Englisch - Data protection

PRIVACY

It is very important to us that all visitors to our website feel comfortable and safe. For this reason, the protection of your data is of the utmost importance to us. Below we set out in detail how your data is processed when using our website and when contacting TriStyle Mode GmbH.

By "your data" we mean personal data. Personal data is information that can be used to identify you, either directly or in combination with other data. This includes, for example: Your name, your address, your e-mail address, your telephone number, your user behaviour, your IP address.

Statistical data that we collect, for example, when you visit our website and which cannot be linked to you personally, do not fall under the concept of personal data.

You can print or save this privacy policy by using your browser. You can also download and archive this privacy statement as a PDF file by clicking here.

CONTROLLER AND CONTACT DETAILS

The Controller in terms of Data Protection is

TriStyle Mode GmbH
Oskar-Schlemmer-Straße 11
80807 Munich
Germany

(Hereinafter referred to as “TriStyle”, “we” or “us”)

If you have any questions or requests regarding the protection of your data, please contact our data protection team by post at TriStyle Mode GmbH, Oskar-Schlemmer-Straße 11, 80807 Munich or by e-mail at [email protected].

CONTACT DATA OF DATA PROTECTION OFFICER

If you have any questions about data protection, you can also contact our data protection officer at any time. He can be reached at the above postal address and at the e-mail address given above (use "For the attn Data Protection Officer" in the subject line). We would like to point out that if you use this e-mail address, the contents will not only be seen by our data protection officer. If you wish to exchange confidential information, we would ask that you first contact us directly via this e-mail address.

CONTACT

How to contact us. In this context, we process the data you provide us with, if given, your title, first name, surname, street/house number, postcode, town, county or region, for the purpose of communicating with you or answering your enquiries. If this information is not provided, we will not be able to contact you with any questions.

The legal basis for the aforementioned data processing is Art. 6 (1) b) GDPR, insofar as it concerns processing for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract, and otherwise Art. 6 (1) f) GDPR due to our legitimate interests that you contact us and that we can answer your enquiry.

EMPLOYEE APPLICATIONS

We offer you the opportunity to apply for a job with us via our online applicant portal: https://tristylegroup.com/jobs. In this way, your personal data will be directly entered into our applicant database and will be available for us to retrieve electronically. We use your data exclusively for the application process. Upon electronic transmission of your data, it is encrypted for your protection.

The legal basis for the aforementioned data processing is the performance of a contract or to take steps at the request of the data subject prior to entering into a contract in accordance with Art. 6 (1) b) GDPR.

If you have any questions about our job offers or applications, please send us an email to [email protected].

VISITING THIS WEBSITE (LOG FILES)

Each time you use our website, we collect personal data that your browser automatically transmits to our server. When you visit our website, we automatically collect the following data:

· IP address;

· Date and time of the request;

· Time zone difference from Greenwich Mean Time (GMT);

· Content of the request (specific page, URL);

· Access status/HTTP status code;

· Amount of data transferred in each case;

· Website from which the request came;

· Browser type, version, and language;

· Operating system and its interface.

The processing of this data is necessary to enable viewing of the website, to ensure the permanent functioning and security of our systems as well as for the general administration of our website. The aforementioned data is also automatically stored temporarily in internal log files on our web server for the purposes described above, for example in order to find the cause of repeated or criminally intentioned requests that endanger the stability and security of our website and to take action against them.

The legal basis for the aforementioned data processing is our legitimate interest in accordance with Art. 6 (1) f) GDPR to enable our site to be requested and to ensure the functionality and stability of the operation of our website.

The information stored in the log files is saved for 30 days and then archived.

INFORMATION ABOUT THE USE OF COOKIES AND SIMILAR TECHNOLOGIES
In order to implement certain technically necessary functions of our website, to track the use of our offers and for the continuous optimisation of the websites and to be able to provide content adapted to your wishes, TriStyle uses its own or third-party cookies and similar technologies (collectively "tools"), which also involves working together with service providers and transmitting data to them.

Cookies are small text files that are stored on your hard drive by a website. Cookies do not cause any damage to your computer; they cannot execute programs and they cannot contain viruses. Instead of cookies, comparable technologies such as web storage (local / session storage), fingerprints, tags or pixels can also be used, which enable the (intermediate) storage of information on specific users or usage processes. Most browsers are set by default to accept cookies and similar technologies. However, you can usually change your browser settings so that cookies or similar technologies are rejected or only stored with your prior consent. If you refuse cookies or similar technologies, some functions will not work properly for you.

Some of the cookies we use are deleted at the end of the browser session, so after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser upon your next visit (persistent cookies).

NECESSARY AND FUNCTIONAL COOKIES

Necessary cookies are essentially used to enable you to use the basic functions of the website, e.g., to carry out login and registration, to hold form data (e.g., as part of the contact form), to enable the ordering process and shopping basket function or to control the display of information (e.g., the cookie banner). The legal basis for the data processing carried out in connection with the technically necessary tools is Art. 6 (1) b) GDPR, insofar as the processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract, and otherwise Art. 6 (1) f) GDPR due to our legitimate interests in enabling the basic use and functionality of the website.

Deactivation of these technically necessary tools is not possible.

Cloudflare

Our pages use features of Cloudflare. The provider is Cloudflare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. Cloudflare offers a globally distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is routed through Cloudflare's network. Cloudflare is thus able to analyse the data traffic between users and our websites, for example to speed up the loading time of our pages or to detect and ward off attacks on our services. In addition, Cloudflare may store cookies on your computer for optimisation and analysis. In the context of consideration of interests, this serves to protect our legitimate interests in the security, performance, and reliability of our advertising services, in accordance with Art. 6 (1) f) GDPR.

We have a corresponding contract processing agreement with Cloudflare based on the GDPR. The processing of the data generally takes place in Germany or countries of the European Union. Insofar as processing takes place in third countries in certain cases, the processing only takes place if the adequacy of the level of data protection in the third country has been determined by the EU Commission to be in accordance with Article 45 GDPR, on the basis of the EU standard contractual clauses or if an adequate level of data protection is ensured at the data recipient in another way.

Cloudflare collects statistical data about visits to this website. The access data include:

· IP Address

· Date and time of the request

· Content of the request (specific page)

· Access status/HTTP status code

· Amount of data transferred in each case

· Website from which the request came

· Browser

· Operating system and its interface

· Language and version of the browser software

Cloudflare uses the log data for statistical evaluations for the purpose of operation, security, and optimisation of the website.

Here you can find information about the data collected there and about security & data protection at Cloudflare.

DATA TRANSFER TO THIRD COUNTRIES

As explained in this privacy policy, we use services whose providers are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e., countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the standard contractual clauses of the European Union or binding internal data protection regulations.

Where this is not possible, we base the transfer of data on exceptions to Art. 49 GDPR, in particular your express consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.

Where a third country transfer is envisaged and no adequacy decision or appropriate safeguards are in place, it is possible and there is a risk that authorities in the relevant third country (e.g., intelligence services) may gain access to the transferred data in order to collect and analyse it and that enforceability of your data subject rights cannot be guaranteed.

STORAGE PERIOD

In principle, we store personal data only for as long as is necessary to fulfil the purposes for which we collected the data or to fulfil contractual or legal obligations.

We store personal data that we process on the basis of your consent or our overriding legitimate interests until you withdraw your consent or object. Then we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for civil law claims or due to statutory retention obligations.

YOUR RIGHTS

You have the following statutory data protection rights under the respective legal conditions:

· Right of access (Article 15 GDPR)

· Right to erasure (Article 17 GDPR)

· Right to rectification (Article 16 GDPR)

· Right to restriction of processing (Article 18 GDPR)

· Right to data portability (Article 20 GDPR)

· Right to withdraw consent (Article 7 (3) GDPR)

· Right to object to certain data processing measures (Article 21 GDPR)

To exercise your rights described here, you can contact us at any time using the contact details above.

You also have the right to complain to the data protection supervisory authority responsible for us. In Munich, where we are based, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany. Alternatively, you can contact the data protection authority in your place of residence, which will then forward your concern to the competent authority.

DATA SECURITY

We maintain up-to-date technical measures to ensure the security of data, in particular to protect your personal data from risks during data transmissions and from third parties gaining access. These are updated to the latest technologies available in each case. To secure the personal data you enter on the website, we use the Secure Sockets Layer (SSL) standard, which encrypts the information you enter.

CHANGES TO THE PRIVACY POLICY

We may occasionally update this privacy policy, for example, if we make changes to our website or if legal requirements change.