Privacy Policy

The purpose of data protection is that our customers and business partners as well as our suppliers and other contractual partners are not impaired in their rights by the processing of their personal data. For this reason, kidsroom.de GmbH & Co. KG only uses data under careful consideration of the applicable legal regulations. These are in particular the German Bundesdatenschutzgesetz/ Federal Data Protection Act (new) (BDSG), the General Data Protection Regulation (GDPR) and the German Telemediengesetz/ Telemedia Act (TMG).
The following Privacy Policy explains how we deal with personal data in their collection, processing, use and deletion. The declaration uses the official terms of the GDPR, which are explained in Article 4 GDPR.

1. Persons responsible and Data Protection Officer

This privacy policy applies to data processing by:

kidsroom.de GmbH & Co. KG (hereafter referred to as: kidsroom)
Am Langen Streif 11
D-36433 Bad Salzungen / OT Langenfeld
Germany

Phone: +49 (0) 3695 / 85380-0
Fax: +49 (0) 3695 / 85380-29
Email info@kidsroom.de

The data protection officer of kidsroom.de is available at the address mentioned above, for the attention of Mr Dominik Fünkner, or on datenschutzbeauftragter@datenschutzexperte.de.

2. Collection and storage of personal data as well as the nature and purpose of their use

a) Kidsroom uses personal data in particular whenever it is necessary for the fulfilment of the contract and thereby in particular for the ordering process. In order to ensure a smooth processing of the order, delivery and payment and the processing of other requests, the data must be sent to contracted service providers.
Personal data collected for the fulfilment of the contract will be deleted after fulfilment of the contract, unless the law presupposes a longer storage obligation or you have consented to an additional storage according to Article 6 Paragraph 1 Sentence 1 GDPR.

b) When visiting the website

When you visit our website https://www.kidsroom.de/, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until deleted automatically: IP address of the requesting computer, date and time of access, name and URL of the accessed file, website from which the access is made (referrer URL), browser used and, if applicable, the operating system of your computer and the name of your access provider. The data mentioned are processed by us to ensure a smooth connection establishment of the website, a comfortable use of our website, to evaluate the system security and stability and for other administrative purposes. The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. The legitimate interest of kidsroom follows from the data collection purposes listed above. In no case does kidsroom use the collected data for the purpose of drawing conclusions about you. In addition to this, kidsroom uses cookies and analytical services when you visit the website. Further details can be found under section 4 and 5 of this privacy policy.

c) When subscribing to our newsletter

If, according to Article 6 paragraph 1 sentence 1 lit. a GDPR, you have expressly consented, we use your e-mail address to send you our newsletter on a regular basis. For receiving our newsletter, giving an e-mail address is sufficient. Unsubscribing is possible at any time, for example via a link at the end of each newsletter. Alternatively, you can also send an unsubscribe request via e-mail to info@kidsroom.de. After unsubscribing, your e-mail address will be deleted immediately from our newsletter distributor, unless you have expressly consented to a continued use of the collected data or the continued processing is otherwise permitted by law. The newsletter is distributed via "MailChimp", an email marketing service of Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. The e-mail addresses of our Newsletter recipients, as well as their other information described in these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimise or improve its own services, e.g. for the technical optimisation of sending and designing the newsletter or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to contact them or to pass them on to third parties. Kidsroom trusts on the reliability and the IT security and data security of MailChimp. MailChimp is certified to the US-EU data protection agreement "Privacy Shield" and is committed to complying with EU data protection requirements. Furthermore, we have entered into a data processing agreement with MailChimp. This is a contract in which MailChimp pledges to protect the data of our users, to process it in accordance with its privacy policy on our behalf and, in particular, not to pass them on to third parties. Here you will find the privacy policy and conditions of MailChimp.

d) When using our contact form

For questions of any kind, kidsroom offers the opportunity to contact us via a form provided on the website. Specifying a valid e-mail address is required so that kidsroom knows who has sent the request and whom to answer. Further information can be provided voluntarily. Data processing for the purpose of contacting us is in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR based on your consent given voluntarily. The personal data collected for the use of the contact form of kidsroom will be deleted after completion of the request made by you after expiry of the statutory period.

e) For vouchers and competitions

For vouchers and competitions only the respective email addresses as well as data are recorded, which are left with the visit on the website of kidsroom.de. A shipping address is only collected by the respective winners and is used only for the purpose of delivering the prize. After the prize has been delivered successfully, the collected data will be deleted immediately. In competitions that include shopping vouchers as a prize, only the respective email address is obtained.

f) Registration user profile

You have the option to register for certain services provided on the website to create a user profile. As part of the registration and creating an appropriate account, we collect and use the following personal data: first name, last name, title, postal address, email address of the user, date and time of registration. In addition to this, voluntary information can be provided. With your user account you are given the opportunity to use other parts of the website and to log in for the offers you have purchased. Your data will be deleted if the user account on our website is deleted and there are no statutory storage obligations. You can change and/ or delete your user account by sending a corresponding message to kidsroom.de.

3. Disclosure of data

Transferring of personal data takes place only for the following purposes. Kidsroom will pass on your personal data to third parties only if:

you have given the required express consent according to Article 6 Paragraph 1 Sentence 1 lit. a GDPR,
the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR is required beyond the performance of the contract for the protection of legitimate interests of us or third parties and there is no reason to assume that you have a predominantly legitimate interest in the non-submittal of your data,
in the event that the disclosure according to Article 6 Paragraph 1 Sentence 1 lit. c GDPR is a legal obligation, and
that this is permitted by law and is required for the execution of contractual relationships with you or for the implementation of pre-contractual measures according to Article 6 Paragraph 1 Sentence 1 lit. b GDPR.

Kidsroom also uses external service providers to settle the services. These are carefully selected by kidsroom and commissioned accordingly. They are bound by the instructions of kidsroom in terms of privacy and are monitored on a regular basis.

Additional privacy policy of Klarna Bank AB (publ)
Klarna reviews and evaluates the data you provided and in case of legitimate interest performs a data exchange with other companies and credit rating agencies. Your personal data will be processed in accordance with applicable data protection law as described in Klarnas privacy statement.

4. Cookies

Kidsroom uses cookies on the website. These are small messages your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. The cookie stores information in a small file, each of which results in connection with the specific terminal device used. However, this does not mean that we get access to your personal information or knowledge of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted after leaving our page. In addition to this, Kidsroom also uses temporary cookies to optimise usability. These cookies are stored on your terminal device for a specified period of time. If you visit our site again to take advantage of our services, the cookie will automatically recognise that you have already been on our website before and what inputs and settings you have made, so you do not have to re-enter them. On the other hand, we use cookies in order to record the use of our website statistically and to evaluate it for the purpose of optimising our offer (see section 5). Upon each return visit to our website, these cookies allow us to automatically recognise that you have already been on our website. These cookies are automatically deleted after a specified time. The data processed by cookies are required for the purposes mentioned in order to safeguard our legitimate interests as well as those of third parties according to Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or always a hint appears before a new cookie is created. Deactivating cookies completely may mean that you cannot use all features of our website.

5. Analytical tools

a) Tracking tools

The tracking measures listed below and used by us are based on Article 6 Paragraph 1 Sentence 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned regulation.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.

b) Google Analytics

For the purpose of customising and continually optimising our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereafter referred to as "Google"). In this context, pseudonymous usage profiles are created and cookies (see point 4) are used. The information generated by the respective cookie about your use of this website such as

browser type and version,
utilised operating system,
Referrer (URL of the previous page you visited),
host name of accessing computer (IP address),
time of server request

are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and needs-based website design. This information may also be transferred to third parties if required by law or if third parties process this data by order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymised, so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully useable.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking this link. An opt-out cookie that will prevent the future collection of your data when you visit this website will then be set. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For more information about privacy related to Google Analytics, see the Google Analytics Help Centre (https://support.google.com/analytics/answer/6004245?hl=en).

c) Google AdWords Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimising our website, we also use Google conversion tracking. In doing so, Google AdWords will set a cookie (see section 4) on your computer if you have reached our website via a Google ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain websites of the AdWords customer and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the ad and was redirected to this page.
Every AdWords customer receives a different cookie. Thus, cookies cannot be tracked via the websites of AdWords customers. The information gathered by using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn about the total number of users who clicked on their ad and were redirected to a page that bears a conversion tracking tag. However, they do not receive information that personally identifies users.
If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie – for example, via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that cookies are blocked by the domain "www.googleadservices.com". Google's privacy policy on conversion tracking can be found here ( https://services.google.com/sitestats/en.html).

d) Microsoft Bing Conversion Tracking

This website uses Conversion Tracking by Bing Ads (Microsoft Corporation One Microsoft Way Redmond WA 98052 USA). If you have clicked on a Bing ad, a cookie will be placed on your computer. Both Bing and the website owner can see that someone has been redirected to the website via the Bing ads and has reached a predefined target page (conversion page). If you do not want to participate in the described tracking procedures, the required setting of a cookie can be rejected by setting the browser. Deactivation can be done via the following link: https://choice.microsoft.com/en/opt-out.

7. Rights of the persons affected

In accordance with Article 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention time, the right to rectify inaccurate data, deletion, limitation of processing or objection, the existence of a right to appeal, the source of your data, if they have not been collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details.

In accordance with Article 16 GDPR, you have the right to demand the rectification of inaccurate data or the completion of personal data stored by us immediately.

In accordance with Article 17 GDPR, you have the right to demand the deletion of your personal data stored by us, unless the processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims is required.

In accordance with Article 18 GDPR, you have the right to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you require this data to assert, exercise or defend legal claims or you have objected to processing in accordance with Article 21 GDPR.

In accordance with Article 20 GDPR, you have the right to obtain your personal data you provided us with in a structured, common and machine-readable format or to request the transfer to another person responsible.

In accordance with Article 7 Paragraph 3 GDPR, you have the right to revoke the consent you have once given to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and

In accordance with Article 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

8. Right of objection

If your personal data are based on legitimate interests are processed in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to exercise your right of revocation or objection, please send an email to info@kidsroom.de.

9. External links

As far as links to other websites are included, kidsroom has neither influence nor control over the linked contents and the data protection regulations there. Kidsroom recommends checking the privacy policies on the linked websites in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

10. Data security

We use the popular SSL (Secure Socket Layer) method within the site visit, in conjunction with the highest level of encryption supported by your browser. Normally, this is a 256-bit encryption. If your browser does not support a 256-bit encryption, we will use a 128-bit v3 technology instead. Whether a single page of our website is encrypted is shown by the closed key or lock icon in the lower status bar of your browser.
We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved according to technological developments.

11. Updating and changing this privacy policy

This privacy policy is currently valid as of May 2018.
As a result of further development of our website and offers thereon or due to changed legal or official requirements, it may be necessary for us to change this privacy policy. The current privacy policy can be viewed and printed by you at any time on the website at https://www.kidsroom.de/en/privacy-policy.

Kidsroom.de