The data protection notice fulfills the information obligations according to the requirements of Art. 12 et seq. of the EU General Data Protection Regulation (hereinafter referred to as "DSGVO") and gives you an overview of the processing of your personal data (hereinafter referred to as "data") on the TERRITORY GmbH website (hereinafter referred to as "website"). 

 

1. Who is responsible for processing my data?  

  

TERRITORY GmbH  

Am Baumwall 11

D-20459 Hamburg

Telephone +49 40 8090 46 100  

E-mail: contact@territory.group   

​

is responsible for the processing of your data on the website (hereinafter referred to as the "Company"). You can reach the data protection officer from the Company at the above postal address with the addition "To the data protection officer" or at the e-mail address datenschutz@territory.group.  

  

The Company (hereinafter referred to as "we" or "us") process personal data in accordance with the provisions of the GDPR and the Federal Data Protection Act (hereinafter referred to as "BDSG"). 

 

2. What data is collected?  

  

In connection with your visit to the website and exclusively for technical, contractual or legal requirements, your data is processed in order to display the desired content and enable you to use the offers.  

  

When you visit the website, information is automatically collected by the calling computer (hereinafter referred to as "access data"). This access data includes details about the content you requested on the website and your usage behavior as well as information about the browser type and version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited web pages and newly accessed web pages via the website and the IP address of the computer (also referred to as "server log files"). Pseudonymous usage profiles are created and evaluated from the access data with the help of web tracking. However, it is not possible for us to draw conclusions about your person.  

  

In principle, you can use the website without providing your data, for example to obtain information about us. However, the disclosure of your data, such as name, address, e-mail address or telephone is required when using certain offers, for example, to make contact or to perform the contract. Mandatory data are regularly marked with a *. 

 

3. What cookies are used?  

  

Cookies are used on the website. Cookies are small text files that are stored on your computer when you visit a website. The stored cookies are assigned to the browser you are using. If the corresponding website is called up again, the web browser sends back the content of the cookies, thus enabling the user to be recognized. Cookies are limited to a runtime (e.g. expiration of the browser session). In addition, you can configure and delete the cookies according to your wishes via the settings of your browser. However, premature deletion may result in limited availability of the website's offerings.  

  

The Website distinguishes between two types of cookies: function-related cookies and optional cookies. The function-related cookies are used to provide the website in a technically and functionally flawless manner (e.g. identification and authentication of the user, language settings, display of image recordings). Without the function-related cookies, the offers of the website are only available to a limited extent. The optional cookies help to optimize the offers on the website by recording user behavior and evaluating it in statistical form.  

  

In principle, cookies are only an online identifier without personal reference. Cookies may be personally identifiable if the information generated by the cookies is merged with other data, such as the access data according to section 2 (e.g. when using web tracking). In principle, such a combination only takes place in pseudonymized form. Personal data may only be merged if you have consented to it or if the law permits it. 

 

4. What data is collected and for what purposes?  

  

The purposes of data processing may result from technical, contractual or legal requirements and, if applicable, from consent. We use your data for the following purposes:  

Provision of the website and ensuring technical security, in particular the correction of technical errors and to ensure that unauthorized persons do not gain access to the website's systems;    

Reach measurement and web analysis to make the website more efficient and interesting for you and to conduct market research;  

Contract initiation, conclusion, implementation or termination;  

Information on these data processing purposes can be found in the following sections of this privacy notice. 

 

4.1. Technical provision of the website 

4.1.1 Description and scope of data processing  

For the functionality of the website, the performance of security analyses and the defense against attacks, the server log files are automatically collected and stored for a short period of time by the computer system of the calling computer as part of the access data according to section 2 when entering and during the use of the website. The server log files are not stored together with other data. We use the server log files for statistical evaluations in order to analyze and rectify technical faults, to ward off attempted attacks and fraud and to optimize the functionality of the website. 

 

4.1.2 Purposes and legal basis of data processing  

The legal basis for the collection of server log files is Art. 6 (1) lit. f DSGVO. The legitimate interests lie in the functionality of the website, the performance of security analyses and the defense against threats. 

 

4.1.3 Duration of storage or criteria for determining this duration.  

After calling up the web pages, the server log files are stored on the web server and the IP address contained therein is deleted after 7 days at the latest in accordance with the requirements of the Telecommunications Act ("TKG"). This does not apply if there is a concrete suspicion of a crime and further storage for the purpose of evaluation and clarification is required by law. 

 

4.1.4 Right of objection and elimination  

You have the right to object to the processing of your data, insofar as there are grounds for doing so that arise from your particular situation. If you would like to exercise your right to object, please contact the contact address given in section 1. 

 

4.2 Conclusion, execution or termination of a contract 

4.2.1 Data processing when concluding a contract  

If you decide on our website to conclude a contract of goods, we process the data provided and required by you for the conclusion, performance or termination of this contract with you. This concerns first name, last name, title, title, billing and delivery address, e-mail address, billing and payment data, date of birth, telephone number, information about orders placed through our website.   

We pass on details of your delivery address to a logistics company commissioned by us for the purpose of processing the purchase contract. To ensure that the goods are delivered according to your wishes, we use your e-mail address to contact you in advance of delivery so that the delivery time can be communicated.  

For the processing of the purchase contract, the following data processing is still relevant:  

In order to be able to make payments in connection with your online order, the partner company PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg (hereinafter "Paypal") is used. When processing your payment, you and your payment data will be forwarded to Paypal for the execution of the payment. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. For further data protection information, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.   

The successful payment is passed on to us for the legally valid processing of the contract. We do not get access to the data entered and stored by you at Paypal.   

 

4.2.2 Purposes and legal basis of data processing  

The legal basis for this is Art. 6 (1) lit. b DSGVO, i.e. you provide us with the data on the basis of the contractual relationship between you and us for, for example, the management of your customer/user account or for the processing of a purchase contract.    

The data provided by you will be transmitted to logistics service providers and shipping partners commissioned by us in order to ensure that the delivery of goods is carried out according to your wishes, we will - insofar as this is necessary - transmit your e-mail address and, if applicable, telephone number to the logistics company commissioned by us and/or to shipping partners who will take over the delivery. The respective data is transmitted solely for the respective purposes and deleted again after delivery has taken place, insofar as our service providers are not themselves obliged to retain the data for legal reasons.  

We are also obliged to process your e-mail address due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation in the form of a shipping confirmation in accordance with Art. 6 (1) lit. c DSGVO.    

 

4.2.3 Purposes and legal basis of data processing  

The legal basis for this is Art. 6 (1) lit. b DSGVO, i.e. you provide us with the data on the basis of the contractual relationship between you and us for, for example, the management of your customer/user account or for the processing of a purchase contract.    

The data provided by you will be transmitted to logistics service providers and shipping partners commissioned by us in order to ensure that the delivery of goods is carried out according to your wishes, we will - insofar as this is necessary - transmit your e-mail address and, if applicable, telephone number to the logistics company commissioned by us and/or to shipping partners who will take over the delivery. The respective data is transmitted solely for the respective purposes and deleted again after delivery has taken place, insofar as our service providers are not themselves obliged to retain the data for legal reasons.  

We are also obliged to process your e-mail address due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation in the form of a shipping confirmation in accordance with Art. 6 (1) lit. c DSGVO.   

 

4.2.4 Possibilities of objection and removal  

You can object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact data mentioned under 1. 

 

4.3 Assertion of data subject rights 

4.3.1 Description and scope of data processing  

Via this data protection information, we draw your attention to the possibility of asserting data subject rights under data protection law, such as information. In order to assert your data subject rights, it may be necessary for you to provide us with information about yourself and about the individual data processing operations. Without such provision, we will not be able to comply with your data subject rights. 

 

4.3.2 Purposes and legal basis of data processing  

We are legally obliged to process your data for the assertion of data subject rights according to the DSGVO. The legal basis for this is Art. 6 para. 1 lit. c DSGVO. 

 

4.3.3 Duration of storage or criteria for determining this duration.  

We store correspondence conducted with you in relation to the assertion of data subject rights for a period of 3 years. This does not include proof of identity, such as a copy of your ID card, if you have provided us with one. This will be deleted once your identity has been established. 

​

4.3.4 Objection and elimination options  

The processing of your data is necessary for the fulfillment of your data subject rights. In this respect, there is no right of objection for you. 

 

4.4 Web tracking  

The website includes services that optimize the user experience and measure the reach of the website. For this purpose, your access data is recorded in accordance with section 2 and usage behavior is evaluated with the aid of cookies in accordance with section 3. Personal identification is generally not required for web tracking. The IP address contained in your access data is either not used or only used in abbreviated form, and thus only pseudonymous usage profiles are created. As a matter of principle, these are not merged with other data and you have the option of revoking this at any time. Personal usage profiles are only created in exceptional cases and if you have given your consent.  

The web tracking services are regularly provided by service providers who process the usage profiles according to our instructions and not for their own purposes. This is ensured by means of contracts for order processing. If the service providers are established outside the European Union or the European Economic Area (hereinafter referred to as "EU / EEA"), a so-called third country transfer takes place. This is permissible if you have consented to it, we have created a guarantee for a level of data protection appropriate to the European standard or the EU Commission has classified the respective third country as a safe third country. The third country transfer of the respective service is marked below. Further information on the recipients of your data and the third country transfer can be found in section 6 and section 7. 

 

4.4.1 Google Analytics  

The website uses the Google Analytics service. The provider of Google Analytics is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics creates a pseudonymous usage profile in order to optimize the user-friendliness of the website. The pseudonymity is ensured by the fact that before your data is transmitted to Google, the IP address is shortened and it is not possible to draw conclusions about your person. The pseudonymous usage profile is evaluated after transmission for the purpose of optimizing user-friendliness. A combination with other data from Google does not take place. By means of an order processing contract, we ensure that Google only processes the data according to our instructions.  

You can find more information on data processing at Google Analytics in Google's privacy policy: https://policies.google.com/privacy?hl=de. 

 

5. Who receives my data?  

We provide access to your data to those departments that need it to fulfill the purposes outlined in section 4. Service providers employed by us may also receive access to your data (so-called "order processors"). Contracts for order processing ensure that these service providers are bound by instructions, data security and confidential handling of your data. 

 

6. Is my data processed in a third country?  

Insofar as the service providers and / or third parties mentioned in section 4 and section 5 are established outside the EU / EEA, this may result in your data being transferred to a country where no level of data protection appropriate to the EU / EEA can be guaranteed. However, such a level of data protection can be ensured with an appropriate guarantee. Standard contractual clauses provided by the EU Commission can be considered as an appropriate guarantee. Any guarantees may be waived by way of exception if you consent or the third country transfer is necessary for the fulfillment of our contractual relationship. The EU Commission has also recognized certain third countries as safe third countries, so that appropriate guarantees on the part of the company can also be waived at this point.  

Through the use of Google services in web tracking and online advertising, a third country transfer takes place. In principle, Google stores the data within the EU. Only in exceptional cases, for example due to technical maintenance, can Google access the data from the USA. 

 

7. What data protection rights do I have?  

  

You have the right to obtain information about the personal data we have stored about you at any time. If data about your person is incorrect or no longer up to date, you have the right to request that it be corrected. You also have the right to request the deletion or restriction of the processing of your data in accordance with Art. 17 or Art. 18 DSGVO. You may furthermore have the right to have the data you have provided handed over to you in a common and machine-readable format (so-called "right to data portability").  

If you have given your consent to the processing of personal data for certain purposes, you may revoke this consent at any time with effect for the future. The revocation is to be addressed to the company at the contact address mentioned under item 1.  

In accordance with Art. 21 DSGVO, the right to object at any time, on grounds relating to your particular situation, to the processing of your data carried out on the legal basis of Art. 6 (1) f DSGVO. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. The same applies to the automated procedures when individual cookies are used, unless they are absolutely necessary for the provision of the website.  

In addition, you have the option of contacting a data protection authority and filing a complaint there. The competent authority is the  

  

Hamburg Commissioner for Data Protection and Information Security  

Rothenbaumchaussee 80b  

20148 Hamburg  

Telephone: +49 40 68 87 57 600  

E-mail: info-office(at)hamburg.de  

  

You can also contact the data protection authority responsible for your place of residence.  

  

Status: July 2021