How will my personal data be protected?

We are delighted that you are interested in EasyToys! Protecting your privacy is just as important to us as it is to you. Therefore, we do everything in our power to ensure that your data is as secure as possible with us and that you maintain an overview of the data processing that affects you. In the following, we would like to inform you in detail about how we handle your data and about your rights. If you have any questions or suggestions regarding data protection, our data protection officer is also available to you as a personal contact.

Personal data are information that relate to an identified or identifiable person. This includes, in particular, information that allows conclusions to be drawn about your identity, such as your name, telephone number, address or email address. Data that we collect, for example, during a visit to our website and that cannot be associated with your person, do not fall under the term of personal data.

You can print out or save this privacy policy by using the usual functionality of your browser. You can also download and archive this privacy policy as a PDF file by clicking here.

 

 

1. Contact person and data controller

The contact person and data controller responsible for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

 

EDC-Retail B.V.

Phoenixweg 6

9641 KS Veendam

Nederland

 

Telephone: +31 598 690 453

(hereinafter referred to as "we" or "us")

For any questions regarding data protection related to our online offerings or the use of our website, you can also contact our data protection officer at Submit a request – EasyToys Customer Service at any time.

2. Account and payment data

2.1 User Account

We create a password-protected direct access to the customer's account data (customer account) for all customers who register accordingly. Here you can view data on your completed, open, and soon-to-be-shipped orders, or correct or change the data you have stored.

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

 

 

2.2 Payment data

We offer you the payment methods of invoice, advance payment, immediate transfer, Giropay, Paypal and credit card. We process your payment data in order to handle the payments. Depending on the chosen payment method, we pass on your payment data to the credit institution commissioned with the payment and, if necessary, to payment service providers commissioned by us.

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

2.3 Payment processing

Pay.nl

To process some of the payments in our webshop, we use the payment service provider Pay.nl, Kopersteden 10, 7547 TK Enschede, Netherlands. Pay.nl processes your name, address and residence data, your IP address as well as your payment data such as your bank details or credit card number. Pay.nl reserves the right to use your data to further improve the service and to share (anonymized) data with third parties in this context. Pay.nl does not store your data longer than permitted by law.

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

For more information, please refer to Pay.nl's privacy policy.

PayPal

When paying via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal, PayPal reserves the right to carry out a credit check. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values flow into the result of the credit check, these have their basis in a scientifically recognized mathematical-statistical procedure. Address data is among the data used in the calculation of the score values.

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy.

 

2.4 Credit check

If you choose to pay by invoice or Paylater/instalment purchase, your creditworthiness will be checked based on mathematical-statistical procedures for your transaction. For this purpose, we will transmit your personal data (including name and address) as well as the data related to your order (including IP address) in accordance with the provisions of the GDPR to Klarna Bank AB (publ) with its headquarters at Sveavägen 46, 111 34 Stockholm, Sweden, email: datenschutz@klarna.de.

For the purpose of our own identity and creditworthiness check, Klarna or partner companies commissioned by Klarna will transmit your personal data to credit reporting agencies (credit agencies). They will then receive information and, if applicable, credit information based on mathematical-statistical procedures, which include address data in their calculation. We use the information obtained about the statistical probability of payment default for a balanced decision on which payment method (invoice, instalment purchase or direct debit) we can offer you. In case of problems with address verification, negative credit check or any outstanding claims from previous business relationships, we may not be able to offer you the payment methods invoice, instalment purchase and direct debit. The credit check may include probability values (score values) that are calculated based on scientifically recognized mathematical-statistical procedures and include address data in their calculation. For detailed information on this and the credit agencies used, please refer to the data protection provisions of Klarna AB.

If you do not agree with the payment methods offered to you due to this automated process, you can inform us in writing by email:  Submit a request – EasyToys Customer Service. We will then review our decision taking into account your point of view.

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. f GDPR, our legitimate interest in avoiding defaults and abusive use by third parties.

 

 

3. Customer Service

3.1 Contacting us by email

You have the option to contact us via  Submit a request – EasyToys Customer Service. In this context, we process not only your contact information but also the content of your messages and communications with us. We process the aforementioned data exclusively for the purpose of communicating with you.

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

3.2 Zendesk

In order to improve communication with you, we also use the chat program Zendesk Chat, a service of Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA ("Zendesk"). If you have general or specific questions and problems regarding our products, website, or company, you can send us a message via Zendesk. You will be shown whether someone is online to answer you immediately. If this is not the case, we will respond to your request promptly during our business hours. In this context, we process data exclusively for the purpose of communicating with you.

 

When using Zendesk, the IP address of the end device and the address of the subpage from which you access Zendesk are recorded. The IP address is pseudonymized. Zendesk also uses cookies and similar technologies. Conducted chats are logged and stored.

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR, insofar as it concerns support requests or inquiries about products prior to a possible contract conclusion, and otherwise Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in staying in touch with our customers and maintaining customer relationships.

 

The data collected in this context may be transferred to a Zendesk server in the USA and stored there. In the event that personal data is transferred to the USA or other third countries, Zendesk has approved binding internal data protection regulations in accordance with Art. 46 para. 2 lit. b, Art. 47 GDPR, and we have concluded standard contractual clauses with Zendesk in accordance with Art. 46 para. 2 lit. c GDPR. For more information, please refer to section 12 ("Transfer of data to third countries") in our privacy policy.

 

For more information, please refer to Zendesk's privacy policy.

 

4. Newsletter, product recommendations and customer surveys

4.1 Newsletter

You have the option of subscribing to our newsletter, in which you will receive regular free information about our product range or our partner companies and we will inform you about exclusive offers.

 

For subscribing to our newsletter, we use the so-called double opt-in procedure, which means that we will only send you newsletters by email once you confirm that you want to receive our newsletter by clicking on a link in our notification email. If you confirm your desire to receive the newsletter, we will store your email address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The storage serves solely the purpose of sending you the newsletter and being able to prove your registration. The legal basis for the aforementioned data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

 

4.2 Product recommendations

If you place an order with us, we will also use your email address to send you product recommendations for products that may interest you or that are related to the product you purchased. The legal basis for this is Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG, based on our interest in providing you with individual offers.

 

4.3 Customer surveys

If you place an order with us, we will also use your email address to send you customer and satisfaction surveys. The responses to the surveys will be collected in pseudonymized form (anonymized for customer surveys). We will use the results of the surveys to improve our products and services. The legal basis for this is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in constantly improving our service.

 

4.4 Right to object

You can unsubscribe from newsletters, product recommendations, customer and satisfaction surveys (hereinafter "promotional emails") at any time. An unsubscribe link is provided in each promotional email. A message to the contact details provided above or in the email (e.g. by email or letter) is also sufficient.

 

4.5 Services used

We use market-standard technologies in our promotional emails (see section 4.5.1 Emarsys) to measure interactions (e.g. opening the email, clicking on links). We use this data in pseudonymous form for general statistical analysis as well as to optimize and develop our content and customer communication. This is done using small graphics embedded in the messages (called pixels). The data is collected exclusively in pseudonymized form, so the IDs are not linked to your other personal data, and direct personal identification is excluded.

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. f GDPR. This data processing is based on our legitimate interests. We want to optimize and develop our content and customer communication through this. If you do not wish to have your usage behavior analyzed, you can unsubscribe from promotional emails as described above or deactivate graphics in your email program by default. Further information can be found in the instructions for Microsoft Outlook and Mozilla Thunderbird. We want to share relevant content with our customers through our promotional emails and better understand what readers are actually interested in. The data on interaction is stored in pseudonymous form for 30 days and then completely anonymized.

 

 

4.5.1 Deployteq

We use the "Deployteq" tool from e-Village B.V., Amertsfoortseweg 10 E, 3712 BC Huis ter Heide Netherlands, to personalize and automate our email marketing.

The legal basis for the use of CanopyDeploy is Art. 6 para. 1 lit. f GDPR, based on our interest in modern email marketing. We have concluded a contract for order processing with e-Village.

4.5.2 SurveyMonkey

We use technical services from SurveyMonkey Inc., San Mateo, One Curiosity Way, San Mateo, California 94403, USA ("SurveyMonkey") for customer surveys.

The legal basis for the aforementioned data processing is Art. 6 para. 1 f GDPR based on our legitimate interest in conducting customer surveys in a modern way.

In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with SurveyMonkey in accordance with Art. 46 para. 2 lit. c GDPR. You can find more information in section 12 ("Transfer of data to third countries").

For more information, please refer to SurveyMonkey's privacy policy.

 

 

5. Contests, Coupons, and Loyalty Points Program

5.1 Contests

If you decide to participate in contests organized by us, we will usually ask you to provide us with your name and email address.

We process the aforementioned data in order to inform you in case of winning, and to ensure that each participant only participates once in the contest. In some cases, additional information may be required for individual contests (such as age, etc.). In these cases, you will be informed immediately about the necessary data for the contest.

We also use your data for market and opinion research. Of course, we only use this data anonymously for statistical purposes and only for Sonoma Internet GmbH. Your survey answers will not be shared or published with third parties. We do not store survey responses along with your email address or other personal data.

You can object to the use of your data for market and opinion research at any time, either in whole or for certain measures, without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the contact details mentioned above (e.g. email, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey email.

The legal basis for the aforementioned processing is Art. 6 para. 1 lit. b GDPR.

5.2 Vouchers

If you are interested in a voucher offer from Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe ("Sovendus") and click on the voucher banner, we will transmit your salutation, name, and email address to Sovendus in an encrypted form to prepare the voucher. Prior to this, the IP address is already transmitted, which Sovendus uses exclusively for data security purposes and is usually anonymized after seven days. In addition, we transmit pseudonymized order number, order value with currency, session ID, coupon code, and timestamp to Sovendus for billing purposes.

The legal basis for the aforementioned processing is Art. 6 para. 1 lit. b GDPR.

For further information on the processing of your data by Sovendus, please refer to Sovendus' online privacy policy.

5.3 Loyalty Points Program

By creating a user account, you automatically participate in our loyalty points program.

Therefore, in addition to your email address and name, we also process the data of your purchases (shopping and order data, e.g. date, product, product number, quantity, price).

The data collected is necessary for the implementation of our loyalty points program.

We can send you your current points balance or special promotions related to the points program to your email address - if you have given your consent.

By processing the data on your purchases, we can credit you with the resulting loyalty points and store them on your points account. For further details on the design of our loyalty points program, please refer to our participation conditions.

The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.

 

 

6. Device and access data and creation of log files

Whenever you use our website, we collect the data that your browser automatically transmits to enable you to visit the website. These include in particular:

  • Domain name or IP address of the requesting end device
  • File request from the client (file name and URL)
  • http response code
  • Date and duration of the visit
  • Address of the called-up website and the requesting website

The data processing is necessary to enable the visit to the website and to ensure the permanent functionality and security of our systems. The aforementioned data is also temporarily stored in internal log files for the purposes described above in order to create statistical information about the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices used to access the pages increases), and to generally maintain our website administratively.

The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b GDPR.

 

 

7. Use of cookies and similar technologies

This website uses cookies and similar technologies (collectively referred to as "tools") that are offered either by ourselves or by third parties. Cookies are small text files that are stored on your device by the browser. Cookies are not used to execute programs or load viruses onto your computer. They enable comfortable browsing on the internet: when you revisit the website, the stored cookie is transmitted to the web server. For example, the products you have added to your shopping cart are stored so that you can continue shopping where you left off. Similar technologies include web storage (local/session storage), fingerprints, tags or pixels. Most browsers are set to accept cookies and similar technologies by default. However, you can usually adjust your browser settings to reject cookies or similar technologies or only store them with prior consent. If you reject cookies or similar technologies, some of our offers may not work smoothly for you.

 

A detailed overview of the cookies and tools we use can be found here:

Cookie Policy – EasyToys Customer Service

 

 

7.1 Legal basis and revocation

Legal basis

We use tools necessary for website operation based on our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR in order to enable you to use our website more comfortably and individually and to make use of it as time-saving as possible. In certain cases, these tools may also be necessary for the fulfillment of a contract or for the performance of pre-contractual measures, in which case the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Optional cookies and similar technologies for marketing and analysis purposes are only used if you have given us your consent for data processing in accordance with Art. 6 para. 1 lit. a GDPR and, if applicable, for data transfer to third countries in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR via our consent banner. Please refer to section 12 ("Data transfer to third countries") for the risks associated with data transfer to third countries. Access to and storage of information on the end device is based on the implementation laws of the ePrivacy Directive of the EU member states.

Obtaining your consent

Our website uses the One Trust tool of OneTrust Technology Limited, 82 St. John Street, London, England, EC 1M 4JN ("One Trust") to collect and manage consents and any revocations. When you make a decision in the consent banner, a cookie is set that records your consent or rejection. We set this technically necessary cookie on the basis of Art. 6 para. 1 lit. f GDPR to document your consent. Access to and storage of information on the end device is absolutely necessary in these cases and is based on the implementation laws of the ePrivacy Directive of the EU member states. If you delete your cookies, we will ask you for your consent again on a later page visit.

Revocation of your consent or modification of your selection

You can revoke your consent at any time or adjust the selection of tools by clicking on the following link: Privacy settings

 

7.2 Necessary tools

We use certain tools to enable the basic functions of our website ("necessary tools"). Without these tools, we could not provide our service. Therefore, necessary tools are used without consent based on our legitimate interests according to Art. 6 para. 1 sentence 1 lit. f GDPR or for the fulfilment of a contract or for the performance of pre-contractual measures according to Art. 6 para. 1 sentence 1 lit. b GDPR.

Own cookies

We use our own necessary cookies in particular

·      for login authentication,

·      for load balancing,

·      to store your language settings,

·      to note that information placed on our website has been displayed to you - so that it will not be displayed again on your next visit to the website.

To improve our website, we use various technologies to improve our website, analyse user behaviour and evaluate the associated data. The data collected may include, in particular, the IP address of the end device, the date and time of access, the identification number of a cookie, the device identification of mobile devices as well as technical information about the browser and operating system. However, the collected data is stored exclusively pseudonymously, so that no direct conclusions can be drawn about the persons.

In the following section, we would like to explain these technologies and the providers used in more detail.

 

 

Which technically necessary tools do we use?

The following tools are absolutely necessary for using our service for technical reasons. They guarantee that our service works safely and as you wish.

 

Google Tag Manager

Our website uses Google Tag Manager, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland, and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA for all other users. The tag manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website to capture predetermined usage data, for example. The Google Tag Manager triggers other tags, which may also collect data. Some of the data is stored on a Google server in the USA. If deactivation has been made at the domain or cookie level, this remains for all tracking tags implemented with Google Tag Manager.

 

Google Tag Manager does not require the use of cookies.

The legal basis for the use of Google Tag Manager is Art. 6 para. 1 lit. f GDPR, based on our interest in efficient management of the tools we use.

Some of the data is processed on a Google server in the USA. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google in accordance with Art. 46 para. 2 lit. c GDPR. You can find further information in section 12 ("Transfer of data to third countries").

 

Further information can also be found in the information provided by Google on Tag Manager.

 

One Trust

We use the One Trust tool for obtaining and managing cookie consents (see above). With the help of this tool, all, individual, or no data processing by cookies can be agreed to.

 

During your website visit, One Trust receives your consents or revocations, the setting of cookies, your IP address, information about your browser, your device, and the time of your visit. In addition, One Trust sets a necessary cookie to store your granted consents and revocations. When you agree, information about browser, country, and device type is also stored.

 

These data processing operations are necessary to provide you with the legally required cookie management solution and to comply with our documentation obligations. The legal basis for the use of One Trust is Art. 6 para. 1 lit. f GDPR, based on our interest in fulfilling the legal requirements for a cookie consent management.

 

The data is transmitted worldwide. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with One Trust in accordance with Art. 46 para. 2 lit. c GDPR. You can find further information in section 12 ("Transfer of data to third countries").

 

Further information can be found in the One Trust privacy policy.

 

 

7.3 What analysis and marketing cookies do we use?

We also use tools for analysis and advertising purposes ("marketing tools"). Some of the access data generated when using our website is used for interest-based advertising. By analyzing and evaluating this access data, we are able to display personalized advertising on our website and on the websites of other providers that corresponds to your actual interests and needs.

 

In the following section, we would like to explain these technologies and the providers used in more detail. The data collected may include in particular:

· The IP address of the device;

· The identifier of a cookie;

· The device identification of mobile devices (Device ID);

· Referrer URL (previously visited page);

· Pages called up (date, time, URL, title, length of stay);

· Downloaded files;

· Clicked links to other websites;

· If applicable, achievement of certain goals (conversions);

· Technical information: operating system; browser type, version and language; device type, brand, model and resolution;

· Approximate location (country and possibly city).

However, the data collected is stored exclusively in pseudonymous form, so that no direct conclusions can be drawn about the persons.

ADITION

Our website uses services of Virtual Minds GmbH, Ellen-Gottlieb-Straße 16, D-79106 Freiburg im Breisgau ("ADITION"). ADITION uses cookies to control and optimize the display of advertising media that is posted by ADITION's customers for users. This concerns, for example, the maximum display frequency of advertising media that a user sees. In individual cases, ADITION also uses stored cookie information for statistical surveys. ADITION does not store any information such as names, email addresses or other personal data by setting cookies. The information contains technical information such as the display frequency and display date of advertising media, the browser used or the installed operating system. All stored data is stored on servers in the federal German area. In addition, ADITION fulfills all P3P requirements (Privacy Preferences Project).

The transmitted IP address of a user device is completely anonymized and used to create household networks. In household networks, devices connected to the Internet, such as computers, phones, connected TVs, and others, can be recognized and the usage data collected from websites via the different devices can be combined. With the information obtained, neither personal data nor a specific location of the users can be determined. Personal identification of users is therefore excluded.

For more information, please refer to ADITION's privacy policy.

 

 

Affilinet / Awin / Webmaster Plan / Digital Window

The website participates in partner programs of Awin AG, Eichhornstraße 3, 10785 Berlin ("Affilinet"), a service for integrating advertising in the form of text links, image links, advertising banners or input masks. Affilinet uses cookies and similar technologies to present you with advertising that is relevant to you. Affilinet also uses so-called web beacons (invisible graphics). These can be used to evaluate information such as visitor traffic to these pages.

The information collected by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to a server of Affilinet and stored there. This information may be passed on by Affilinet to contractual partners of Affilinet. However, Affilinet will not merge your IP address with other data stored by you.

You can find more information on this in the data protection declaration of Affilinet.

 

 

Google Ads

Our website uses the service "Google Ads", which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland, and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users.

With Google Ads, customer actions defined by us (such as clicking on an ad, page views, downloads) are recorded and analyzed using "Google Ads conversion tracking". We use "Google Ads remarketing" to display personalized advertising messages for our products on partner websites of Google. Both services use cookies and similar technologies.

The data collected in this context may be transferred to a server in the USA and stored there by Google for evaluation. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Google.

If you use a Google account, depending on the settings stored in your Google account, Google may link your web and app browser history to your Google account and use information from your Google account to personalize ads. If you do not want this association with your Google account, it is necessary to log out of Google before accessing our website.

If you have not consented to the use of Google Ads, Google will only display general advertising that has not been selected based on the information collected about you on this website. In addition to revoking your consent, you also have the option to deactivate personalized advertising in the advertising settings on Google.

We have concluded a data processing agreement with Google Ireland Limited for the use of Google Ads. In the event that personal data is transferred from Google Ireland Limited to the USA, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Art. 46 para. 2 lit. c GDPR. In addition, we obtain your express consent in accordance with Art. 49 para. 1 lit. a GDPR for the transfer of your data to third countries.

 

 

The following cookies are set by Google:

· "_gcl_au" for 90 days

· "_gcl_aw" for 90 days

For more information, please refer to Google's data usage policies and privacy statement.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). According to Google, the contact person for all data protection matters is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze and improve our website based on your user behavior. Google will process the information obtained to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website and internet usage. The data generated in this context may be transferred to a server in the USA for evaluation and storage.

We have made the following data protection settings for Google Analytics:

  • IP anonymization (shortening of the IP address before evaluation, so that no conclusions can be drawn about your identity)
  • Deactivated advertising features (including GA Audience remarketing)
  • Deactivated personalized ads
  • Deactivated cross-site tracking (Google Signals)
  • Deactivated data sharing with other Google products and services

The following data is processed by Google Analytics:

 

 

  • Anonymized IP address;
  • Referrer URL (previously visited page);
  • Pages visited (date, time, URL, title, duration);
  • Downloaded files;
  • Clicked links to other websites;
  • If applicable, achievement of specific goals (conversions);
  • Technical information: operating system; browser type, version, and language; device type, brand, model, and resolution;
  • Approximate location (country and, if available, city based on anonymized IP address).

 

Google Analytics uses the following cookies for the specified purposes with their respective storage durations:

· "_ga" for 2 years and "_gid" for 24 hours (both for identifying and distinguishing website visitors through a user ID);

· "_gat" for 1 minute (to reduce requests to Google servers);

· if applicable, "IDE" for 13 months (third-party cookie for identifying and distinguishing website visitors through a user ID, for capturing interactions with advertising, and for displaying personalized ads).

 

We have entered into a data processing agreement with Google for the use of Google Analytics, as well as standard contractual clauses for the transfer of personal data to the USA or other third countries. For further information, please refer to section 12 ("Transfer of data to third countries") in our privacy policy.

 

For more information, please see Google's privacy policy.

 

Google Optimize

Google Optimize is used in combination with Google Analytics. This means that Google Optimize uses the same cookies as Google Analytics. It is a testing tool that helps us improve our website for you. Google is the contact person for all matters. For more information on data protection, please see the section on Google Analytics.

 

 

Hot Jar

Hotjar is an analysis tool that allows us to evaluate your online behavior. With the data obtained, we can improve the functionality and user-friendliness of our website, thereby increasing our conversion rate.

 

For more information, please refer to HotJar's privacy policy: https://www.hotjar.com/legal/policies/privacy/

 

Linkster

On this page, we use the tracking technology of Linkster GmbH, Geschwister-Scholl-Straße 52, 20251 Hamburg, to measure and visualize insights into partnerships and advertising channels. This is a function for measuring the efficiency of the corresponding advertising measures. Furthermore, the information allows us to assign advertising successes for billing with corresponding advertising partners. When you click on an advertising integration, cookies are set in your browser that are read in the event of a transaction. With each touch point, your browser sends an HTTP request to the Linkster server, transmitting certain information. This information includes the URL of the website on which the advertising material is placed (referrer URL), the browser identifier (user agent) of your device (including information about the device type and operating system), the IP address of the device (this IP address is anonymized and hashed by us before storage), HTTP header (data packet automatically transmitted by your browser with various technical information), the time of the request, and, if previously stored on the device, the cookie with its contents.

 

The tracking technology stores cookies on your device to document actions. In the cookie, a 24-digit anonymous ID is stored. The data is encrypted and linked to this ID in our database on the server.

 

This includes information about the last touchpoints (i.e. when a specific advertising material was displayed or clicked on from a device). The stored touchpoints can be combined into a sequence chain (user journey) if necessary.

 

When an action request is made, the order number and shopping cart value of your order are usually transmitted and stored by us. In addition, the following values can be transmitted and stored: your customer number, new customer feature, your age and gender, as well as the information you provided in a customer survey.

 

The cookies stored by Linkster GmbH are deleted no later than 30 days. The information and cookies transmitted to us serve exclusively the purpose of correctly assigning the success of an advertising medium and the corresponding billing and are justified by our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

 

 

If you do not wish to store cookies in your browser, you can achieve this through the corresponding browser setting. In your respective browser, you can disable the storage of cookies under Extras/Internet Options, restrict them to certain websites, or set your browser to notify you as soon as a cookie is sent. Please note, however, that in this case, you must expect a limited display of online offerings and limited user guidance. You can also delete cookies at any time. In this case, the information stored in them will be removed from your device.

Collecting and processing tracking data can also be disabled by clicking on this tracking opt-out link: https://trck.linkster.co/privacy-optout.do

Access to your data: https://trck.linkster.co/privacy-mydata.do

You can find out which cookies are used by our tracking technology in the following overview:

TRS: Unique, 24-character identifier (ID) for tracking partnerships. This cookie is stored in the client browser and identifies database records that contain touchpoint data.

TRSCJ: Fallback cookie with rudimentary touchpoint data for tracking partnerships. This cookie contains all touchpoint data encrypted in the client browser.

trs_db_optout: When you click on the tracking opt-out link, a special cookie is written that deactivates tracking in the current web browser of the device. However, tracking will be reactivated as soon as you delete the tracking opt-out cookie.

We have concluded a data processing agreement with Linkster.

 

 

Microsoft Advertising (formerly Bing Ads)

Our website uses Microsoft Advertising, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft uses cookies and similar technologies to present you with relevant advertisements. The use of these technologies allows Microsoft and its partner websites to display ads based on previous visits to our website or other websites on the internet. The data collected in this context may be transferred to a server in the USA and stored there for evaluation by Microsoft.

You can prevent Microsoft from collecting and processing data related to your use of the website through cookies, apart from One Trust, by deactivating personalized ads on Microsoft's opt-out page. Please note that in this case, after deleting all cookies in your browser or using a different browser and/or profile, the opt-out must be declared again.

Further information on this can be found in Microsoft's privacy policy.

We have concluded a data processing agreement with Microsoft.

 

Taboola

This website uses Taboola Europe Limited's content discovery technology, Oneustonsq 40 Melton Street, 13th Floor, London, UK ("Taboola"), to recommend additional online content that may be of interest to you. To control these recommendations, Taboola collects information about your device and behavior on this website (and other partner sites) through cookies and similar technologies.

For more information, please refer to Taboola's privacy policy.

 

Tectumedia

This website uses services provided by tectumedia GmbH, Eichhornstraße 3, 10785 Berlin ("Tectumedia") for conversion tracking purposes, particularly analyzing information on transactions and page views. In addition, the services are used for targeting purposes to display more relevant and useful advertising.

In the context of using services from Tectumedia, your personal data will be shared with the following additional service providers:

  • MDSP GmbH, Friedrichstraße 171, 10117 Berlin, Germany: www.m-dsp.com
  • M,P,NEWMEDIA, GmbH, Hindenburgstraße 45, 71638 Ludwigsburg: www.mp-newmedia.com
  • Outbrain Inc., 39 W, 13th St, New York 10011, USA: www.outbrain.com
  • Tisoomi GmbH, Gänsemarkt 31, 20354 Hamburg, Germany: www.tisoomi.com
  • Twiago GmbH, Charlottenstraße 61, 51149 Köln, Germany: www.twiago.com
  • Quantcast International Limited, Lower Mercer Street, 1st Floor, Dublin 2, Ireland: www.quantcast.com
  • Verizon Communications Inc., 1095 Avenue of the Americas, New York, NY 10036, USA: www.verizon.com

 

 

Trusted Shops

If you have given us your express consent during or after your order by activating a corresponding checkbox or clicking on a designated button, we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne ("Trusted Shops") for the purpose of reminding you by email to submit a review of your order. This consent can be revoked at any time here or by sending a message to the contact option described above or directly to Trusted Shops.

Further information can be found in the data protection information of Trusted Shops.

8. YouTube with enhanced data protection

This website embeds YouTube videos. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. For example, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting) after starting a video. This way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness, and prevent fraud.

If a YouTube video is started, further data processing operations may be triggered, over which we have no influence.

The use of YouTube is in the interest of the functionality of our website, the presentation of essential product information to customers, and an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on data protection at YouTube can be found in their data protection declaration at: https://policies.google.com/privacy?hl=en.

 

 

9. Online presence in social networks

We maintain online presences in social networks to communicate with customers and interested parties, among other things, and to inform them about our products and services.

The data of users is usually processed by the relevant social networks for market research and advertising purposes. Usage profiles can be created based on the interests of users. Cookies and other identifiers are stored on the users' computers for this purpose. Based on these usage profiles, advertisements are then placed within the social networks, but also on third-party websites.

As part of the operation of our online presences, it is possible that we can access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and can contain demographic information and data on interaction with our online presences and the content disseminated through them. Please refer to the list below for details and links to the data of the social networks that we can access as operators of the online presences.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, based on our legitimate interest in effective information and communication with users, or Art. 6 para. 1 sentence 1 lit. b GDPR, to stay in contact with our customers and inform them, as well as to carry out pre-contractual measures with future customers and interested parties.

Please refer to the privacy notices of the respective social networks for the legal basis for data processing carried out by the social networks themselves. You can also find further information on the respective data processing and objection options at the links below.

We would like to point out that data protection inquiries can be most efficiently addressed to the respective provider of the social network, as only these providers have access to the data and can take appropriate measures directly. Below is a list of information on the social networks on which we have online presences.

 

 

  • Facebook (USA and Canada: Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; all other countries: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Operation of the Facebook fan page in joint responsibility based on an agreement on joint processing of personal data (so-called page insights supplement regarding the responsible party)
  • Information on the processed page insights data and contact options in case of data protection inquiries: https://www.facebook.com/legal/terms/information_about_page_insights_data
  • Privacy policy: https://www.facebook.com/about/privacy/
  • Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.
  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Privacy policy: https://help.instagram.com/519522125107875
  • Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
  • Privacy policy: https://policies.google.com/privacy
  • Opt-out: https://www.google.com/settings/ads.
  • Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
  • Privacy policy: https://twitter.com/en/privacy
  • Opt-out: https://twitter.com/personalization.
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
  • Operation of the LinkedIn company page in joint responsibility based on an agreement on joint processing of personal data (so-called page insights joint controller addendum)
  • Information on the processed page insights data and contact options in case of data protection inquiries: https://legal.linkedin.com/pages-joint-controller-addendum
  • Privacy policy: https://www.linkedin.com/legal/privacy-policy
  • Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
  • TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)

 

 

10. Amazon Marketplace

We also offer our products on the Amazon Marketplace. We would like to point out that we have no influence on the terms of use of the marketplaces and the services offered by them, as well as only limited influence on their data processing. Therefore, please carefully consider which data you provide us with via Amazon. We cannot accept any liability for the behaviour of the operators of the marketplaces and other users, as well as third parties who may cooperate with the operators of the marketplaces or also use their services. As a rule, we only receive the data necessary for shipping the purchased product from the marketplaces.

Please refer to the privacy notices of the respective marketplaces for the purpose and scope of data collection and further processing and use of data by the marketplaces, as well as your related rights and options for protecting your privacy.

Amazon is operated by Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA (“Amazon”). For more information, please refer to Amazon's privacy notices.

11. Recipients of the data

We only disclose the data we collect if this is necessary for the fulfilment of the contract or for the provision of the technical functionality of the website, or if there is another legal basis for data transfer.

In principle, we process your data ourselves. However, we also use service providers for this purpose. In addition to the service providers mentioned in this privacy policy, these may include data centres that store our website and databases, IT service providers that maintain our systems, and consulting companies. If we disclose data to service providers, they may only use the data to fulfil their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have appropriate technical and organisational measures to protect the rights of the data subjects, and are regularly monitored by us.

Furthermore, data may be disclosed in connection with official requests, court orders, and legal proceedings if it is necessary for legal prosecution or enforcement.

If EasyToys commissions third parties with the collection, processing, and use of data as part of order processing in accordance with Art. 28 GDPR, this also takes place exclusively in compliance with the legal provisions on data protection.

 

 

Shipping service providers and logistics companies

To deliver your orders, we work with external shipping companies (such as DHL). These service providers receive from us the data necessary for contract processing, so that your orders arrive safely and you can track the shipment via tracking code. This includes your name, email address, and, if you have provided it to us, your telephone number. The data is used exclusively for the execution of the shipping or logistics order. The legal basis is Art. 6 para. 1 lit. b GDPR. You can remove your telephone number from your customer account at any time.

 

12. Data transfer to third countries

As explained in this privacy policy, we use services whose providers are partially located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. If this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate measures to ensure an adequate level of data protection for any data transmissions. These include, among other things, the standard contractual clauses of the European Union or binding internal data protection regulations.

 

Where this is not possible, we base the data transfer on exceptions under Art. 49 GDPR, in particular your explicit consent or the necessity of the transfer for the performance of a contract or for the implementation of pre-contractual measures.

 

If a transfer to a third country is planned and there are no adequacy decisions or appropriate guarantees, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence services) may gain access to the transmitted data in order to capture and analyse it, and that enforcement of your data subject rights cannot be guaranteed. You will also be informed about this when you give your consent via the cookie banner.

 

13. Storage period

In principle, we only store personal data for as long as is necessary to fulfil contractual or legal obligations for which we have collected the data. After that, we delete the data immediately, unless we still need the data until the end of the statutory limitation period for evidentiary purposes for civil claims or due to legal retention obligations.

 

For evidentiary purposes, we must still keep contract data for three years from the end of the year in which the business relationship with you ends. Any claims become time-barred at the earliest at this time according to the statutory regular limitation period.

 

Even after that, we may still need to store some of your data for accounting reasons. We are obliged to do so due to legal documentation obligations that may arise from the Commercial Code, the Tax Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The deadlines prescribed there for the storage of documents range from two to ten years.

 

 

14. Your Rights

You have the following legal data protection rights under the respective legal conditions:

  • Right to information (Article 15 GDPR, § 34 BDSG)
  • Right to deletion (Article 17 GDPR, § 35 BDSG)
  • Right to rectification (Article 16 GDPR, § 34 BDSG)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to withdraw consent (Article 7 (3) GDPR)
  • Right to object to certain data processing measures (Article 21 GDPR)

To exercise your rights described here, you can contact the contact details mentioned under "Contact Person and Responsible".

You also have the right to complain to the data protection supervisory authority responsible for us. Alternatively, you can contact the data protection authority in your place of residence, who will then forward your request to the responsible authority.

15. Data Security

We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers during data transmission as well as from knowledge by third parties. These are adapted to the current state of the art. To secure the personal data you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

16. Changes to the Data Protection Declaration

We occasionally update this data protection declaration, for example when we adapt our website or when legal requirements change.

 

Was this article helpful?

1 out of 1 found this helpful

Have more questions? Submit a request