Privacy Policy

Introduction and Scope

The CONVOTIS GmbH and its affiliates (collectively, the “Company,” “we,” or “us”) want you to be familiar with how we collect, use and disclose information. This Privacy Policy describes our practices in connection with information that we collect through:

Websites operated by us from which you are accessing this Privacy Policy (the “Websites”);
Software applications made available by us for use on or through computers and mobile devices (the “Apps”);
HTML-formatted email messages that we send to you that link to this Privacy Policy or other communications with you; and
Offline business interactions you have with us.

Collectively, we refer to the Websites, Apps, emails, and offline business interactions as the “Services.”

Personal Information

Definition

“Personal Information” is information that identifies you as an individual or relates to an identifiable individual. The Services collect Personal Information, including:

Name
Postal address (including billing and shipping addresses)
Telephone number
Email address
IP address (we may also derive your approximate location from your IP address)

Collection of Personal Information

Through the Services

We collect Personal Information through the Services, for example, when you sign up for a newsletter, register an account to access the Services, visit our stores, attend one of our events, place an order over the phone, contact customer service, or make a purchase.

From Other Sources

We receive your Personal Information from other sources, for example:
publicly available databases;
joint marketing partners, when they share the information with us.

We need to collect Personal Information in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

Use of Personal Information

Providing the functionality of the Services and fulfilling your requests

To provide the Services’ functionality to you, such as arranging access to your registered account, and providing you with related benefits, special promotions, or customer service.
To respond to your inquiries and fulfill your requests, when you contact us via one of our online contact forms or otherwise.
To operate the Apps, as well as customer portals and ticket systems.
To complete your transactions, verify your information, and provide you with related services.
To send administrative information to you.
To allow you to send messages to another person through the Services.

Marketing and Social Sharing

To send you marketing related emails.
To facilitate social sharing functionality that you choose to use.

Analytics and Personalization

To analyze or predict our users’ preferences and generate aggregated trend reports.
To personalize our interactions with you.
To deliver relevant content via the Services.

Promotions

To allow you to participate in sweepstakes, contests or other promotions.
To manage these programs in line with their additional rules.

Aggregation and Anonymization

We may aggregate and/or anonymize Personal Information for any purpose.

Business Purposes

Data analysis, audits, fraud monitoring, developing new products, enhancing the Services, usage trend identification, campaign effectiveness and expansion of business activities.

Disclosure of Personal Information

To our affiliates for the purposes described in this Privacy Policy. Our affiliates are listed here: Imprint
To our third-party service providers to facilitate services they provide to us, including hosting, analytics, payments, order fulfillment, fraud prevention, IT infrastructure, customer service, auditing, etc.
To third-party sponsors of sweepstakes, contests, and promotions.
By using the Services, you may elect to disclose Personal Information in message boards, chats, profiles, blogs or other interactive areas – such information becomes public.

Other Uses and Disclosures

We also use and disclose your Personal Information as necessary or appropriate, in particular when we have a legal obligation or legitimate interest to do so:

To comply with applicable law and regulations.
- This may include laws outside your country of residence.
To cooperate with public and government authorities.
- To respond to a request or to provide information we believe is necessary or appropriate.
To cooperate with law enforcement.
- For example, when we respond to law enforcement requests and orders or provide information we believe is important.
For other legal reasons.
- To enforce our terms and conditions;
- To protect our rights, privacy, safety or property, and/or that of our affiliates, you or others.
In connection with a sale or business transaction.
- We may disclose or transfer your Personal Information to a third party in the event of reorganization, merger, sale, joint venture, transfer, or similar transaction.

Other Information

“Other Information” is any information that does not reveal your specific identity or relate to an identifiable individual. The Services collect Other Information such as:

Browser and device information
App usage data
Information from cookies, pixel tags, and other technologies
Demographic and non-identifiable information provided by you
Aggregated data that no longer reveals your identity

See our Cookie Policy for details. If Other Information is treated as Personal Information under applicable law, we use and disclose it as described in this Privacy Policy. Combined information is treated as Personal Information as long as it remains combined.

Security

We use reasonable organizational, technical, and administrative measures to protect Personal Information. If you believe your interaction with us is no longer secure, please contact us immediately as described under “Contacting Us.”

Choices and Access

If you would like to request to access, correct, update, suppress, restrict or delete Personal Information, or object to processing, or request a copy for transfer, you may contact us as described under “Contacting Us.” We will respond in accordance with applicable law.

We may only implement requests related to the email address used for the request. Identity verification may be required. Certain information may be retained for recordkeeping or to complete transactions you initiated before your request.

Additional Information Regarding the European Economic Area (EEA)

Right of access
Right to rectification and erasure
Right to restriction
Right to object or withdraw consent
Right to data portability

We do not process your data for automated decisions including profiling with legal effects (Art. 22 GDPR).

You have the right to lodge a complaint with your local data protection authority: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080

Retention Period

We retain Personal Information as long as needed or permitted, based on:

Ongoing business relationship
Legal obligations
Legal interests such as statutes of limitations, litigation or regulatory needs

Third Party Services

This Privacy Policy does not cover practices of third parties (e.g., social media platforms, app developers) or services linked within the Services.

Use by Minors

The Services are not directed to individuals under 16, and we do not knowingly collect data from them.

Jurisdiction and Cross-Border Transfer

Your data may be processed in any country where we have operations or service providers.

Additional EEA Information

Some countries are recognized by the European Commission as having adequate protection. For other countries, we use Standard Contractual Clauses. Details are available upon request.

Sensitive Information

Do not send or disclose sensitive Personal Information unless we specifically request it (e.g., health data, religion, criminal records).

Third-Party Payment Services

Payments made through third-party services are governed by their privacy policies, not ours. We are not responsible for their practices.

Updates to this Privacy Policy

The “Last Updated” date at the top indicates the latest revision. Updates become effective when posted on the Services.

Contacting Us

Responsible entity: CONVOTIS GmbH, Neuer Zollhof 3, 40221 Düsseldorf, Germany

Email: [email protected]

CONVOTIS Münster GmbH, att: Rüdiger Niemeier, Robert-Bosch-Straße 17a, 48161 Münster, Germany, Tel: +49 (2533) 28 118 08 100
CONVOTIS Services GmbH, att: Data protection officer, Guglgasse 15/4A/4.OG, 1110 Vienna, Austria, Tel: +43 (1) 7985012
For CONVOTIS Hamburg GmbH and METRO CLOUD Provider GmbH: att: Sebastian Herting, Hallerstraße 76, 20146 Hamburg, Germany, [email protected], www.datenschutzkanzlei.de

Please do not send credit card or other sensitive information by email.