Personal information is information relating to an identified or identifiable person. This includes, in particular, information that enables conclusions to be drawn about your identity, such as your name, your phone number, your address or email address. Statistical data, which we collect when you visit our website and cannot be associated with you as a person, does not fall under the definition of personal information.
Your contact person
The contact and responsible person for the use of your personal information when you visit this website, within the terms of the EU Data Protection Regulation (GDPR), is
Gigaset Communications GmbH
46395 Bocholt, Germany
Tel.: +49 (0) 2871 / 912 912
You can also contact our data protection officer at any time for all questions concerning the topic of data protection in connection with our products or use of our website. This officer can be reached at the above postal address and email address (keyword: "FAO Data Protection Officer").
2. Use of data on our gigaset.com website
Every time you visit our website, we collect the access data that your browser automatically transmits, to allow you to visit the website. This access data includes, in particular:
- IP address of the requesting device
- Date and time of the request
- Address of the accessed website and of the requesting website
- Information about the used browser and operating system
- Online identifiers (e.g. device identifiers, session IDs)
This access data must be processed to allow you to visit the website and to ensure long-term functioning and security of our systems. The access data is also temporarily stored, for the purposes already outlined, in internal log files, in order to create statistical information about the use of our website, in order to develop our website in regard to the usage habits of our visitors (for example if there is an increase in the number of mobile devices to access the pages) and in order to maintain the general administration of our website. The legal basis is Article 6 Paragraph 1 Clause 1 lit. b of the EU Data Protection Regulation.
The information stored in the log files does not allow for direct conclusions to be drawn about your person – in particular, we store IP addresses in a shortened, anonymous form only. The log files are stored for 30 days and subsequently anonymised and archived.
Getting in contact
You have several ways to get in touch with us. These include via the contact form, the telephone hotline, as well as emailing us. In this context, we process data solely for the purpose of communicating with you. The legal basis is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation. When using the contact form, the data collected by us is automatically deleted once your request has been processed in full, unless we need your request to fulfil contractual or statutory obligations (see the section entitled "Storage duration").
Creating a user account
You have the option of signing up for our login area, to use the full functionality of our website. We have marked the mandatory information you must provide – first name, last name, email address, password – as mandatory fields. It is not possible to sign up without providing this information. The legal basis for this processing of information is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation.
Managing a user account
Following successful registration, you can manage personal user account via gigaset.com. The following functions are available to do this: user account information, address book, my orders, my wishlist, newsletter subscriptions, registered products, reporting a repair, my repair orders, my customer reviews. You can add additional personal data using the address book. These are: first name, last name, company, phone, fax, address, street, state, post code, city. In this context, we process information solely for executing our services such as conducting repair orders. The legal basis for this processing of information is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation.
In the case of an order process, we collect information necessary for settling the contractual obligation:
- First name, last name
- Post code, city, address
- Email address
- Billing and shipping address
Optional information includes phone and fax numbers to allow us to contact you if there are any queries. The legal basis for this processing of information is Article 6 Paragraph 1 Clause 1 lit. b of the EU Data Protection Regulation.
You have the option of subscribing to our newsletter, which includes regular updates regarding innovations to our products and campaigns.
To subscribe to our newsletter, we use the double opt-in procedure, i.e. we will only send you the newsletter via email once you have clicked on a link in our notification email to confirm that you are the owner of the specified email address. Once you confirm your email address, we store that, the time of registration and the IP address used to sign up, until you unsubscribe from the newsletter. The information is stored solely for the purpose of sending you the newsletter and proving your registration. You can unsubscribe from the newsletter at any time. There is a corresponding unsubscribe link in every newsletter. Sending a message to the contact information specified above or in the newsletter (e.g. via email or letter) is, of course, also sufficient. The legal basis for this processing of information is your consent in accordance with Article 6 Paragraph 1 lit. a of the EU Data Protection Regulation.
In our newsletter, we use commercially available technologies to measure the interactions with the newsletter (such as opening the email, links that have been clicked on). We use this data in pseudonymous form to create general statistical evaluations and to optimise and further develop our content and customer communication. This is done with the help of small graphics (called pixels) embedded in the newsletters. The information will only be collected in pseudonymous form; the collected information is not linked to your other personal information either. The legal basis for this is our specified legitimate interest in accordance with Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation. Using our newsletter, we want to share as much relevant content as possible with our customers and better understand what readers are actually interested in. If you do not want your user behaviour to be analysed, you can unsubscribe from the newsletter or disable graphics in your email program by default. The information collected on interactions with our newsletters is stored in pseudonymous form for 30 days and then in completely anonymous form.
It is possible to unsubscribe from the newsletter at any time, for instance by clicking on the unsubscribe link at the end of each newsletter. Alternatively, you can direct your opt-out request at any time to the above contact information.
Our website uses OneSignal software from OneSignal, located at 2194 Esperanca Avenue, Santa Clara, CA 95054, USA (hereinafter OneSignal). OneSignal's Push API gives us the ability to send notifications to interested visitors and customers and display them directly in the operating system. Push notifications always require the user's consent. To do this, information that can be accepted or rejected is displayed next to the address bar. Your consent for push notifications on our website can be revoked in your browser settings. If you give us your consent, no personal data will be collected. Your IP is stored anonymously, which prevents any inference to a specific Internet connection.
Details on the handling of your personal data by OneSignal and your rights in this respect can be found in OneSignal's data protection information at https://onesignal.com/privacy_policy.
The storage by OneSignal is based on Art. 6 para. 1 lit. f of the EU Data Protection Regulation and pre-contractual measures pursuant to Art. 6 para. 1 lit. b of the EU Data Protection Regulation. The website operator has a legitimate interest in informing potential customers about new products and services on the website.
Competitions and promotions
In the context of competitions and promotions, we use your information for the purpose of holding competitions and promotions and notifying winners. You will find detailed information in the terms and conditions for the respective competition or promotion. The legal basis is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation.
We offer you the opportunity to post in our forum on our website, in which case we store your IP address. The legal basis is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation. We store this information for our own security in the event that the author, through his comment, has encroached upon the rights of third parties and/or left unlawful content. Your data will not be forwarded to third parties. The information collected in this way is also not compared with information collected by other components on our page.
Use of live chats
Our website uses a MUUUH! chat program to communicate with visitors. Digital GmbH
Rheiner Landstraße 195a, 49078 Osnabrück, Germany. Users are shown whether anyone is online to provide immediate assistance. If no-one is online, we will promptly answer your request during our business hours. In this context, we process data solely for the purpose of communicating with you. The legal basis is Article 6 Paragraph 1 lit. b of the EU Data Protection Regulation.
The device IP address is recorded when using the chat program. The IP address is anonymised. Chats that have been conducted are logged and stored. The data collected is not used to personally identify visitors to this website, and is not combined with personal information about the bearer of the pseudonym.
Other cases of balancing interests (Article 6 Paragraph 1 lit. f of the EU Data Protection Regulation)
In addition, we may use your information based on a balance of interests to protect the legitimate and usually economic interests of ours or third parties, whereby we use pseudonymous or anonymous data processing as much as possible. This is done for the following purposes:
- To check and improve the efficiency and legal certainty of business processes
- To check, optimise and further develop products and services
- To advertise (e.g. postal advertising), to conduct market research and surveys
- To assert legal claims and defence in legal disputes
- To detect, prevent and investigate criminal offences
- To ensure the security and operation of our IT systems
To meet further legal obligations (Article 6 Paragraph 1 lit. c of EU Data Protection Regulation)
We are subject to various legal obligations, such as statutory retention obligations in terms of business documents, as well as to statutory export provisions.
Our website uses for this purpose the chat program of iAdvize, a service of iAdvize Société par actions simplifiées, 9 Rue Nina Simone, Euronantes Gare, Le Berlingot bât. B, F-44000 Nantes, France ("iAdvize"). If you have general or specific questions or problems regarding our products, services or our Gigaset Shop, you can send us a message via iAdvize. You will be shown whether someone is currently online to answer you immediately. If this is not the case, your request will be answered immediately during our business hours. In this context, the data will be processed exclusively for the purpose of communication with you. The legal basis is Art. 6 para. 1 lit. b of the EU Data Protection Regulation.
For your future consultation and to further optimize our website and services, the communication processes are stored for 30 days. For quality assurance reasons, it is possible for team leaders to randomly watch individual chats or listen in on phone calls. If you do not wish this, please inform your advisor.
Further information can be found in the data protection information of iAdvize http://www.iadvize.com/de/datenschutzerklaerung/
We use our own cookies, in particular,
- To authenticate logins
- To save shopping baskets
- To save your language settings
- To save your favourite products
- To note that information has been placed and displayed to you on our website, so that this information is not displayed again the next time you visit the website.
We want to offer a more convenient and customised use of our website. These services are based on our above-mentioned legitimate interests; the legal basis is Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation.
The legal basis for data processing outlined in the following section is Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation, based on our legitimate interest of offering personalised advertising.
In the following section, we want to explain these technologies and the providers we use in greater detail.
The information collected may, in particular, be
- The IP address of the device
- The date and time of access
- The identification number of a cookie
- The device identifier of mobile devices
- Technical information about the browser and operating system.
However, the collected information is stored exclusively in pseudonymous form, so that no direct conclusions can be drawn to persons.
The descriptions below of the technologies used by us contain information regarding the opt-out options for our analysis and advertising measures by means of opt-out cookies. Please note that an opt-out cookie must be set again after you have deleted all cookies in your browser or subsequently used another browser and/or profile.
Alternatively, you can exercise your right to opt-out by selecting the appropriate settings on the Truste, NAI, DAA or Your Online Choices websites, which provide bundled opt-out options for a range of advertisers. Both sites allow for the listed providers to disable all ads at once by means of opt-out cookies; alternatively, you can select the settings for each individual provider.
Facebook Conversion and Retargeting Tags
For marketing purposes, our websites use conversion and retargeting pixel tags (also known as "Facebook pixels") from the social network Facebook, a service of Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA ("Facebook"). We use Facebook pixels to analyse the general usage of our websites and to understand the effectiveness of Facebook advertising ("Conversion"). In addition, we use the Facebook pixels to provide you with personalised advertising messages based on your interest for our products ("retargeting"). Facebook therefore processes data that is collected by the service via cookies and similar technologies on our websites.
In this context, the data can be transferred by Facebook to a server in the USA and stored there for evaluation purposes. In the event that personal information is transferred to the USA, Facebook is subject to the EU-US Privacy Shield.
If you are a member of Facebook and have allowed Facebook via your account privacy settings, Facebook can link the information collected about your visit to our website with your member account and use this for the targeted activation of Facebook ads. You can view and amend your Facebook profile privacy settings at any time. If you are not a member of Facebook, you can prevent the processing of data by Facebook, by clicking on the deactivation switch for "Facebook" on the TRUSTe website mentioned above. You can still prevent information from being processed, by clicking on the following button.
If you disable Facebook processing data, Facebook will only show general Facebook ads that are not selected based on the information collected about you.
You can prevent cookies from being saved by configuring the relevant setting in your browser (as described above). However, if you do so, you might not be able to make full use of all website functions. Furthermore, you can prevent Google from recording and processing the data created by cookies and the data relating to your use of the website by downloading and installing the browser plug-in for double-click deactivation. As an alternative to the browser plug-in or within browsers on mobile devices, you can disable advertising in Google Ads Settings by clicking on the button "Ads Personalization". In this case, Google will only show general ads that are not selected based on the information collected about you.
Google Tag Manager
For more information, please refer to the information provided by Google for Tag Manager.
5. Embedding YouTube videos
We have embedded videos in our website that are stored on YouTube and can be played directly from our websites. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In the event that personal information is transferred to the USA, Google and its subsidiary, YouTube, are subject to the EU-US Privacy Shield. The legal basis is Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation, based on our legitimate interest on the integration of video and image content.
By visiting our website, YouTube and Google receive the information that you have accessed the corresponding sup-page of our website. This information is collected regardless of whether you are logged into YouTube or Google or not. YouTube and Google use this information for the purposes of advertising, market research and requirements-based design of their websites. If you access our website from YouTube when you are logged into your YouTube or Google profile, YouTube and Google can also link this event with the respective profiles. If you do not want this information to be allocated, you need to log out before accessing our website on Google.
As outlined above, you can configure your browser to reject cookies, or you can prevent the information generated by cookies and the data relating to your use of the website from being captured, as well as the processing of this data by Google, by disabling the "Ads Personalization Across the Web" button in the Google Ad Settings. In this case, Google will only display non-personalised ads.
For more information, refer to the Google privacy policies (also applicable to YouTube).
6. Use of social plugins
On our website we have integrated social media buttons for the following companies:
Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA)
Twitter Inc. (795 Folsom St. - Suite 600 - San Francisco - CA 94107 - USA)
Google Plus/Google Inc. (1600 Amphitheatre Parkway – Mountain View - CA 94043 - USA)
7. Disclosure of data
Essentially, data collected by us is only disclosed if:
- You have given your express consent to this in accordance with Article 6 Paragraph 1 Clause 1 lit. a of the EU Data Protection Regulation
- It is necessary to assert, exert or defend legal claims in accordance with Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation and there is no reason to believe that you have is an overriding legitimate interest to stop the disclosure of your information
- We are legally obliged to disclose your data in accordance with Article 6 Paragraph 1 Clause 1 lit. c of the EU Data Protection Regulation
- This is legally permissible and, in accordance with Article 6 Paragraph 1 Clause 1 lit. b of the EU Data Protection Regulation, is necessary for the handling of contractual relationships with you or for the implementation of pre-contractual measures to be carried out at your request.
In addition, disclosure in connection with regulatory inquiries, court decisions and legal procedures can take place when it is necessary for prosecution or enforcement.
8. Storage duration
Essentially, we only store personal information for as long as necessary to fulfil contractual or statutory obligations to which we have collected the information. We will then instantly delete the data, unless we need the data until the expiry of the statutory period of limitation for evidential purposes for rights according to civil law or due to statutory retention obligations.
We must keep contractual information for evidential purposes for three years starting from the end of the year in which the business relationships with you end. Any claims shall become statute-barred after the statutory period of limitation at the earliest at this time.
We also need to save some of your information for accounting reasons. We are obliged to do so on account of statutory documentation obligations arising from the Commercial Code, the Tax Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The specified time limits for retention of documents is two to ten years.
9. Your rights
You have the right, at any time, to request information regarding the processing of your personal information by us. We will explain the data processing as part of the disclosure and will provide an overview of the information stored about you.
If the information we have saved is incorrect or no longer be up-to-date, you have the right to have this information corrected.
You can also demand for your information to be deleted. If deletion is not possible due to other legal provisions in exceptional cases, the information will be locked, meaning that it is available only for this statutory purpose.
You can also restrict the processing of your data, for example if you believe that the information stored by us is incorrect. You also have the right to data portability, in other words, that we will send you, on request, a digital copy of the personal information provided by you.
In order to assert your rights described here, please do not hesitate to contact us at the contact information provided. This also applies if you would like to receive copies of guarantees to demonstrate a reasonable level of data protection.
In addition, you have the right to object to the data processing based on Article 6 Paragraph 1 lit. e or f of the EU Data Protection Regulation. Finally, you have the right to submit a complaint to the competent data protection supervisory authority. You can assert this right at a supervisory authority in the member state of your place of residence, place of work or the location of the alleged infringement. In North Rhine Westphalia, the competent supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany (State representative for data protection and freedom of information).
10. Right to withdrawal and objection
In accordance with Article 7 Paragraph 2 of the EU Data Protection Regulation, you have the right, at any time, to revoke the consent given to us once. The result will be that we will stop processing your information based on this consent. By withdrawing consent, the lawfulness of processing carried out based on consent through to withdrawal shall not be affected.
As far as we process your information based on legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 lit. f of the EU Data Protection Regulation, you have the right, in accordance with Article 21 of the EU Data Protection Regulation, to object to the processing of your personal information, provided there are reasons arising from your specific situation or objection to direct advertising. In the latter case, you have a general right of objection, even without specifying reasons.
If you want to make use of your right to withdrawal or right to objection, it is sufficient to send an informal message to the contact information provided above.
11. Data security
We maintain the latest technical measures to guarantee data security and, in particular, to protect your personal information from threats during data transfers, as well as to protect your information from obtained by third parties. These measures are adjusted according to the current state of the art in each case. To secure the personal information provided on our website, on sensitive pages/sub-pages we use Transport Layer Security (TLS), which encrypts the information that you enter.
Version: 1.0/Date: May 2018