Privacy policy
Data protection vitracircle.com
I. Data protection regulations for the vitracircle.com website
Vitra International AG takes the protection of your personal data very seriously. With the following data protection declaration we inform you about which personal data is collected when you use our website vitra.com and how this data is processed, used and protected by us.
1. Scope
1.1
The following data protection declaration applies to the use of the website vitra.com. This website is an offer from Vitra International AG, Klünenfeldstraße 22, 4127 Birsfelden, Basel-Landschaft, Switzerland (hereinafter “Vitra”). If relevant, Vitra is the controller within the meaning of Article 4 of the EU General Data Protection Regulation (“GDPR”).
1.2
The protection of your personal data is important to us, especially with regard to protecting your personal rights when processing and using this information. Personal data includes individual information about the personal or factual circumstances of a specific or identifiable natural person. This includes, for example, information such as name, postal address, email address or telephone number as well as usage data such as your IP address. Personal data is collected, processed and used in accordance with legal regulations.
2. Automated data collection and processing by the browser
2.1
As with any website, our server automatically and temporarily collects and stores the following information in the server log files transmitted by the browser, unless this has been deactivated by you:
- IP address of the requesting computer
- File request from the client
- the http response code
- amount of data transferred in each case
- the website from which you visit us (referrer URL),
- Date and time of the server request
- Browser type, version and language
- Operating system used on the requesting computer
There is no personal evaluation of the server log files. The provider cannot at any time assign this data to specific persons. This data will not be merged with other data sources.
2.2
We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on our website. Google Analytics uses so-called "cookies", i.e. text files that are stored on your computer and thereby enable an analysis of your use of the website. This collects, for example, information about the operating system, the browser, your IP address, the website you have previously accessed (referrer URL) and the date and time of your visit to our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within Member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and Internet usage to the operator of the website. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. If we ask for your consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the use of Google Analytics is Art. 6 para. 1 P. 1 lit. f GDPR.
Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Terms of Use, overview of data protection, as well as the privacy Policy.
2.3
Re-targeting: Our websites use so-called re-targeting technologies. We use these technologies to make the Internet offer more interesting for you. This technology makes it possible to address Internet users who have already been interested in our shop and our products with advertising on the websites of our partners. We are convinced that the insertion of a personalized, interest-based advertising is usually more interesting for the Internet user than advertising that has no such personal reference. The insertion of these advertising materials on the pages of our partners is based on cookie technology and an analysis of the previous usage behavior. This form of advertising is completely pseudonymous. No usage profiles will be merged with your personal data. By using our site, you agree that so-called cookies are used and thus usage data is collected, stored and used by you. Furthermore, your data will be stored in cookies beyond the end of the browser session and can be called up again, for example, on your next visits to the websites. You can revoke this consent at any time with effect for the future by refusing to accept cookies in your browser settings. If we ask the users for their consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the use of retargeting technology is Art. 6 para. 1 P. 1 lit. f GDPR.
2.4
Doubleclick by Google is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Doubleclick by Google uses cookies to present you with advertisements that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been displayed in your browser and which ads have been called up. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to place advertisements on the basis of previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for evaluation and stored there. A transfer of the data by Google to third parties takes place only on the basis of legal regulations or in the context of order data processing. Under no circumstances will Google combine your data with other data collected by Google. By using our websites, you agree to the processing of the data collected about you by Google and the previously described way of data processing as well as the stated purpose. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our websites to their full extent. In addition, you can prevent the collection by Google of the data generated by the cookies and related to your use of the websites as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link under the item DoubleClick deactivation extension. Alternatively, you can deactivate the DoubleClick cookies on the Digital Advertising Alliance website using the following link. If we ask the users for their consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the processing of your data is Art. 6 para. 1 P. 1 lit. f GDPR. For more information about DoubleClick by Google, please visit https://www.google.com/doubleclick and http://support.google.com/adsense
Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Terms of Use, overview of data protection, as well as the privacy Policy.
2.5
Google Forms: We use the Google Forms service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") for conducting surveys or for online forms. Google Forms makes it possible to design and evaluate surveys and online forms. In addition to the respective personal data that you enter in the respective forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address are also recorded. Your personal data will be processed by Google on our behalf. The legal basis for the processing of data by Google is Art. 28 GDPR.
Processing takes place regularly within Member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, data transfers to the USA cannot be ruled out.
Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy
2.6
Bing Ads: We use Microsoft Advertising on our website, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Advertising helps us to analyze the user behavior of visitors to our website if users have reached our website via a Microsoft ad. For this purpose, Microsoft creates cookies on the devices of the visitors when a visitor has reached our site via the services of Microsoft. This allows Microsoft and us to recognize when someone has reached us via an ad on a Microsoft page. We only find out the total number of users who have reached our site via a Microsoft ad. No personal information of the users will be communicated.
We use Bing Ads to analyze the use of our website and to be able to regularly improve it. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. If we ask the users for their consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the use of Bing Ads is Art. 6 para. 1 P. 1 lit. f GDPR.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also object to the use of your data directly at Microsoft: http://choice.microsoft.com/opt-out
Information of the third-party provider: Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA; Privacy Policy.
2.7
LinkedIn marketing services: We use the marketing services of the LinkedIn social network of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") within our online offer. These use cookies, i.e. text files that are stored on your computer. This allows us to analyze the use of the website by you. For example, we can measure the success of our ads and show users products that they were previously interested in. As a result, e.g. Information about the operating system, the browser, the website you have previously accessed (referrer URL), which websites the user has visited, which offers the user has clicked on, and the date and time of your visit to our website.
The information generated by the cookie about your use of this website is transmitted in pseudonymized form to a LinkedIn server in the USA and stored there. LinkedIn therefore does not store the name or the e-mail address of the respective user. Rather, the above-mentioned data will only be assigned to the one in which the cookie was created. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also object to the use of your data directly on LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
We use LinkedIn Analytics to analyze the use of our website and to be able to regularly improve it. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic necessary for the development, implementation and maintenance of the Services to the USA and Singapore takes place in a lawful manner. If we ask the users for their consent, the legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 para. 1 P. 1 lit. f GDPR.
Information of the third-party provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; User Agreement and Privacy Policy.
2.8
Polyfill.io : On our website we use Polyfill, a service of the Financial Times Limited, Bracken House, 1 Friday Street, London, EC4M 9BT, United Kingdom. Polyfill reloads Java script code. If Java script is activated in your browser and no Java script blocker is installed, your browser will transmit personal data to Polyfill. This includes, for example, information about your browser, your IP address or the URL of the requesting website. Polyfill does not store your IP address after the reloaded code has been provided. To prevent the execution of Javascript, you can adjust the settings in your browser or install a Javascript blocker.
The use of Polyfill serves to enable the visitors of our website an equally flawless user experience - regardless of the different browser types. The legal basis for the use of Polyfill is Art. 6 para. 1 P. 1 lit. f GDPR.
Information of the third-party provider: The Financial Times Limited, Bracken House, 1 Friday Street, London, EC4M 9BT, United Kingdom; Terms of Use, Privacy Policy.
2.9
Google Maps: On this website we use the offer of Google Maps of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to display interactive maps directly on the website and allows you to conveniently use the map function. The legal basis for the use of Google Maps is Art. 6 para. 1 P. 1 lit. f GDPR.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in section 2.1 of this declaration will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and /or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declarations. There you will also find further information about your rights in this regard and setting options to protect your privacy: http://www.google.com/intl/policies/privacy Google also processes your personal data in the USA.
2.10
Vimeo: This website uses plugins from the Vimeo video portal of Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”).
We use Vimeo in the so-called "do-not-track mode". According to Vimeo, this mode prevents the player from tracking all the data of the playback session. According to Vimeo, this has the same effect as activating a do-not-track header in the browser: https://vimeo.zendesk.com/hc/articles/360001494447-Verwendung-von-Player-Parametern
The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
Information of the third-party provider: Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA; Privacy Policy.
2.11
Flowbox: We use the Flowbox service of Flowbox AB, Riddargatan 17D, 114 57 Stockholm, Sweden (hereinafter referred to as "Flowbox") to display scoial Media content. User names on the respective social media platforms (e.g. Instagram) as well as content (in particular photos) are processed by Flowbox and displayed on the websites on which Flowbox is integrated. The legal basis is the legitimate interest of Vitra and Flowbox (Art. 6 para. 1 lit. f) GDPR). In addition, Flowbox analyzes the use of the content displayed in each case. Flowbox also uses cookies in the analysis process. The legal basis for your consent in the context of the cookie consent (Art. 6 para. 1 lit a) GDPR). Further information on data processing by Flowbox can be found at https://getflowbox.com/privacy available for download.
3. Collection and processing of voluntarily provided data
3.1
If you provide us with personal data by e-mail, in our online shop via the contact form or the chat function on our website, this is generally done on a voluntary basis. This data is used to process the contractual relationship, to process your inquiries, your orders, for your own market or opinion research and for your own advertising by post. For your own advertising by e-mail, your data will only be used if you have given us your consent to do so. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 lit. b) GDPR or Art. 6 para. 1 lit. f) GDPR.
3.2
If you register in our online shop and create a customer profile, we will store the account information you have entered (in particular your name, billing and delivery address, telephone number, payment information and e-mail address) so that you do not have to re-enter your data every time you place an order. You can update or delete your profile at any time. The legal basis for this is Art. 6 para. 1 P. 1 lit. b DSGVO.
3.3
For the execution of customer surveys, we work together with zenloop GmbH, Pappelallee 78/79, 10437 Berlin. Zenloop is a business-to-business software-as-a-service platform that allows us to collect and analyze feedback from our customers via our online store. This allows us to align and improve our offer to the needs of our customers. When using the feedback tool, zenloop collects the public IP address, device and browser data and the website from which we use the feedback platform. Zenloop also uses cookies and similar technologies to collect aggregated data about users. In addition, zenloop collects your survey responses. The legal basis for data processing by zenloop is Art. 6 para. 1 lit. f GDPR. We have concluded an order processing agreement with zenloop in accordance with Art. 28 DSGVO and have convinced ourselves that zenloop is implementing suitable technical and organizational measures in such a way that the processing is carried out in accordance with the requirements of the DSGVO and guarantees the protection of your rights.
Information of the third-party provider: zenloop GmbH, Pappelallee 78/79, 10437 Berlin. Further information can be found in the privacy policy at: https://www.zenloop.com/legal/privacy
3.4
If you want to subscribe to our newsletter, we need your valid e-mail address, your country of origin and that you give us the following consent (legal basis Art. 6 para. 1 P. 1 lit a GDPR):
"I agree that Vitra International AG and the companies linked below process and use the data I have entered in order to inform me about furniture and home accessories as well as about current promotions and events of the companies with an e-mail newsletter. Facebook Instagram I also agree that Vitra International AG and the companies linked below may transmit my e-mail address to selected social networks (Facebook, Instagram, LinkedIn, Twitter, Pinterest and Google AdWords) in order to display personalized advertising to me. A list of the companies in question can be found here. I can revoke this consent at any time by sending a written message to Vitra International AG, Klünenfeldstraße 22, 4127 Birsfelden, Basel-Landschaft, Switzerland, or by sending an e-mail to privacy@vitra.com revoked. In this case, the data entered by me will be deleted from all relevant companies and will no longer be used for sending the newsletter.“
3.5
Instagram Facebook, Instagram, LinkedIn, Twitter, Pinterest and Google AdWords work together for the purpose of personalized advertising on social networks based on your consent in accordance with Section 3.4. With your consent, they will receive your email address. If we place advertisements in the respective medium, they will be displayed to you. We have no influence on the further processing on the social networks. For more information, please refer to the privacy policy of the respective provider.
The legal basis for the processing is Art. 6 para. 1 lit. a DSGVO.
Information of the third-party providers:
Facebook:
Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, https://www.facebook.com/privacy/explanation
Google Ad Words:
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, 1001; Privacy Policy: https://policies.google.com/privacy
Instagram:
Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. https://facebook.com/help/instagram/519522125107875
LinkedIn:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; Privacy Policy; https://www.linkedin.com/legal/privacy-policy
Pinterest:
Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA; Privacy Policy; https://policy.pinterest.com/privacy-policy
Twitter:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; Privacy Policy: https://twitter.com/privacy
3.6
For the live chat function for direct customer communication on our website, we use the services of Livechat Inc., One International Place Suite 1400 Boston, MA 02110-2619 USA. The data entered for this purpose during the live chat (name, e-mail address, message texts) will be processed to process your inquiries (legal basis is Art. 6 para. 1 lit b) GDPR).
Livechat Inc. Acts for us as a processor within the meaning of Art. 28 DSGVO and stores the data exclusively for the provision of the chat functionality. If personal data is processed in the USA as part of order processing, we have agreed standard contractual clauses with LiveChat.
Information of the third-party provider: Livechat Inc., One International Place Suite 1400 Boston, MA 02110-2619 USA. Further information on the privacy policy of LiveChat can be found here: https://www.livechatinc.com/privacy-policy
3.7
Personal data that you provide to us via our website, for orders in our online shop, via our sales staff or in your preference center on vitra.com we save it in an individual customer profile in our CRM system. The legal basis is our "legitimate interest" in accordance with Art. 6 para. 1 lit. f DSGVO to keep in touch with you and to submit relevant offers and content to you based on your previous purchases and interests. Depending on your consent to newsletter tracking and cookie settings, we may also link further information about your usage behaviour on our website or our newsletter to your customer profile (legal basis Art. 6 para. 1 a DSGVO).
By linking this data, we can better understand your personal interests and thus send you interest-based mailings, invitations to interesting events and address you in a targeted manner through our sales department. We will only contact you by telephone or via an individualised newsletter if you have given us your consent to do so in each case. In addition, we use this data for our own market research and to improve our products and offers.
For the provision of the CRM, we use the cloud provider Salesforce (Salesforce Germany GmbH, Erika-Mann-Straße 31, 80636 Munich, a company of salesforce.com Inc., The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA). The CRM is operated by Salesforce on servers in the European Union. The data is transmitted to Salesforce as part of order processing in accordance with Art. 28 GDPR. If, within the framework of the provision of services, the salesforce.com Inc gets access to data, were created with Salesforce on the basis of Article 46 para. 2 Letter c) GDPR, EU standard contractual clauses have been concluded.
4. Transmission to third parties
4.1
Insofar as you have provided us with personal data, these will generally not be passed on to third parties. A transfer will only take place
- within the scope of a consent given by you
- in the course of processing your inquiries, your orders and the use of our services to commissioned subcontractors who receive the necessary data only for the execution of this order and use it for a specific purpose.
- in the context of order data processing in accordance with the statutory provisions to service providers bound by instructions
- in the context of fulfilling legal obligations to bodies entitled to receive information.
4.2
As part of the payment processing selected by you in our online shop, your data will be transmitted to third parties as follows:
a) For processing payments by credit card, by EPS (Electronic Payment Standard), by RatePay (purchase on account) or via PayPal, we pass on your data to our partner Adyen NV, Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam, The Netherlands. In addition to the data on your order, shipping and the desired payment method, we pass on the following categories of personal data to the payment service provider:
- Your name
- Your gender
- Your billing address
- Your e-mail address
- Your IP address
- Your customer ID
The respective payment service provider (Paypal, RatePAY, etc.) is responsible for your payment data. The legal basis for the transmission is the execution of the contract (Art. 6 para. 1 P. 1 b) GDPR). We would like to point out that the latter transmits your personal data to other bodies necessary for payment processing, in particular to the participating credit institutions, banks and credit card institutions. Your personal data will also be processed there to process the payment. For customers from Germany, the payment service provider will also obtain additional information from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany ("SCHUFA") and transmit the name, billing address and gender of the customer to SCHUFA for this purpose. The legal basis is Art. 6 para. 1 f) GDPR.
b) If you decide to pay by invoice during the ordering process, your payment data will be passed on to RatePAY GmbH, Schlüterstraße 39, 10629 Berlin, Germany, for payment processing.
The possibility of ordering on account depends on an assessment of the credit risk on the basis of mathematical-statistical procedures by RatePAY GmbH. For this purpose, the personal data required for the credit check will be transferred to RatePAY GmbH. In detail, these are first and last name, address, date of birth, gender, e-mail address, IP address, telephone number as well as the data necessary for the processing of the invoice purchase, which are related to the order, such as the number of articles, article number, invoice amount and taxes in percent. RatePAY uses this data to obtain information from one or more of the following credit reference agencies (e.g. SCHUFA HOLDING AG) for the purpose of identity and credit check. The list of credit bureaus with which data can be exchanged through RatePAY can be found at https://www.ratepay.com/legal-creditagencies see. The data is passed on in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of legitimate interests.
Further information on the payment service RatePAY and the data protection regulations can be found at https://www.ratepay.com/legal/
You can request information about the data stored about you by RatePAY GmbH at any time or notify us of changes to this data. Detailed information on the processing of your personal data by RatePAY GmbH, on the credit check carried out and on your rights can be found at https://www.ratepay.com
c) In order to be able to offer you Klarna's payment options, we will transfer personal data, such as contact details and order data, to Klarna. In this way, Klarna can assess whether you can make use of the payment options offered by Klarna and adapt the payment options to your needs. General information about Klarna can be found here. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations.
d) If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, your payment data will be passed on to Apple in encrypted form for payment processing. Apple re-encrypts this data with a developer-specific key before the data is passed on to the payment processor of the payment card stored in Apple Pay for the execution of the payment. The encryption ensures that only we can access the payment data. After the payment has been made, Apple will send us your device account number and a transaction-specific, dynamic security code to confirm the payment success. The legal basis for the transmission is the execution of the contract (Art. 6 para. 1 P. 1 b) GDPR).
Apple keeps anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. A personal reference is completely excluded by the anonymization. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate through an encrypted channel on the Apple servers. Apple does not process or store any of this information in a format that can be used to identify your person. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and uncheck "Allow payments on Mac". Further information on data protection at Apple Pay can be found at https://support.apple.com/HT203027
e) We would like to point out that we transmit data on extrajudicial and judicial collection measures to SCHUFA in the event of overdue and undisputed claims (Art. 6 para. 1 P. 1 f) GDPR). If such data from other contractual relationships arise at SCHUFA after the transmission of this information, we can also receive information about this. The contracting partners of SCHUFA are mainly credit institutions as well as credit card and leasing companies. In addition, SCHUFA also provides information to commercial, telecommunications and other companies that provide services and deliveries against credit. The aforementioned data transfers may only take place to the extent that this is permissible after weighing up all the interests concerned. When providing information, SCHUFA may additionally inform its contractual partners of a probability value calculated from its database for assessing credit risk (score procedure). You have the right to receive information from SCHUFA about the stored data concerning you at any time. The address of SCHUFA is: SCHUFA Holding AG, Verbraucherservicezentrum Hannover, Postfach 56 40, 30056 Hannover. Further information about SCHUFA, the data processing by SCHUFA and your right to information can be found at www.schufa.de .
5. Cookies
5.1
In order to obtain information about what you like and to be able to optimally tailor our offer to your individual needs, we use on the website vitra.com so-called cookies. Cookies are small text files that are stored on your computer or mobile device and retrieved from it during subsequent accesses. The information stored in the cookie is sent back to the website with the same device that generated it (first party cookie) or sent to an used service of an external provider (third party cookie) during subsequent visits to the website. The first party cookies we use are necessary for the provision of the contents of the website so that you can use the services on our website. The third party cookies are additional cookies that are used for marketing purposes or to optimize performance. These will only be set with your consent. Further information can be found in the above information under sections 2 and 3 for the respective tools.
5.2
Cookies do not cause any damage to your computer or mobile device and do not contain viruses. If you generally do not want cookies to be stored on your computer despite your consent in accordance with section 5.1, we ask you to change the settings of your browser so that either it is not possible to store cookies or you must expressly give your consent beforehand. Please note that you may have to make this change to the settings on each browser with which you want to access this website, and that you may not be able to use all the functions of this website without the use of cookies.
6. Vitra Professionals
If you provide us with personal data in the context of the use of Vitra Professionals, this is generally done on a voluntary basis. This data is used to process the contractual relationship, to process your inquiries, your orders, for your own market or opinion research and for your own advertising by post. For your own advertising by e-mail, your data will only be used if you have given us your consent to do so. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 lit. b) GDPR or Art. 6 para. 1 lit. f) GDPR.
If you register as a specialist trade partner with Vitra Professionals and create a profile for your company or your employees, we will store the account information you have entered (in particular name, e-mail address, country of origin) so that you do not have to re-enter your data every time. You can update or delete your profile(s) at any time. The legal basis for this is Art. 6 para. 1 P. 1 lit. b DSGVO.
Personal data that has been communicated to us via our website will only be stored until the purpose for which they were entrusted to us has been fulfilled. After completion of the contract, your data will be blocked and deleted after expiry of the tax and commercial regulations, unless you have expressly consented to a further use of the data. As far as mandatory commercial and tax retention periods are to be observed, the duration of the storage of certain data can be up to ten years.
II. Privacy Policy for Social Networks
7.1 Facebook
In the following we would like to inform you about the collection, processing and use of your data via the Facebook page "vitra" (https://facebook.com/vitra/) inform.
The Facebook Facebook page is provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook, Inc. (hereinafter "Facebook").
Facebook is generally responsible for the collection and processing of personal user data on Facebook. Facebook may also collect and process certain data if you do not have your own Facebook user account. Further information on data processing by Facebook can be found in their privacy policy.
As the operator of the Facebook page, only the public information of your profile can be viewed by us. The scope of this information depends on your personal settings in the user account. If you contact us on a voluntary basis via the fan page (for example via the comment or message function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be used outside the European Union by Facebook Inc. based in the USA.
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of a legal basis, since we have an overriding legitimate interest in interacting with you (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by Facebook users as well as by third parties and we have no influence on how they use the visible information.
Instagram Facebook users can use the settings for advertising preferences to influence the extent to which their user behavior may be recorded when visiting our Instagram page. Facebook Instagram settings or the form for the right of objection offer further options.
Facebook's use of cookies can also prevent the processing of information by preventing third-party cookies or those from Facebook from being allowed in your own browser settings.
Facebook collects specific usage data when visiting our fan page by setting a cookie and storing the IP address, which is processed by Facebook according to partially preset criteria for statistical information of different categories (for example: number of followers, age structure, demographics) and provided to us. These so-called "insights data" are only transmitted to us in anonymous form. We use this information to inform about our products and to make our contributions as target group-oriented as possible. The processing is therefore carried out on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
We are generally jointly responsible with Facebook for the processing of the Insights data. However, Facebook has committed itself to us to assume primary responsibility for the processing of the insights data and, in particular, to fulfill all obligations under the GDPR to protect the rights of data subjects. The agreement underlying this obligation ("Page Insights Supplement") can be viewed here.
7.2 Instagram
In the following we would like to inform you about the collection, processing and use of your data via the Instagram profile of Vitra (https://www.instagram.com/vitra/) inform.
The Instagram Facebook profile is provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook, Inc. (hereinafter "Facebook")
Instagram Facebook is generally responsible for the collection and processing of personal user data on Instagram. Instagram Facebook may collect and process certain data even if you do not have an Instagram user account of your own, please note that Facebook may also collect and process certain data. Further information on data processing by Facebook can be found in their privacy policy.
As the operator of the Instagram profile, only the public information of your profile can be viewed by us. The extent of this information depends on your personal settings in the Instagram profile. If you contact us on a voluntary basis via the fan page (for example via the comment function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be used outside the European Union by Facebook Inc. based in the USA.
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of legal bases, since we have an overriding legitimate interest in interacting with you and enabling an orderly exchange of the fanpage community (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by Facebook users as well as by third parties and we have no influence on how they use the visible information.
Instagram users can influence the extent to which their user behaviour may be recorded when visiting our Instagram page under the settings for advertising preferences. Facebook Instagram settings or the form for the right of objection offer further options. Facebook's use of cookies can also prevent the processing of information by preventing third-party cookies or those from Facebook from being allowed in your own browser settings.
7.3 Twitter
In the following, we would like to inform you about the collection, processing and use of your data via Vitra's Twitter account (https://www.twitter.com/vitra /) inform.
The Twitter account is provided by the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, a subsidiary of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. (hereinafter "Twitter").
Twitter is generally responsible for the collection and processing of personal user data on Twitter. Please note that Twitter may collect and process certain data even if you do not have your own Twitter account. Further information on data processing by Twitter can be found in their privacy policy.
As the operator of the Twitter account, only the public information of your profile can be viewed by us. The extent of this information depends on your personal settings in the Instagram profile. If you contact us on a voluntary basis via the fan page (for example via the comment function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be used outside the European Union by Twitter Inc. based in the USA.
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of legal bases, since we have an overriding legitimate interest in interacting with you and enabling an orderly exchange of the Twitter community (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by Twitter users as well as by third parties and we have no influence on how they use the visible information.
Twitter users can influence the extent to which their user behaviour may be recorded in their settings. Further information can be found at https://help.twitter.com/search?q=datenschutz
The processing of information by means of the cookie used by Twitter can also be prevented by not allowing third-party cookies or those from Twitter in your own browser settings.
7.4 YouTube
In the following, we would like to inform you about the collection, processing and use of your data via Vitra's YouTube account (https://www.youtube.com/vitra/) inform.
The YouTube account is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. YouTube, LLC ("YouTube"), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").
YouTube is generally responsible for the collection and processing of personal user data on YouTube. Please note that YouTube may collect and process certain data even if you do not have your own YouTube account. Further information on data processing by YouTube can be found in their privacy policy.
As the operator of the YouTube account, only the public information of your profile can be viewed by us. The extent of this information depends on your personal settings in the Youtube profile or Google account. If you contact us via YouTube on a voluntary basis (for example via the comment function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be processed outside the European Union by YouTube and Google based in the USA.
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of legal bases, since we have an overriding legitimate interest in interacting with you and enabling an orderly exchange of the YouTube community (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by users of YouTube as well as by third parties and we have no influence on how they use the visible information.
YouTube users can influence the extent to which their user behaviour may be recorded in their settings. You can object to the use for advertising purposes here: https://adssettings.google.com/authenticated
The processing of information by means of the cookie used by YouTube and Google can also be prevented by not allowing third-party cookies or those from YouTube and Google in your own browser settings.
7.5 Pinterest
In the following we would like to inform you about the collection, processing and use of your data via the Pinterest account of Vitra (https://www.pinterest.com/vitra/) inform.
The Pinterest account is provided by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA ("Pinterest").
Pinterest is generally responsible for the collection and processing of personal user data on Pinterest. Please note that Pinterest may collect and process certain data even if you do not have your own Pinterest account. Further information on data processing by Pinterest can be found in their privacy policy.
As the operator of the Pinterest account, only the public information of your profile can be viewed by us. The extent of this information depends on your personal settings in the Pinterest profile. If you contact us on a voluntary basis via the Pinterest page (for example via the comment function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be used outside the European Union by Pinterest Inc. based in the USA. If Pinterest transfers personal data from the EEA to a country that does not have adequate protection regulations, Pinterest will take appropriate measures to protect your data (e.g. through standard contractual clauses).
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of legal bases, since we have an overriding legitimate interest in interacting with you and enabling an orderly exchange of the Pinterest community (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by Pinterest users as well as by third parties and we have no influence on how they use the visible information.
Pinterest users can influence the extent to which their user behaviour may be recorded in their settings. Further information can be found at https://policy.pinterest.com/cookies
The processing of information by means of the cookie used by Pinterest can also be prevented by not allowing third-party cookies or those from Pinterest in your own browser settings.
7.6 LinkedIn
In the following we would like to inform you about the collection, processing and use of your data via the LinkedIn account of Vitra (https://www.linkedin.com/company/vitra) inform.
The LinkedIn profile is provided by the LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Inc., U.S.A. (hereinafter "LinkedIn").
LinkedIn is generally responsible for the collection and processing of personal user data on LinkedIn. Please note that LinkedIn may collect and process certain data even if you do not have your own LinkedIn account. Further information on LinkedIn's data processing can be found in their privacy policy.
As the operator of the LinkedIn profile, only the public information of your profile can be viewed by us. The scope of this information depends on your personal settings in the LinkedIn profile. If you contact us on a voluntary basis via the fan page (for example via the comment function), personal data may be processed by us for exchange and communication.
It is conceivable that some of the information collected may also be processed outside the European Union by LinkedIn, Inc, based in the USA. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic necessary for the development, implementation and maintenance of the Services to the USA and Singapore takes place in a lawful manner.
We ourselves do not pass on any personal data. The personal data will be processed by us on the basis of legal bases, since we have an overriding legitimate interest in interacting with you (Art. 6 para. 1 lit. f GDPR). In this context, we would like to point out that your contributions in the publicly accessible areas can be viewed by LinkedIn users as well as by third parties and we have no influence on how they use the visible information.
LinkedIn users can influence the extent to which their user behaviour may be recorded in their settings. Further information can be found at https://www.linkedin.com/psettings/
The processing of information by means of the cookie used by LinkedIn can also be prevented by not allowing third-party cookies or those from LinkedIn in your own browser settings.
III. Privacy Policy for the Vitra Campus App
In the following, we would like to inform you about the collection, processing and use of your data via the Vitra Campus App.
1. Download the app
When downloading the Vitra Campus app via the respective app store, the necessary data (e.g. user name, e-mail address, device code) will be transmitted to the app store operator. The app store operator is solely responsible for data processing. We have no influence on the type and scope of the data processed by the respective app store operator or the transfer of this data to third parties.
2. Automated collection and processing of user data
2.1.
Every time you use the Vitra Campus app, our server automatically and temporarily collects information in the server log files, which are transmitted by the Vitra Campus App. If you would like to use the Vitra Campus App, we collect the following data, which is technically necessary for us to display our content to you and to ensure stability and security (legal basis Art. 6 para. 1 P. 1 lit. f) GDPR):
- IP address of the terminal
- Device model
- The used app version
- The operating software (iOS version)
A personal evaluation of the server log files does not take place. These data cannot be assigned to specific persons by the provider at any time. This data will not be merged with other data sources.
2.2
We use the Google Analytics analysis service of Google Ireland Ltd in our Vitra Campus app in order to be able to analyze and regularly improve the use of the Vitra Campus app. The information under para. 2.2 in accordance with this Privacy Policy.
2.3
We use the Google Firebase service from Google. This service is used to provide certain functionalities and to improve the app and to correct errors in the app. The data collected for this purpose will be made available to us in anonymous form. It is recorded whether a crash has occurred, which line of code caused the crash, as well as the type and operating system of the affected mobile device. This data is used exclusively to reproduce errors in the app and to be able to correct them in the context of future further development. No personal data will be transmitted. The privacy policy of Firebase can be viewed here: https://firebase.google.com/terms/data-processing-terms
3. Data processing within the scope of the offered features
3.1 Product Scanner
The Vitra Campus app offers you the possibility to identify Vitra products with the Product Scanner. If you use the Product Scanner, you take a photo or transfer the image of the camera so that we can show you further information about the respective product and supplementary or comparable products.
In order to be able to offer you this feature, we collect your location data. To do this, it is necessary that you allow the Vitra Campus app to access the location. However, we only record the location determined by your device if the Vitra Campus app is open. If the location survey is active, this is indicated by a compass symbol on your device. You can allow or reject location determination at any time in the settings of your operating system.
The legality of these data processing results from Art. 6 para. 1 P. 1 lit. b) GDPR. The photos will be deleted immediately after processing and will not be used for any purposes other than providing the described product Scanner functions.
3.2 Consultations
You can use the Vitra Campus app to get in touch with one of our Vitra product experts and book an individual consultation appointment. If you make use of this option, the data entered in the contact form will be transmitted to us and processed accordingly. The personal data provided by you (first and last name, e-mail address, [•]) will be processed exclusively for the processing of your request. Further processing (e.g. Use for advertising by e-mail, analysis of your interests for advertising purposes, disclosure to third parties) will only take place if you have given us your consent to this. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are legal storage obligations. The legal basis is Art. 6 para. 1 lit. b) GDPR or Art. 6 para. 1 lit. a) GDPR.
3.3 Campus Map
You have the opportunity to use our Campus Map to display the surroundings on the Vitra Campus as well as in individual buildings accessible to visitors (e.g. the VitraHaus). In order to be able to offer you this feature, we use the Apple Maps application and collect your location data (GPS data). To do this, it is necessary that you allow the Vitra Campus app to access the location. However, we only record the location determined by your device if the Vitra Campus app is open. If the location survey is active, this is indicated by a compass symbol on your device.
This function cannot be performed without location determination. The terms of use for Apple maps can be found at https://www.apple.com/legal/internet-services/maps/terms.html We collect your location data exclusively in order to show you your current location on the Campus Map (Art. 6 para. 1 lit. b) GDPR). You can allow or reject location determination at any time in the settings of your operating system.
3.4 Tickets
You have the opportunity to purchase tickets for the Vitra Design Museum. For online ticket sales we use the ticket platform Reservix of Reservix GmbH, Humboldtstraße 2, 79098 Freiburg im Breisgau, Germany. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in offering a simple, secure and user-friendly way to purchase tickets online for our visitors. Detailed information on the handling of your data can be found in the privacy policy of Reservix at https://www.reservix.net/files/data/docs/Datenschutzerklaerung_Reservix.pdf
Information of the third-party providers:
Apple: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. https://www.apple.com/privacy/
Google: Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. https://policies.google.com/privacy
Reservix: Reservix GmbH, Humboldtstraße 2, 79098 Freiburg im Breisgau, Germany. https://www.reservix.net/files/data/docs/Datenschutzerklaerung_Reservix.pdf
IV. Video surveillance, Vitra Campus Weil am Rhein
Responsible: Vitra Services GmbH, Charles-Eames-Strasse 2, 79576 Weil am Rhein
Contact details of the Data Protection Officer: dsb@vitra.com
Purposes and legal basis of data processing: Prevention of vandalism, theft, domestic law, Art. 6 para. 1 lit. f GDPR
Legitimate interests pursued: Protection of property, Art. 13 para. 1 lit. d GDPR
Storage duration: 72 h
V. Your rights
1.
At any time, without giving reasons, you will receive information free of charge about the data stored about you by us, as well as about their origin, recipients or categories of recipients to whom this data is passed on, as well as about the purpose of storage.
2.
In addition, you have the right to correct, block and delete your personal data in accordance with the statutory provisions. If you have given your consent to the use of data, you can revoke it at any time and without giving reasons. If the processing of your data takes place on the basis of legitimate interests in accordance with Art. 6 para. 1 lit f) DSGVO, you have a right to object in accordance with Art. 21 DSGVO. You also have the right to data portability. You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
3.
Please send your requests for information, requests for information, objections to data processing and other inquiries to Vitra International AG, Klünenfeldstraße 22, 4127 Birsfelden, Basel-Landschaft, Switzerland or to the e-mail address privacy@vitra.com.
4.
For all questions related to data protection, you can also contact our Data Protection Officer, Mr. Simon Brandmeier, at dsb@vitra.com turn.
last updated: 13 November 2020