How is my personal data protected?

Protecting your privacy is just as important to us as it is to you. That's why we do everything we can to ensure that your data is as safe as possible with us. We are happy to inform you about your rights and how we handle your data. Do you have any questions or suggestions about data protection? Our data protection officer will be happy to be at your disposal personally.

 

What is personal data?

There are many types of personal data. Personal data means information that relates to an identified or identifiable person. This mainly includes data that allows conclusions about your identity, such as your name, telephone number, address or e-mail address. For example, data that we collect when visiting our website and that cannot be associated with you does not fall under the definition of personal data.

You can print or save the privacy statement by using the usual functionality of your browser.

 

About EasyToys

EasyToys is a brand of EDC Retail B.V., which belongs to the EQOM family. The EQOM group has webshops in several countries. EQOM Consumer B.V. ("EC") and EasyToys are committed to protecting and respecting your personal data.

EasyToys and EC are both companies within the EQOM group and work together to provide you with the best possible customer experience both online and offline.

For the purposes of data protection law, EasyToys and EC are "joint controllers" for the processing of your personal data as described in this Notice. This means that both EasyToys and EC work together and can share data with each other to provide you with the best possible customer experience.

You can contact us at any time. Please use the contact details below:

More information about EDC Retail BV can be found here. For contact details, you can go under the heading "EasyToys customer service”.

 

1. Contact person and controller

The contact person and so-called controller (hereinafter: "controller") for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

EQOM Consumer B.V., registered under number 92815588 in the register of the Netherlands Chamber of Commerce;

and

EDC Retail B.V.
Phoenixweg 69641 KS VeendamNederland

Phone: 0598 690 453 (hereinafter referred to as "we" or "us")

For any questions about data protection relating to our online offer or the use of our website, you can also contact our data protection officer at helpdesk@easytoys.nl.

 

2. Account and Payment Information

2.1 User Account

For all customers who register, we provide password-protected direct access to their stored data with us (customer account). Here you can view information about your completed, open and upcoming orders, or correct or change your saved information.

The legal basis for the processing of this data is Article 6(1)(b) of the GDPR.

 

2.2 Payment details

We offer payment options via invoice, prepayment, Sofortüberweisung, Giropay, PayPal and credit card. We process your payment information to process payments. Depending on the payment method you choose, we will provide your payment details to the bank or the payment service providers we have engaged. The legal basis for the processing of this data is Article 6(1)(b) of the GDPR.

 

2.3 Payment Handling

Pay.nl

To handle part of the payments in our webshop, we use the payment service provider Pay.nl, Kopersteden 10, 7547 TK Enschede, the Netherlands. Pay.nl processes your name, address and place of residence, your IP address and your payment details such as your bank account number or credit card number. Pay.nl reserves the right to use your data to further improve the service and to share (anonymised) data with third parties in this context. Pay.nl stores your data no longer than legally permitted based on the applicable deadlines.
The legal basis for the processing of this data is Article 6(1)(b) of the GDPR. More information about this can be found in the privacy statement of Pay.nl.

 

PayPal

When paying via PayPal, your payment details will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") during payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Purchase on account" via PayPal. The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide on the availability of the respective payment method.

The credit check can contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical method. Address details are included in the calculation of the score values, among other things.

The legal basis for the processing of this data is Article 6(1)(b) of the GDPR. For more information on data protection, including the credit reference agencies used, please refer to PayPal's privacy policy.

 

2.4 Creed check

If you choose to pay on purchase on account, your creditworthiness will be checked based on mathematical-statistical methods for your transaction. For this purpose, we will send your personal data (such as name and address) and the data relating to your order (such as IP address) to Klarna Bank AB (publ) with its registered office in Sveavägen 46, 111 34 Stockholm, Sweden in accordance with the provisions of the GDPR.

For the purpose of our own identity and credit check, Klarna or partner companies engaged by Klarna will send your personal data to credit reference agencies. They then receive information from them and, if necessary, credit information based on mathematical-statistical methods, including address details in the calculation. We use the information we receive about the statistical probability of payment default for an informed decision about which payment method (purchase on account, payment in installments or direct debit) we can offer you. In the event of problems with address verification, negative credit check or any outstanding receivables from previous business relationships, we may not be able to offer you the payment methods purchase on account, payment in installments and direct debit under certain circumstances. The credit check can contain probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and in which, among other things, address data are included in the calculation. Detailed information about this and the credit reference agencies used can be found in Klarna AB's privacy policy.

If you do not agree with the payment methods offered to you based on this automated process, you can let us know in writing via email at helpdesk@easytoys.nl. We will then reconsider our decision, taking into account your point of view.

The legal basis for the processing of this data is Article 6 (1) (f) GDPR, our legitimate interest in preventing payment default and misuse by third parties.

 

3. Customer Service

3.1 Contacting us by email

You have the option to contact us via helpdesk@easytoys.nl. In this context, in addition to your contact details, we also process the content of your messages and communication with us. We process the data mentioned above exclusively for the purpose of communicating with you.

The legal basis for the processing of this data is Article 6(1)(b) of the GDPR.

 

3.2 Zendesk

To improve communication with you, we also use the chat program Zendesk Chat, a service provided by Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA ("Zendesk"). If you have general or specific questions or concerns regarding our products, the website, or our company, you can send us a message through Zendesk. You can see if someone is online to answer directly. If this is not the case, we will respond to your request immediately during our opening hours. In this context, we process data exclusively for the purpose of communicating with you. When using Zendesk, the IP address of the end device and the address of the sub-page from which you call up Zendesk are recorded. The IP address is pseudonymised. Zendesk also uses cookies and similar technologies. Executed chats are logged and stored.

The legal basis for the processing of this data is Article 6 (1) (b) GDPR, if it concerns support requests or requests relating to products before a possible contract is concluded, and otherwise Article 6 (1) (f) GDPR, based on our legitimate interest in maintaining contact with our customers and maintaining customer relationships.

The data collected in this context may be transferred to a Zendesk server in the USA and stored there. In the event that personal data is transferred to the U.S. or other third countries, Zendesk has approved binding internal privacy rules in accordance with Article 46(2)(b), Article 47 of the GDPR and we have concluded standard contractual clauses with Zendesk in accordance with Article 46(2)(c) of the GDPR. You can find more information about this in section 12 ("Transfer of data to third countries") of our privacy policy.

You can learn more about this in Zendesk's Privacy Statement.

 

4. Newsletter, product recommendations and customer surveys

4.1 Nieuwsbrief

You have the option of subscribing to our newsletter, in which you will regularly receive free information about our range or our partner companies and we will inform you of exclusive offers.

To order our newsletter, we use the so-called double opt-in procedure, which means that we will only send newsletters by e-mail after you have confirmed in our notification e-mail that you want to receive our newsletter by clicking on a link. If you confirm your wish to receive the newsletter, we will store your email address, the time of registration and the IP address used for the registration until you unsubscribe from the newsletter. The storage is only used to send the newsletter and to prove your registration. The legal basis for the processing of the aforementioned data is your consent in accordance with Art. 6 (1) lit. a GDPR.

 

4.2 Product recommendations

If you place an order with us, we will also use your email address to send you product recommendations for products that may be of interest to you or that match the product purchased. The legal basis for this is Art. 6 (1) lit. f GDPR in conjunction with § 7 para. 3 UWG, based on our interest in sending individual offers.

 

4.3 Product Reviews

When you place an order with us, we also use your email address to ask you to write a review about the product you have purchased. The legal basis for this is Article 6(1)(f) GDPR, justified by our legitimate interest in sharing your experience with our products with other customers.

 

4.4 Customer surveys

If you place an order with us, we will also use your email address to send you customer and satisfaction surveys. The answers to the surveys are collected pseudonymously (anonymized in customer surveys). We will use the results of the surveys to improve our products and services. The legal basis for this is Art. 6 (1) lit. f GDPR, based on our legitimate interest to continuously improve our services.

 

4.5 Possibility to object

You can cancel the sending of newsletters, product recommendations, customer and satisfaction surveys (hereinafter referred to as "promotional emails") at any time. A corresponding unsubscribe link is located in every advertising email. A message to the contact details mentioned above or in the e-mail (e.g. by e-mail or letter) is also sufficient.

 

4.6.1 Deployteq

We use the tool "Deployteq" from e-Village B.V., Amertsfoortseweg 10 E, 3712 BC Huis ter Heide Netherlands, to personalize and automate our email marketing. The legal basis for the use of CanopyDeploy is Art. 6 par. 1 lit. f GDPR, based on our interest in contemporary email marketing. We have concluded a processing agreement with e-Village.

 

4.6.2 SurveyMonkey

We use technical services from SurveyMonkey Inc., San Mateo, One Curiosity Way, San Mateo, California 94403, USA ("SurveyMonkey") for customer surveys. The legal basis for the above-mentioned data processing is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest to conduct customer surveys in a contemporary manner. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with SurveyMonkey in accordance with Art. 46 para. 2 lit. c GDPR. You can find more information about this in section 12 ("Data transfers to third countries"). For more information about this, please visit SurveyMonkey's Privacy Policy.

 

5. Contests, vouchers and loyalty program

5.1 Matches

If you decide to participate in competitions organised by us, we will usually ask you to provide your name and email address. We process the above-mentioned data in order to be able to inform you in case of a win and to ensure that each participant only participates in the competition once. In some cases, additional information may be required to enter the competition (such as age, etc.). In these cases, you will be informed immediately about the required data for the match.

We also use your data for market and opinion research. We use them anonymously for statistical purposes only and only for Sonoma Internet GmbH. Your survey responses will not be passed on to third parties or published. We don't store the responses from our surveys along with your email address or other personal information.

You can object to the use of your data for market and opinion research purposes at any time, in whole or in part, without incurring any costs other than the shipping costs according to the basic rates. A text communication to the above-mentioned contact details (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey email.

The legal basis for the above-mentioned processing is Art. 6 para. 1 lit. b GDPR.

 

5.2 Gift Cards

If you are interested in a gift card offer from Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe ("Sovendus") and clicks on the gift voucher banner, your title, name and e-mail address will be transmitted to Sovendus in encrypted form in order to prepare the gift voucher. Prior to this transfer, the IP address is already transmitted, which is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days. In addition, for billing purposes, we send pseudonymous order numbers, order value with currency, session ID, coupon code, and timestamp to Sovendus.

The legal basis for the processing as described above is Art. 6 Abs. 1 lit. b DSGVO. For more information about the processing of your data by Sovendus, please see Sovendus' online privacy statements.

 

5.3 Loyalty Points Program

By creating a user account, you automatically participate in our loyalty points program.

Therefore, in addition to your e-mail address and name, we also process the data of your purchases (purchase and order data, e.g. date, product, product number, quantity, price).

The data collected is necessary for the implementation of our loyalty points program. We may send your current points balance or special promotions related to the points program to your email address if you have consented to this.

By processing data about your purchases, we can award you the resulting loyalty points and store them in your points balance. More details about the structure of our loyalty points program can be found in our terms and conditions.

The legal basis for the processing as described above is Art. 6 Abs. 1 S. 1 lit. b) GDPR.

 

6. Device and access data and the creation of log files

With each use of our website, we automatically collect the data that your browser transmits to enable your visit to the website. These include, in particular:

  • Domain name or IP address of the requesting end device
  • File request from the client (file name and URL)
  • HTTP Response Code
  • Date and duration of the visit
  • Address of the accessed website and the requesting website

The data processing is necessary to enable the visit to the website and to ensure the permanent functionality and security of our systems. The aforementioned data is also temporarily stored in internal log files for the purposes described above, to provide statistical information about the use of our website, to further develop our website with regard to the usage behavior of our visitors (e.g. if the proportion of mobile end devices with which the pages are accessed increases) and to maintain our website in general.

The legal basis for the data processing described above is Art. 6 Abs. 1 lit. b DSGVO.

 

7. Use of cookies and similar technologies

This website uses cookies and similar technologies (collectively referred to as "tools"), which are provided by us or by third parties. Cookies are small text files that are stored on your device by the browser. Cookies are not used to run programs or load viruses onto your computer. They enable convenient Internet browsing: When you visit the website again, the stored cookie is transferred to the web server. For example, the goods you have placed in your shopping cart are saved, so that you can easily continue shopping where you left off next time.

Similar technologies include web storage (local/session storage), fingerprinting, tags, or pixels. Most browsers are set to accept cookies and similar technologies by default. However, you can usually adjust your browser settings to refuse cookies or similar technologies or to store them only on the basis of prior consent. If you reject cookies or similar technologies, not all of our offerings may work smoothly for you.

A detailed overview of the cookies and tools we use can be found here: https://support.easytoys.nl/hc/nl/articles/11277582319261-Cookiebeleid

 

7.1 Legal basis and repeal

Legal basis

We use tools that are necessary for the operation of the website on the basis of our legitimate interest in accordance with Article 6(1)(1)(f) GDPR in order to enable you to use our website more comfortably and more personally and to make it as time-saving as possible. In certain cases, these tools may also be necessary for the performance of a contract or for the implementation of pre-contractual measures, in which case the processing takes place in accordance with Article 6(1)(1)(b) of the GDPR.

We only use optional cookies and similar technologies for marketing and analysis purposes if you have given us your consent to data processing in accordance with Article 6(1)(a) of the GDPR and, if applicable, of data transfer to third countries in accordance with Article 49(1)(1)(a) of the GDPR via our consent banner. The risks associated with the transfer of data to third countries can be found in section 12 ("Transfer of data to third countries"). The access to and storage of information on the end device is based on the implementing laws of the ePrivacy Directive of the EU member states.

 

Obtaining your consent

Our website uses the One Trust tool provided by OneTrust Technology Limited, 82 St. John Street, London, England, EC 1M 4JN ("One Trust") to collect and manage consents and any withdrawals. If you make a decision in the consent banner, a cookie will be set that records your approval or rejection. We set this technically necessary cookie on the basis of Article 6 (1) (f) GDPR in order to document your consent. Access to and storage of information on the end device is absolutely necessary in these cases and is based on the implementing laws of the ePrivacy Directive of the EU member states. If you delete your cookies, we will ask you for your consent again on a later visit.

Withdrawal of your consent or change of your selection

You can revoke your consent at any time or adjust the selection of the tools. More information on how to do this can be found in the following link:Cookiebeleid - EasyToys.

 

7.2 Necessary Tools

We use certain tools to enable the basic functions of our website ("necessary tools"). Without these tools, we would not be able to offer our service. Therefore, necessary tools are used without consent on the basis of our legitimate interests according to Art. 6 para. 1 S. 1 lit. f GDPR or to perform a contract or take pre-contractual measures pursuant to Art. 6 para. 1 S. 1 lit. b GDPR.

 

Eigen cookies

We use our own necessary cookies in particular · for login authentication,· for load balancing,· to save your language settings,· to register that you have seen an information posted on our website - so that it is not displayed again on your next visit to the website.

To improve our website, we use various technologies to improve our website, analyze user behavior and evaluate the associated data. The data collected may include, in particular, the IP address of the end device, the date and time of access, the identification number of a cookie, the device ID of mobile end devices and technical information about the browser and operating system. However, the data collected is only stored pseudonymously, so that no direct conclusions can be drawn about individuals.

In the next section, we would like to explain these technologies and the providers used for them.

 

What technically necessary tools do we use?

The following tools are absolutely necessary for the use of our service for technical reasons. They guarantee that our service is safe and functioning.

 

Google Tag Manager

Our website uses Google Tag Manager, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and for all other users of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google"). The Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is placed in the source code of our website in order to collect, for example, prescribed usage data. The Google Tag Manager takes care of the activation of other tags which in turn may collect data. The data is partly stored on a Google server in the USA. If a deactivation has been carried out at domain or cookie level, it will continue to apply to all tracking tags implemented with Google Tag Manager.

Google Tag Manager works without the use of cookies. The legal basis for the use of Google Tag Manager is Art. 6 (1) lit. f GDPR, based on our interest in the efficient management of the tools we use.

Data is partially processed on a Google server in the USA. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google in accordance with Art. 46 para. 2 lit. c GDPR. For more information, please see Section 12 ("Data Transfers to Third Countries").

For more information, see Google's Tag Manager information.

 

One Trust

To obtain and manage cookie consents, we use the One Trust tool (see above). With the help of this tool, consent can be given for all, individual or no data processing via cookies. During your visit to our website, your consents or withdrawals, the setting of cookies, your IP address, information about your browser, your device and the time of your visit will be transferred to One Trust. In addition, One Trust uses a necessary cookie to store your consents and withdrawals. If you consent, information about the browser, country and device type is also stored.

This data processing is necessary to provide you with the legally required cookie management solution and to comply with our documentation obligations. The legal basis for using One Trust is Article 6(1)(f) of the GDPR, based on our interest in complying with the legal requirements for the management of cookie consents.

The data is transferred worldwide. In the case of the transfer of personal data to the USA or other third countries, we have concluded standard contractual clauses with One Trust in accordance with Article 46 (2) (c) GDPR. For more information, please see Section 12 ("Transfer of Information to Third Countries") of One Trust's Privacy Policy.

More information can be found in One Trust's privacy policy.

 

7.3 Which analytics and marketing cookies do we use?

We also use tools for analytics and advertising purposes ("marketing tools"). Some of the access data generated when using our website is used for interest-based advertising. The analysis and evaluation of this access data allows us to display personalized advertisements on our website and on the websites of other providers that correspond to your actual interests and needs.

In the next section, we would like to explain these technologies and the providers used in more detail. The data collected may include, in particular: the IP address of the device; the identification number of a cookie; the device ID of mobile devices; Referrer URL (previously visited page);· Pages visited (date, time, URL, title, length of stay);· Downloaded files; Clicked links to other websites; If applicable, achieving certain goals (conversions);· Technical information: operating system; browser type, version, and language; device type, brand, model and resolution; Approximate location (country and possibly city).

However, the data collected is only stored pseudonymically, so that no direct conclusions can be drawn about the persons.

 

ADITION

Our website uses the services of Virtual Minds GmbH, Ellen-Gottlieb-Straße 16, D-79106 Freiburg im Breisgau ("ADITION"). ADITION uses cookies to optimize the display of ads placed by ADITION's customers for users.

This relates, for example, to the maximum frequency with which a user will see an ad. In addition, ADITION uses stored cookie information in individual cases for statistical evaluations. ADITION does not store any information such as name, email addresses or other personal data by placing cookies. The information includes technical information such as the frequency of display of ads and the date they were displayed, the browser used, or the operating system installed. All stored data is stored on servers in Germany. In addition, ADITION meets all P3P (Privacy Preferences Project) requirements.

The transmitted IP address of a user device is completely anonymized and used to form household networks. In household networks, the devices that are connected to the Internet, such as computers, telephones, connected TVs and others, can be recognized and the collected usage data from websites about the different devices can be combined. The information obtained does not allow the determination of personal data or a specific location of the users. A personal identification of the users is therefore excluded.

You can find more information about this in ADITION's privacy policy.

 

Affilinet / Awin / Webmaster Plan / Digital Window

The website participates in partner programs of Awin AG, Eichhornstraße 3, 10785 Berlin ("Affilinet"), a service for integrating advertisements in the form of text links, image links, banners or input fields. Affilinet uses cookies and similar technologies to show you relevant advertisements. Affilinet also uses so-called web beacons (invisible images). This allows data such as visitor traffic on these pages to be evaluated.

The information collected by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to an Affilinet server and stored there. This information may be passed on by Affilinet to Affilinet's contractual partners. However, Affilinet will not merge your IP address with other data stored by you.

You can find more information about this in Affilinet's privacy policy.

 

Google Ads

Our website uses the "Google Ads" service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users.

In the case of Google Ads, customer actions defined by us are recorded and analyzed by means of "Google Ads Conversion Tracking" (e.g. clicks on an ad, page views, downloads). We use "Google Ads Remarketing" to show personalized ads for our products on Google's partner websites. Both services use cookies and similar technologies. The data collected in this context may be transferred by Google to a server in the United States and stored there. In the case of the transfer of personal data to the United States, we have concluded standard contractual clauses with Google for the evaluation of the data.

If you use a Google Account, depending on the settings in your Google Account, Google may associate your Web and App Browsing History with your Google Account and use information from your Google Account to personalize ads. If you do not want this connection to your Google account, it is necessary that you log out of Google before visiting our website.

If you have not consented to the use of Google Ads, Google will only show general ads that have not been selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option to disable personalized ads in Google's ad settings.

We have entered into a data processing agreement with Google Ireland Limited for the use of Google Ads. In the case of the transfer of personal data from Google Ireland Limited to the United States, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Article 46(2)(c) of the GDPR. In addition, we also obtain your express consent in accordance with Article 49 (1) (a) GDPR for the transfer of your data to third countries. The following cookies are set by Google:· "_gcl_au" for 90 days· "_gcl_aw" for 90 daysYou can find more information about this in Google's Data Use and Privacy Policy.

 

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). According to Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is the contact person for all privacy issues.
Google Analytics uses cookies and similar technologies to analyze and improve our website behavior of users. Google will process the information collected for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services related to website usage and internet usage. The data collected in this way may be transferred by Google to a server in the USA for evaluation and storage. We have selected the following privacy settings for Google Analytics:IP anonymization (shortening of the IP address before the evaluation so that no conclusions can be drawn about your identity)
Disabled advertising features (including audience retargeting via GA Audience)
Disabled personalized ads
Disabled cross-device tracking (Google Signals)
Disabled data sharing with other Google products and servicesThe following data is processed by Google Analytics:
Anonymized IP address; Referrer URL (pre-visited page);
Pages visited (date, time, URL, title, length of stay);
Downloaded files; Clicked links to other websites;
Any goals achieved (conversions);
Technical information: operating system; browser type, version and language; device type, brand, model and resolution;
Approximate location (country and possibly city, based on anonymized IP address). Google Analytics uses the following cookies for the stated purpose with the corresponding storage period:· " _ga " for 2 years and " _gid " for 24 hours (both for the recognition and differentiation of website visitors by a user ID);· " _gat " for 1 minute (for reducing requests to the Google servers);· Possibly "IDE" for 13 months (third-party cookie for the recognition and differentiation of website visitors by a user ID, for recording interaction with advertisements and as part of the playback of personalized advertisements).

We have concluded a data processing agreement with Google for the use of Google Analytics and, in the case of the transfer of personal data to the USA or other third countries, standard contractual clauses. You can find more information about this in Section 12 ("Transfer of data to third countries") of Google's privacy policy.

You can find more information about this in Google's privacy policy.

 

Google Optimize

Google Optimize is used in conjunction with Google Analytics. This means that Google Optimize uses the same cookies as Google Analytics. It is a test tool and helps us to improve our website for you. The contact person for all matters is Google again. You can find more information about data protection under the Google Analytics section.

 

Hot Jar

Hotjar is an analysis tool that allows us to evaluate your online behavior. With the data collected, we can improve the functionality and user-friendliness of our website and thus increase our conversion rate.

More information can be found in HotJar's privacy policy: https://www.hotjar.com/legal/policies/privacy/

 

Clarity

Microsoft Clarity is a customer journey tracking system that captures visitors' movements and interactions on a website. The ultimate goal of this information/data is to analyze the data for the optimization of the website.


For more information, see the privacy policy of Clarity (part of Microsoft): https://www.microsoft.com/en-us/concern/privacy

 

Dynamic Yield

We use Dynamic Yield, a personalization service for customers. Dynamic Yield uses cookies and other technologies to record and analyze the movements and interactions of visitors on our website. This information is then used to optimize our website and provide personalized content and offers based on the interests and preferences of individual users.

Dynamic Yield processes personal data on our behalf as a data controller. This may include data such as IP addresses, device and browser information, pages visited, and interactions with the website.

We have entered into a data processing agreement with Dynamic Yield to ensure that they only process your personal data in accordance with our instructions and applicable data protection laws.

 

Vimeo

We use Vimeo, a video platform of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you watch a video on our website that has been uploaded to or embedded from Vimeo, certain data about you will be processed by Vimeo. This includes information about the videos you watch and your IP address.

Vimeo may also use cookies and similar technologies to collect information about your interactions with the videos played on our website. Please refer to Vimeo's Privacy Policy for more information about the specific information Vimeo collects and how it is used.

We have entered into an agreement with Vimeo to ensure that your personal data is only processed in accordance with our instructions and applicable data protection laws.

 

Left star

On this page, we use the tracking technology of Linkster GmbH, Geschwister-Scholl-Straße 52, 20251 Hamburg, to understand, measure and visualize partnerships and advertising channels. This is a feature to measure the efficiency of the corresponding advertising measures. In addition, the data allows us to allocate advertising results for settlement with associated advertising partners. When you click on an ad integration, cookies are stored in your browser that are read in the event of a transaction. At each touchpoint, your browser sends an HTTP request (request) to Linkster's server, transferring certain information. This information includes the URL of the website on which advertising material is placed (referrer URL), the browser identifier (user agent) of your device (including information about the device type and operating system), the IP address of the device (this IP address is anonymized and hashed by us before storage), HTTP header (data packet containing various technical information automatically sent by your browser), the time of the request and,  if previously stored on the device, the cookie with its contents.

The tracking technology stores cookies on your device to document actions. A 24-digit, anonymous ID is stored in the cookie. The data is stored encrypted in our database on the server and is linked to this ID.

This includes information about the last touchpoints (i.e., when a particular creative was shown or clicked on from a device). The stored touchpoints can be merged into a customer journey if necessary. In the event of a promotion request, the order number and the value of your shopping cart are usually also transferred and stored by us. In addition, the following values may be transferred and stored: your customer number, new customer characteristics, your age and gender, as well as the information you have provided in a customer survey.

The cookies stored by Linkster GmbH will be deleted after 30 days at the latest. The information provided to us and the cookies serve the sole purpose of correctly allocating the success of advertising material and the associated billing and are justified by our legitimate interests in accordance with Article 6 (1) sentence 1 lit. f GDPR.

If you do not want cookies to be stored in your browser, you can achieve this by using the appropriate browser settings. You can disable the storage of cookies in your browser via Tools/Internet Options, limit it to certain websites or set your browser to notify you when a cookie is being sent. However, please note that in this case, you may expect limited display of online offers and limited user guidance. You can delete cookies at any time. In this case, the stored information will be deleted from your device.

The collection and processing of tracking data can also be disabled by clicking on this TrackingOpt-out link: https://trck.linkster.co/privacy-optout.do

Access to your data: https://trck.linkster.co/privacy-mydata.do

You can find the specific cookies used by our tracking technology in the following list:TRS: Unique, 24-digit identifier (ID) for tracking partnerships. This cookie is stored in the client browser and identifies database records that contain the touchpoint data. TRSCJ: Fallback cookie containing the rudimentary touchpoint data for tracking partnerships. This cookie contains encrypted all touchpoint data in the client browser.
trs_db_optout: When you click on the Tracking-Opt-out link, a special cookie is written that disables tracking in the device's current web browser. However, tracking will be re-enabled once you delete the TrackingOpt-out cookie.

We have entered into a processing agreement with Linkster.

 

Microsoft Advertising (voormalig Bing Ads)

Our website uses Microsoft Advertising, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft uses cookies and similar technologies to show you relevant advertisements. The use of these technologies enables Microsoft and its partner websites to serve advertisements based on previous visits to our or other websites on the Internet. The data collected in this context may be transferred by Microsoft to a server in the USA for evaluation and storage.

You can prevent Microsoft from collecting and processing the data generated by the cookies that relates to your use of the website by disabling the personalized advertising on Microsoft's opt-out page. Please note that in this case, the objection procedure must be followed again after deleting all cookies in your browser or when using a different browser and/or profile later.

More information about this can be found in Microsoft's privacy policy.We have entered into a processing agreement with Microsoft.

 

Taboola

This website uses the Content Discovery technology of Taboola Europe Limited, Oneustonsq 40 Melton Street, 13th Floor, London, Great Britain ("Taboola"), to recommend other online content that may be of interest to you. To guide these recommendations, Taboola collects information about your device and your behavior on this website (and other partner websites) through cookies and similar technologies. More information about this can be found in Taboola's privacy policy.

 

Tectumedia

This website uses the services of tectumedia GmbH, Eichhornstraße 3, 10785 Berlin ("Tectumedia") for conversion tracking, in particular analyzing information about transactions and page views. In addition, the services are used for targeting purposes to display more relevant and useful ads.

When using Tectumedia services, your personal data will be shared with the following additional service providers:MDSP GmbH, Friedrichstraße 171, 10117 Berlin, Germany: www.m-dsp.com
M,P,NEWMEDIA, GmbH, Hindenburgstraße 45, 71638 Ludwigsburg: www.mp-newmedia.com
Outbrain Inc., 39 W, 13th St, New York 10011, USA: www.outbrain.com
Tisoomi GmbH, Gänsemarkt 31, 20354 Hamburg, Germany: www.tisoomi.com
Twiago GmbH, Charlottenstraße 61, 51149 Cologne, Germany: www.twiago.com
Quantcast International Limited, Lower Mercer Street, 1st Floor, Dublin 2, Ireland: www.quantcast.com
Verizon Communications Inc., 1095 Avenue of the Americas, New York, NY 10036, USA: www.verizon.com

 

Trusted Shops

If you have given us your express consent to do so during or after your order by ticking a corresponding checkbox or clicking on a button provided for this purpose, we will forward your e-mail address for the reminder to submit a review of your order to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne ("Trusted Shops"), so that they can remind you of the opportunity to leave a review by e-mail.

This consent can be revoked at any time here or by sending a message to the above-mentioned contact option or directly to Trusted Shops. For more information, please refer to the Trusted Shops privacy policy.

 

Sleeknote

We use Sleeknote, a tool for creating pop-ups and registration forms on our website. Sleeknote may use cookies and similar technologies to collect information about your interactions with the pop-ups and forms on our website. This includes information such as your IP address, browser type, pages visited, and interactions with our website.

Sleeknote processes personal data on our behalf as a controller. We have entered into a data processing agreement with Sleeknote to ensure that they only process your personal data in accordance with our instructions and applicable data protection laws.

The data collected by Sleeknote is used to optimize our marketing efforts and provide personalized content and offers based on individual users' interests and preferences. You can unsubscribe from our emails at any time by following the link at the bottom of each email or by contacting us using the contact details provided in this Privacy Notice.

By using our website and providing your personal data, you consent to the use of Sleeknote as described in this privacy statement.

 

Outbrain

We use Outbrain, an online advertising platform that displays advertisements on our website and on other third-party websites. Outbrain may use cookies and similar technologies to collect information about your interactions with the advertisements displayed on our website. This includes information such as your IP address, browser type, pages visited, and interactions with our website.

Outbrain processes personal data on our behalf as a data controller. We have entered into a data processing agreement with Outbrain to ensure that they only process your personal data in accordance with our instructions and applicable data protection laws.

The data collected by Outbrain is used to optimize our marketing efforts and provide personalized content and offers based on individual users' interests and preferences. You may opt-out of Outbrain's advertising at any time by following the instructions in the advertisement or by contacting us using the contact information provided in this Privacy Notice.

By using our website and providing your personal information, you consent to the use of Outbrain as described in this Privacy Notice.

 

DPG Media

We use the services of DPG media to place advertisements on our website. DPG media may use cookies and similar technologies to collect information about your interactions with the advertisements displayed on our website. This includes information such as your IP address, browser type, pages visited, and interactions with our website.

DPG media processes personal data on our behalf as the controller. We have entered into a data processing agreement with DPG media to ensure that they only process your personal data in accordance with our instructions and applicable data protection laws.

The data collected by DPG media is used to optimize our marketing efforts and provide personalized content and offers based on the interests and preferences of individual users. You can unsubscribe from DPG media's advertising at any time by following the instructions in the advertisement or by contacting us using the contact details provided in this privacy statement.

By using our website and providing your personal data, you consent to the use of DPG media as described in this privacy statement.

 

8. YouTube with Comprehensive Data Protection

This website contains videos from YouTube. The operator of the site is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube - regardless of whether you watch a video - connects to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection is made to YouTube's servers. In this process, the YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after you start watching a video, YouTube may store various cookies on your device or use similar recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent fraud.
It may be possible to initiate further data processing after a YouTube video has been started over which we have no influence. The use of YouTube is in the interest of the functionality of our website, the presentation of essential product information to customers and an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
You can find more information about data protection at YouTube in their privacy statement at https://policies.google.com/privacy?hl=nl.

 

9. Online presence on social networks

We have an online presence on social networks in order to communicate with customers and interested parties and to inform them about our products and services.

As a rule, users' data is processed by the respective social networks for market research and advertising purposes. Thus, user profiles can be created based on users' interests. Cookies and other identifiers are stored on users' computers for this purpose. Based on these user profiles, advertisements are placed, for example, within the social networks, but also on third-party websites.

In the context of the operation of our online presence, we may have access to information such as statistics on the use of our online presence, which are provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data about the interaction with our online presence and the messages and content disseminated. Details and links to the data of the social networks to which we have access as the operator of the online presence can be found in the list below.

The legal basis for the data processing is Article 6 (1) (f) GDPR, based on our legitimate interest in effectively informing users and communicating with users, or Article 6 (1) (b) GDPR, to stay in touch with our customers and inform them, as well as for carrying out pre-contractual measures with future customers and interested parties.

The legal basis for the data processing carried out by the social networks themselves can be found in the privacy statements of the respective social networks. Under the links below you will also find more information about the respective data processing operations and the options for objecting.
We would like to point out that data protection requests can be submitted most effectively to the respective provider of the social network, as only these providers have access to the data and can take appropriate measures directly. Below you will find a list of information about the social networks on which we have an online presence.

 

10. Amazon Marketplace

We also offer our products on the Amazon Marketplace. Please note that we have no influence on the terms of use of the marketplaces and the services offered, and have only limited influence on their data processing. Therefore, please check carefully what information you provide to us via Amazon. We cannot accept liability for the conduct of the operators of the marketplaces and other users, as well as third parties who may cooperate with the operators of the marketplaces or also use their services. In general, we only receive from the marketplaces the data necessary for the shipment of the purchased product.

Please refer to the privacy statements of the respective marketplaces for the purpose and scope of the data collection and the further processing and use of the data by the marketplaces, as well as your rights and options with regard to the protection of your privacy. Amazon is operated by Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA ("Amazon"). You can find more information about this in Amazon's privacy statements.

 

11. Recipients of the data

We only provide the data collected by us if this is necessary for the performance of the contract or for the provision of the technical functionality of the website, or if there is another legal basis for data provision.

In principle, we process your data ourselves. However, we also use service providers. In addition to the service providers mentioned in this Privacy Notice, these may include, in particular, data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. When we provide information to service providers, they may only use the information to perform their functions. The service providers have been carefully selected and hired by us. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of the data subjects and are regularly monitored by us.

In addition, in connection with requests from authorities, court decisions and legal proceedings, data may be provided if this is necessary for the enforcement or defence of rights.

If EasyToys instructs third parties to collect, process and use data in the context of data processing in accordance with Article 28 GDPR, this will also only be done in accordance with the statutory data protection provisions.

 

Shipping service providers and logistics companies

For the delivery of your orders, we work with third-party shipping companies (e.g. DHL). These service providers receive from us the data necessary for contract processing, so that your orders arrive safely at your doorstep and you can track the shipment via tracking code. This includes your name, email address and, if you have provided it to us, also your telephone number. The data is used exclusively for the execution of the shipping or logistics order. The legal basis is Article 6(1)(b) of the GDPR. You can remove your phone number from your customer account at any time.


12. Transfer of data to third countries

As explained in this privacy policy, we use the services of providers that are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. If this is the case and the European Commission has not taken an adequacy decision (Article 45 GDPR) for these countries, we have taken appropriate measures to ensure an adequate level of data protection for any data transfers. This includes, among other things, the European Union's standard contractual clauses or binding internal data protection regulations.

If this is not possible, we base the data transfer on exceptions to Article 49 GDPR, in particular your express consent or the necessity of the transfer for the performance of a contract or prior measures.

If a transfer to a third country is planned and there are no adequacy decision or appropriate safeguards, there is a possibility and risk that authorities in the relevant third country (e.g. secret services) may access the transferred data for the purpose of collecting and analysing it, and that the enforceability of your rights as a data subject cannot be guaranteed. When you obtain your consent via the cookie banner, you will also be informed about this.

13. Retention period

In general, we only retain personal data for as long as necessary to fulfil contractual or legal obligations for which we collected the data. We will then delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidentiary purposes for civil claims or due to statutory retention obligations.

For evidentiary purposes, we must retain contract data for three years after the end of the year in which the business relationship with you ends. Any claims will become time-barred according to the statutory limitation period at the earliest at that time.

Even after that, we still have to keep some of your data for accounting reasons. This is required by legal documentation obligations that may arise from the Commercial Code, the Tax Code, the Banking Act, the Money Laundering and Terrorist Financing (Prevention) Act and the Securities Trading Act. The document retention periods prescribed there vary from two to ten years.

 

14. Your rights

You have the following statutory data protection rights under the respective legal conditions:

  • Right to information (Art. 15 GDPR, § 34 BDSG)
    Right to erasure (Art. 17 GDPR, § 35 BDSG)
  • Right to rectification (Art. 16 GDPR, § 34 BDSG)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to revoke consent (Art. 7,  paragraph 3 GDPR)
  • Right to object to certain data processing activities (Article 21 GDPR)

To exercise your rights described here, you can contact us at any time using the contact details provided under "Contact person and controller". You also have the right to lodge a complaint with the data protection supervisory authority responsible for us.

 

15. Data Security

We have taken up-to-date technical measures to ensure the security of data, in particular to protect your personal data from risks associated with data transmission and from being accessed by third parties. These are always adapted to the current state of the art. To secure the personal data you have provided on our website, we use Transport Layer Security (TLS), which encrypts the information you have entered.

 

16. Changes to the Privacy Policy

From time to time, we update this privacy policy, for example when we change our website or when legal requirements change.

Was this article helpful?

1 out of 1 found this helpful

Have more questions? Submit a request