will be processed in this process. This includes your name, address, email address, telephone number (if applicable), and account or credit card details. Please note the general terms and conditions, terms of use, and privacy policy of Sofort GmbH, which can be found at https://www.klarna.com/sofort/.
The legal basis for payment processing is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary to fulfill the contract with you, whereby you are free to choose the payment method.
We store the data for as long as it is necessary to fulfill the contract. In addition, we store this data for the fulfillment of post-contractual obligations and due to retention periods under commercial and tax law for the legally prescribed period. This retention period is generally 10 years to the end of the respective calendar year.
Appointment booking
Our online service offers you the opportunity to reserve a consultation appointment at your local 0bis3 Babyshop store. For this purpose, we use an online appointment booking tool provided by shopify.
If you wish to use the appointment booking service on our online platform, we will collect the personal data you provide in the appointment booking form, in particular your first name, email address, and your consultation request. We also store your IP address and the date and time of your request. You can also specify whether you would like to receive a reminder email before the appointment and when this reminder should be sent. You can also choose whether you would like to receive an email after the appointment, giving you the opportunity to rate our service.
After clicking the "Book Appointment" button, the desired appointment will be reserved for you at the store you selected. You will receive a confirmation via email.
We process the data submitted via the appointment booking form exclusively for the purpose of processing your appointment request. The information you submit in the form will be transferred to the service provider who will use the data on our behalf to book the appointment for us.
You can decide for yourself which information you send us via the appointment booking form. The legal basis for processing your data is your consent in accordance with Art. 6 (1) (a) GDPR. If data processing is necessary for the fulfillment or initiation of a contract, the legal basis for processing the data is also Art. 6 (1) (b) GDPR.
After the appointment, the data will initially be stored in case of any queries. Deletion of personal data can be requested at any time. Once the matter has been fully resolved, the data will be completely anonymized. Statutory retention periods remain unaffected.
Communication with us
You can contact us in a variety of ways, including via the contact form on our website. We'd also be happy to keep you updated regularly with our email newsletter.
Contact form
If you choose to use the contact form on our website, we will collect the personal data you provide in the contact form, in particular your name and email address. We also store your IP address and the date and time of your inquiry. We process the data transmitted via the contact form exclusively for the purpose of responding to your inquiry or request.
You can decide for yourself which information you send us via the contact form. The legal basis for processing your data is your consent in accordance with Art. 6 (1) (a) GDPR.
After we have processed the matter, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time; otherwise, deletion will occur after the matter has been fully resolved; statutory retention periods remain unaffected.
Newsletter
When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will also receive regular information by email on current topics as well as emails for special occasions, for example special promotions. The emails can be personalized and individualized based on the information we have about you. To subscribe to our newsletter, unless you have given us your written consent, we use the so-called double opt-in procedure. This means that we will only send you a newsletter by email if you have previously expressly confirmed that we should activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this email. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR if you have expressly subscribed to the newsletter. Within the framework of the legal requirements, it may also be possible for you to receive our newsletter from us without your express consent because you have ordered goods or services from us, we received your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in the transmission of direct advertising in accordance with Art. 6 (1) (f) GDPR. If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer. In addition, with your consent, your personal data will be forwarded in pseudonymized form to the platform providers Google and Meta. During the pseudonymization process, the data is first converted into hashed codes using a secure algorithm and thus transmitted in encrypted form. The transmission to Google and Meta takes place in order to better tailor our information to your interests and needs and to be able to display our offers on the platforms. As part of the technical process, personal data may be stored on Google or Meta servers in the USA. In this context, it cannot be ruled out that US security authorities may gain access to this information. The legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR.
Social Media
Our website contains links to the social networks Facebook, Instagram, and Google+, as well as the video platform YouTube. You can recognize these links by the respective provider's logo.
Clicking on the links will open the corresponding social media pages, for which this privacy policy does not apply. For details on the applicable provisions, please refer to the respective privacy policies of the individual providers; you can find these at:
Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/519522125107875
Google+: https://policies.google.com/privacy?hl=de
Youtube: https://policies.google.com/privacy?hl=de
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Xing: https://privacy.xing.com/de/datenschutzerklaerung
Kununu: https://privacy.xing.com/de/datenschutzerklaerung
Before you access the corresponding links, no personal information is transmitted to the respective providers. Your access to the linked page also forms the basis for data processing by the respective providers. The following information regarding the associated processing of your personal data also applies to our use of the social media channels Facebook, Instagram, and TikTok.
Use of YouTube
Our online offering includes YouTube videos, which we use to play using a plug-in from the YouTube service operated by Google (hereinafter: "YouTube"). The service is operated by Google.
We use the YouTube service in enhanced privacy mode to protect your privacy as best as possible. When you visit a page on our website that contains an embedded YouTube video, Google initially receives only the information necessary for the integration, and no cookies are set for usage analysis. Only when you play the embedded video does Google receive further information; Google may also set cookies to analyze your user behavior. When you play the video, Google informs the YouTube servers, for example, which page of our website you are playing the video from.
If you are logged into your Google Account, you allow Google or YouTube to associate your browsing behavior directly with your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you consent to the associated data processing by Google. You can prevent data from being associated with your Google profile by logging out of your YouTube account. Further information on how user data is handled can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.
We use YouTube to show you videos and thus better inform you about us and our services. The legal basis for embedding the videos is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR; however, the playback of the videos and the associated further data processing are only carried out with your consent within the meaning of Art. 6 (1) (a)
Competitions
We may occasionally offer competitions via our online offering or other channels. You can register to participate in the competition on a voluntary basis; participation may require the completion of tasks or submission of entries. As part of your participation, you must provide contact information, which we will use exclusively to administer the competition. Data from the competition will not be merged with other data unless otherwise agreed in the specific case. Participation in the competition and the chances of winning are independent of other factors, such as the purchase of goods or the granting of optional consent to receive advertising.
After the competition has ended, your data will be retained for a period of six months unless you request that it be deleted earlier. Temporary storage is used to review any inquiries and complaints. All participant data will then be deleted. Data that is retained for a longer period based on an express agreement with the respective participant is not included in the deletion. This could include, for example, information about the winner. You are not obligated to make such arrangements with us. Regardless of such an agreement, the publication of participant data in anonymized form (Max M. from M.) is permitted.
The legal basis for data processing is Art. 6 (1) (a) GDPR (consent to participate in the competition) or Art. 6 (1) (b) GDPR (conduct of the competition).
Your rights and contact
We attach great importance to explaining the processing of your personal data as transparently as possible and also informing you of your rights. If you would like more information or wish to exercise your rights, please contact us at any time so that we can address your concerns.
Rights of those affected
You have extensive rights regarding the processing of your personal data. First, you have a comprehensive right to information and, if necessary, you can request the correction and/or deletion or blocking of your personal data. You can also request restriction of processing and have the right to object. With regard to the personal data you have provided to us, you also have a right to data portability.
If you wish to exercise any of your rights and/or receive further information, please contact our customer service.
Revocation of consent and objection
Once you have given your consent, you can revoke it at any time with future effect. Revoking your consent does not affect the legality of any processing carried out on the basis of your consent until the revocation. Our customer service and our data protection officer are also available for this purpose.
If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection will result in a review and, if necessary, termination of the data processing. You will be informed of the result of the review and, if data processing should nevertheless be continued, will receive further information from us as to why the continuation is allowed.
Complaints
If you believe that our processing of your personal data is not in accordance with this Privacy Policy or applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. We will however appreciate if you can complain to us in good faith and our Data Protection Officer will then investigate the matter and inform you of the outcome.
Further information and changes
Links to other websites
Our online offering may contain links to other websites. These links are generally marked as such. We have no influence on the extent to which the linked websites adhere to applicable data protection regulations. We therefore recommend that you also familiarize yourself with the respective privacy policies of
other websites.
changes to this privacy policy
Changes to this privacy policy
The current version of this privacy policy is indicated by the date (below). We reserve the right to amend this privacy policy at any time with future effect. Changes will occur, in particular, in the event of technical adjustments to the online offering or changes to data protection regulations. The most current version of the privacy policy is always available directly via the online offering. We recommend that you regularly check for changes to this privacy policy.
Status of this privacy policy: October 2025