Privacy Policy

2. Purposes of the data processing, legal bases and legitimate interests pursued by the controller or a third party, as well as categories of recipients

2.1. Visiting our websites/applications

2.1.1. Log files

Each time services are accessed, information is sent by the respective Internet browser of your respective end device to the server of our service and temporarily stored in logged data, the so-called log files. The data records stored in this process contain the following data, which are stored until automatic deletion: Date and time of the request, name of the requested page, IP address of the requesting device, referrer URL (origin URL from which you came to our service), the amount of data transferred, loading time, as well as product and version information of the respective browser used and the name of your access provider.

The legal basis for the processing of the IP address is Article 6 (1) f GDPR. Our legitimate interest results from the

• Ensure smooth connection establishment,
• Ensuring a comfortable use of our services,
• Evaluation of system security and stability.

A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. The information is stored and automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

2.1.2. Cookies, Tracking, Social Media Plugins

On various pages, we use cookies or similar technologies (“together also referred to as “cookies”) to make visiting our services attractive and to enable the use of certain functions as well as to statistically record the use of our services. Cookies are small text files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit and/or use our services. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. This does not mean, however, that we can gain direct knowledge of your identity and/or draw conclusions about you. Most of the cookies used are deleted at the end of the browser session (so-called session cookies). These allow us to offer, for example, the cross-page basket display, in which you can see how many items are currently in your basket and what your current purchase value is. Other cookies remain on your terminal device and enable us to recognize your terminal device the next time you visit us (so-called permanent or cross-session cookies). These cookies in particular serve to make our offer user-friendly, more effective and safer. Due to these technologies, it is possible, for example, that you receive information in our services that is specifically tailored to your interests.

We use cookies provide and optimize our services. We use a large number of cookies exclusively on the basis of your consent. An exception to this consent requirement only applies to cookies that are absolutely necessary for the provision of our services. We divide cookies and similar technologies into three categories according to their purpose:

Absolutely necessary cookies

These cookies are absolutely necessary for the function of our services. This applies, for example, to cookies that store login data after registration in our online store, so that the user remains logged in to our online store even after switching to another page, or for cookies that ensure that a user-specific configuration of the service functions (selected language, etc.) is maintained across sessions. In addition, we carry out so-called reach measurements on the basis of such cookies, with which we determine how our services are used order to be able to provide them to our users in a needs-based manner. In addition, these cookies contribute to a safe and proper use of our services. According to the law, we do not require your consent for the use of such cookies.

You can find out which cookies fall into the category of cookies that are absolutely necessary in our preference center here.

Functional cookies

With these cookies we are able to provide advanced functionalities and personalization. They may be set by us or by third parties whose services we use in our services. If you do not allow these cookies, some or all of these services may not function properly. These cookies also allow us to conduct market research.

We use these cookies only on the basis of your consent.

You can see which cookies fall into the Functional Cookies category in our preference center here.

Marketing Cookies

These cookies can be set by us or our partners via our services in order to show you relevant content/advertising on our websites as well as on third-party websites. In doing so, so-called profiles can be formed based on your interests. A direct identification of a person is usually not possible through this information, as only pseudonymous browser and/or device information is used. If you do not allow these cookies, you will experience less relevant content/advertising tailored to your interests.

We use these cookies only on the basis of your consent.

You can see which cookies fall into the marketing cookie category on the cookie-dedicated page here.

Insofar as we use cookies on the basis of your consent, you grant this consent by clicking on the “Accept all” button on the banner displayed during your visit when you visit our services – if necessary after you have made certain settings. If you do not wish to give your consent, you can simply click on “Dismiss”. Alternatively you can opt out of any statistics and marketing cookies by clicking on “Preferences” button and switching those off.

By clicking on “Accept all” or by modifying preferences and saving them, you consent to the use of cookies. On the other hand, we obtain in this way – to the extent necessary – your consent to the processing of your data based on these cookies, including the transfer of such data to our marketing partners (third parties). Our marketing partners also use cookies and other technologies for personalization, measurement and analysis of content/advertising.

Note right of withdrawal

You may withdaw your consent at any time in whole or in part at any time with effect for the future by changing your settings in our preference center here.

Browser settings

Of course, you can also set up your browser so that it does not place cookies on your end device. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or how you can delete all cookies you have already received and block all further cookies.

In Internet Explorer:

1. Select in the menu “extras” > “Internet Options”.
2. Click on the tab “Privacy”.
3. Now you can make the security settings for the Internet zone. Here you can set whether and which cookies should be accepted or rejected.
4. Confirm the setting with “OK”.

In Firefox:

1. Select in the menu “Extras” > “Settings”.
2. Click on the tab “Privacy”.
3. In the drop-down menu, select the entry “Create according to user-defined settings”.
4. Now you can set whether to accept cookies, how long you want to keep these cookies and add exceptions to which websites you always or never want to allow cookies to be used.
5. Confirm the setting with “OK”.

In Google Chrome:

1. Click the Chrome menu on the browser toolbar.
2. Now select “Settings”.
3. Click on “Show advanced settings”.
4. Click “Privacy” > “Content Settings”.
5. Under “Cookies” you can make the following settings for cookies:
   • Delete cookies
   • Block cookies by default
   • Delete cookies and website data by default after exiting the browser
   • Allow exceptions for cookies from specific websites or domains

However, we would like to point out that in this case you may not be able to use all functions of our services to their full extent.

Overview of cookies and other technologies

An overview of the cookies and other technologies used on our pages can be found here.

2.2. Establishment, execution and/or termination of a contract

2.2.1. Data processing upon conclusion of the contract

If you register with one of our services and/or enter into another contract with us (e.g. buy a product from us), we process the data required for the conclusion, performance or termination of the contract. This includes:

• Salutation
• First name, last name
• Invoice and delivery address
• Email address
• Billing and payment information
• Date of birth
• Phone number
• Shop settings

The legal basis for this is Article 6 (1) a and b GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer/user account, processing of a purchase contract) between you and us. We are also obliged to process your e-mail address in the event of a purchase via our websites/apps according to EU Data Protection Regulation (“GDPR”) to send an electronic order confirmation (Article 6 (1) c GDPR).

We store the data collected for the processing of the contract – unless we use it for our own marketing purposes – for the duration of the respective contract and until the expiry of the respective statutory or possible contractual warranty and guarantee rights. After expiry of this period, we retain the information required by commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities.

Furthermore, the following data processing is required for the execution of a purchase contract via our services:

Payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on details of the delivery address to logistics companies and shipping partners commissioned by us so that the order can be delivered. To ensure that the goods are delivered according to your wishes, we may transmit your e-mail address and, if necessary, the telephone number to the logistics company and / or shipping partners contracted by us, which take over the delivery. If necessary, they will contact you in advance of the delivery to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purpose and will not be used for other purposes after delivery and will be deleted after expiration of existing commercial and tax retention obligations.

The legal basis for this data processing is Article 6 (1) a GDPR.

2.2.2. Use of data for fraud prevention purposes

The information you provide in the context of an order may be used to check whether an atypical order transaction has occurred (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis for the processing is Article 6 (1) f GDPR.

2.2.3. Transmission of information to transport service providers/shipping partners

For the purpose of delivery of ordered goods, we work together with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivery of the ordered goods or for the purpose of shipment notification: First name, last name, postal address and, if applicable, the e-mail address and, if applicable, the telephone number. The legal basis for the processing is Art. 6 (1) b GDPR.

2.3. Data processing for advertising purposes

2.3.1. Newsletter

As part of our services, we offer you the opportunity to subscribe to our newsletter. In order to be able to ensure that no mistakes have been made when entering the e-mail address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your e-mail address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the e-mail address you provided. Only when you click on this confirmation link will your e-mail address be added to our distribution list for sending our newsletter. The legal basis for this data processing is Article 6 (1) a GDPR.

Reference to the right of withdrawal

You can withdraw your consent at any time with effect for the future by sending a message to hello@b-less.store or using the unsubscribe option at the end of each newsletter.

2.3.2. Product recommendations by e-mail

As an existing customer, you will regularly receive product recommendations from us via e-mail. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. Here, we use the e-mail address provided by you in the context of the purchase to advertise our own goods and / or services that are similar to those that you have purchased from us based on an order already placed. The legal basis for this data processing is Article 6 (1) f GDPR.

Reference to the right of objection

You may object to our product recommendations at any time free of charge with effect for the future by sending a message to hello@b-less.store or at the end of each product recommendation e-mail.

2.3.3. Competitions

If you register/participate in competitions organized by B.less Store (hereinafter referred to as “participation”), we will use the data you provide when participating in the respective competitions for the purpose of executing the participation agreement, in particular to notify you of the prize and, if applicable, to advertise our offers and/or offers of our competitions partners. You can find detailed information in the respective conditions of participation for the respective competitions. The legal basis for this data processing is Article 6 (1) a GDPR, Article 6 (1) b GDPR and Article 6 (1) f GDPR.

2.4. Online presence and service optimization

2.4.1. Google Analytics

For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”), on the basis of Article 6 (1) f GDPR.

In this context, Google creates pseudonymized usage profiles on our behalf by means of cookies. The information generated during your use of this website, such as

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request

Google will be used on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us other services activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will only be stored in abbreviated form and the information about your use of the website will not be merged with other Google data.

You may refuse the use of cookies (including Google Analytics cookies) by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection and processing of information generated by your use of this website by Google by downloading the browser plugin available at the following link and install: tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For more information on data protection in connection with Google Analytics, please visit the Google Analytics website.

2.5. Fan pages

B.less Store maintains social media profiles on the social networks Facebook and Instagram (“Fanpages”), services of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), on which we regularly publish and share content and offers. When YOU interact with our fan pages or other Facebook or Instagram websites, the providers of the social networks record your usage behavior with cookies and similar technologies. B.less Store can view general statistics on the interests and demographic characteristics (such as age, gender, region) of users for its fan pages. If you use social networks, the type, scope and purposes of data processing in the social networks are primarily determined by the providers of the social networks. An exception applies to so-called page insights, for which we are jointly responsible with Facebook and explain below.

Processing of your data by Facebook

Facebook also processes your data when using Fanpages for its own purposes, which are not depicted in this privacy policy and over which we have no control. You can find more information about this at the respective social networks:

Facebook privacy notice

Instagram privacy notice

Usage analysis (Page Insights)

When you interact with our fan pages, Facebook records your usage behavior with cookies and similar technologies. In this context, B.less Store receives “page insights” that contain statistical, non-personalized (anonymized) information about visitors. It is not possible for us to assign this information to you personally. The selection and processing of Page Insights information is done exclusively by Facebook. Page insights help us to understand how our fan pages are used, what interests visitors have, and which topics and content are particularly popular. We use this information to offer visitors to our fan pages relevant content and to better respond to the interests and usage habits of our visitors.

B.less Store and Facebook are jointly responsible for the processing of your data for the provision of Page Insights (Article 26 GDPR). There is an agreement between ABOUT YOU and Facebook that specifies which company fulfills which data protection obligations in accordance with the GDPR with regard to the processing of Page Insights data.

The agreement with Facebook is available here.

Facebook has summarized the key contents of this agreement (including a list of Page Insights data) here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Insofar as you have consented to Facebook in relation to the creation of page insights described above, the legal basis is Article 6 (1) a GDPR. Otherwise, the legal basis is Article 6 (1) f GDPR, whereby our legitimate interest is derived from the aforementioned purposes.

2.6. Customer account / user account

In order to provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer account/user account.

The creation of a customer account is voluntary. If you create a customer account, the processing of your data collected here is based on Article 6 (1) b GDPR. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.

Only if you want to place orders via our website/application, the opening of a customer account is mandatory for the processing of the contract.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This password is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and do not make them accessible to unauthorized third parties. Please note that you will automatically remain logged in after leaving our website, unless you actively log out.

You have the option to delete your customer account at any time. Please note, however, that this does not result in the deletion of the data visible in the customer account once you have ordered from us. The deletion of your data takes place automatically after the expiration of the commercial and tax retention obligations applicable to us. The legal basis for this further data processing is Article 6 (1) c GDPR and Article 6 (1) f GDPR.

2.7. Contacting

We don’t  use any external CRM system to process customer inquiries. B.less Store processes your data when you submit a request internally and doesn’t transfer your personal data to any third party..

The legal basis for this data processing is Article 6 (1) a, Article 6 (1) b, Article 6 (1) c GDPR and Article 6 (1) f GDPR.

2.8. Payments

We process your payment information for the purpose of payment processing, e.g. when you purchase or use a product and/or service via www.b-less.store. Depending on the payment method, we forward your payment information to third parties (e.g. in the case of credit card payments to your credit card provider).

The legal basis for this data processing is Article 6 (1) a, Article 6 (1) b GDPR and Art. 6 (1 f GDPR.