Privacy Policy

Privacy policy

The protection of your personal data is important to us. We therefore naturally observe the applicable data protection regulations.
In the following, we would like to briefly inform you about the type and scope of data use, whereby a distinction must be made between the processing of orders and the other use of our website:

I Name and address

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is

BIANCA Moden GmbH & Co. KG
Kreuzweg 70
48607 Ochtrup
Ochtrup, Germany
Phone: 02553 79-0
E-Mail: contact@bianca.de
Website: www.bianca.de

2. Name and address of the data protection officer
If you have any questions regarding the collection, processing or use of your personal data, information, correction, blocking or deletion of data as well as objection to certain processing or general questions regarding data protection, please contact the data protection officer:

Peter Kosel,
Marktstraße 3
49477 Ibbenbüren
Phone: 05451 9542090
E-mail: dsb@ipmc.gmbh.

II General use of our website

Protection of your data

All data transmitted by you personally will be transmitted using the common and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used, for example, in online banking.
You can recognise a secure SSL connection by the fact that the address line of the browser contains "https://" instead of "http://" and by the lock symbol in your browser line.

2. Inventory and usage data of a general nature

Each time you access a page from the BIANCA website, the IP address of your requesting computer, your Internet service provider and its name, the browser type and version you are using, the date, duration and time of access, the name of the file accessed, the data volume and the website from which you accessed our website (referrer) are stored in a log file. This data is generally generated on the Internet when a website is accessed and does not represent any specific data collection by BIANCA.

When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required in order to

deliver the content of our website correctly,
optimise the content of our website and the advertising for it
ensure the long-term functionality of our IT systems and the technology of our website, and
to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

This collected data and information is therefore analysed by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The data of the server log files are stored separately from all personal data provided by a data subject.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

We process and store your personal data only for the period necessary to achieve the purpose of storage or if this is provided for by the legal provisions to which our company is subject.

If the storage purpose no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

3. Use of cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookies that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and, if applicable, which entries and settings you have made so that you do not have to enter them again.

These cookies, which are necessary for the proper functioning of the website, to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping basket function), are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services.

For all other cookies, you have given your consent to this via our opt-in cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies or only certain cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

4. making contact / contact form

Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal obligations to retain data to the contrary.

5. Communication by e-mail

Unsecured e-mails offer opportunities for attacks against confidential communication. They can potentially be viewed, changed, falsified or deleted by unauthorised third parties and communication profiles can be created. If you use e-mail communication or provide your e-mail address, you are aware of these risks and you agree that BIANCA may also use this form of communication, possibly unencrypted.

6. Application management / job exchange

We collect and process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). The data is stored internally and only viewed and processed by the employees involved in the application process and is not passed on to third parties.

In this respect, the data processing is carried out for the initiation of the employment relationship in accordance with Art. 88 GDPR in conjunction with Section 26 para. 1 BDSG. § 26 para. 1 BDSG or on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

7 Newsletter

If you have actively registered for the newsletter on our website and thus given your consent, Bianca collects and processes your personal data, in particular your e-mail address, the end device you use and your e-mail client, for the purpose of sending you non-binding information about news, further information about our products or special offers tailored to your individual needs.

The personal data collected when registering for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances.

For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email is used to check whether you, as the owner of the email address, have authorised the receipt of the newsletter.

BIANCA uses a specialised service provider (Sendinblue GmbH, Berlin, hereinafter referred to as "Sendinblue") to send the newsletter, to whom we transmit the personal data required for this purpose. The service provider processes your personal data only on behalf of and on the instructions of BIANCA. The service provider is obliged to comply with these data protection provisions and the necessary security measures.

The data you enter for the purpose of subscribing to the newsletter will be stored on Sendinblue's servers in Germany.

With the help of Sendinblue, we are able to analyse our newsletter campaigns. For example, we can see if, when and where a newsletter message was opened and which links were clicked on. In this way, we can determine, among other things, which links were clicked on particularly often at which times of day and by which target group.

We can also recognise whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can recognise whether you have made a purchase after clicking on the newsletter. This personal data is stored and analysed by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to your interests.

Sendinblue also enables us to subdivide ("cluster") the newsletter recipients according to various categories. Newsletter recipients can be categorised by age, gender or place of residence, for example. In this way, the newsletters can be better customised to the respective target groups.

Further information on the functions of Sendinblue can be found at the following link: https ://www .newsletter2go .de /features /newsletter -trackingoptionen /.

You can find out more about data protection at Sendinblue at: https://www.newsletter2go.de/features/datenschutz-2/.

When you register for the newsletter, we also store the IP address assigned by your Internet service provider (ISP) of the IT system you are using at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.

The data is processed in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent.
If you do not wish to receive any further newsletters or to be analysed by Sendinblue, you can revoke your consent at any time by using the unsubscribe link at the bottom of the newsletter. The cancellation does not affect the legality of our use of your data prior to the cancellation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and Sendinblue's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

III Online ordering and purchase of goods

1. Use of data for contract processing

BIANCA stores the order and payment data required to fulfil the contract (such as name, address, contact details, IP address, items ordered, credit card details or bank details) as well as any other voluntary information. You can transmit this information conveniently using the input mask provided. This data is collected and processed for the purpose of contract processing and fraud prevention. For internal order control, we also store the data required for this purpose, such as the time of the order and the date of delivery to you.

We only transfer personal data to third parties if this is necessary in the context of contract processing or for fraud prevention, for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with payment processing or the payment service provider selected by you. Further transmission of the data only takes place within the scope of a legitimate interest of BIANCA, for example to a law firm in the event of a legal dispute, to a debt collection agency for the collection of outstanding debts or to an authority or if you have given your express consent.

The basis for data processing for contract processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

The basis for data processing for fraud prevention or other legitimate interests described is Art. 6 para. 1 lit. f GDPR.

We store and use the data you provide to fulfil the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data.

2. Registration in the shop

BIANCA allows you to register so that the personal data you provide will be stored permanently. Your personal data from the registration form, your login data (e-mail and password), payment details, information about the BIANCA newsletter and an overview of your previous orders are stored in the customer account.

The personal data you enter will be stored and processed exclusively for internal use and in the interest of convenient and easy use of our website and to maintain customer relations. We only pass on the data in the context of contract processing as described above.

When you register on our website, the IP address assigned by your Internet service provider (ISP), the date and the time of registration are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable criminal offences to be investigated. In this respect, the storage of this data is necessary for our security. This data is only passed on to third parties if there is a legal obligation to pass it on or if it serves the purpose of criminal prosecution. This data is stored for one year.

You can view your registration data (including details of previous orders) and change your personal data at any time by entering your e-mail address and the password you have chosen. You can have your user account deleted at any time. To do so, please send an e-mail to shop-service@bianca.de. BIANCA will then delete your account and confirm this to you in writing. Please note, however, that we will retain data that is subject to a retention obligation or that we still need to fulfil a contract until the reason for retention no longer applies.

Your registration also enables us to offer you content or services which, due to the nature of the matter, can only be offered to registered users.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

3. Evaluation of the payment behaviour

We offer you a variety of payment options. This may also include the "purchase on account" option. As we make advance payment for the delivery of the ordered products with this option, we must protect ourselves against misuse. For this purpose, we may make enquiries about the creditworthiness of our customers. When checking your creditworthiness, we obtain information on your previous payment behaviour and creditworthiness information on the basis of mathematical-statistical procedures using certain personal data (surname, first name, date of birth, title, street/house number, postcode/city) from the following companies, among others:

SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
Bürgel Wirtschaftsinformation GmbH &Co KG, P.O. Box 500166, 22701 Hamburg
Infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden.

We use the information received on the statistical probability of a payment default ("probability value") to make a balanced decision on whether we can grant the "purchase on account" payment option in a specific case. The order data required for the credit check is transmitted via a secure interface. This is done on the basis of our legitimate economic interest in accordance with Art. 6 para. 1 lit. f GDPR and in accordance with the provisions of § 31 BDSG.

Your order and payment data are used for the purpose of an internal evaluation of payment behaviour for further orders.

The data collected will be deleted in any case after the contractual relationship has been fully processed or any retention periods have expired.

4. Payment provider PayPal

We have integrated PayPal components on this website. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

If you select "PayPal" as a payment option during the order process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of personal data required for payment processing.

The personal data transmitted to PayPal is usually first and last name, address, e-mail address, IP address, telephone number, mobile phone number or other data necessary for payment processing. Personal data relating to the respective order is also required to process the purchase contract.

The purpose of transmitting the data is to process payments and prevent fraud. We will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. The purpose of this transfer is to check identity and creditworthiness.

PayPal may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on our behalf.

You have the option to revoke your consent to the handling of personal data from PayPal at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

PayPal is used in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Your personal data will only be transmitted if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

The applicable data protection provisions of PayPal may be retrieved under https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

5. Collection of customer data

The continuous improvement of our processes is Bianca's endeavour, you as a customer are important to us. For this reason, data on purchasing behaviour is collected in order to further optimise the shopping experience of our customers and the quality of our products. For this purpose, personal data is entered into an online form and sent to us. Which data is stored can be seen from the respective form. This involves personal details (name, date of birth, title, gender, clothing size, preferred style/type), contact details (e-mail address, telephone number, availability/permission to be contacted by telephone, what information from us are you interested in) and details of your purchase from us (date, items purchased, whether an order was placed, agreement of a personal consultation, reasons for deciding in favour of or against a purchase, details of the occasion, your opinion of Bianca and our products). Apart from the e-mail address, none of the fields are mandatory for sending. When you enter your customer data, you are automatically subscribed to our newsletter, so your data will also be processed in accordance with the information in point II. 7.

The personal data you provide will be stored and processed exclusively for internal use to improve your shopping experience and our offer as well as to maintain customer relations. This also includes greetings on your birthday. We only pass on the data in the context of contract processing as described above.

When you submit the form, the IP address assigned by your internet service provider (ISP), the date and the time of submission are also stored. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable criminal offences to be investigated. In this respect, the storage of this data is necessary for our security. This data is only passed on to third parties if there is a legal obligation to pass it on or if it serves the purpose of criminal prosecution. This data is stored for one year.

For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered in the form using the double opt-in procedure. This confirmation email is used to check whether you have authorised and consented to the provision of your data.

The processing of the data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
If you do not wish us to continue using your data, to send you further newsletters or to have your data analysed by Sendinblue, you can withdraw your consent at any time by using the unsubscribe link at the bottom of the newsletter. The cancellation does not affect the legality of our use of your data prior to the cancellation.

The data you have stored with us for the aforementioned purposes will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and Sendinblue's servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

IV. Web analysis

Google analytics

On our websites we use Google Analytics, a web analysis service of Google Ireland Limited (https://www.google.de/intl/de/about/), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In this context, pseudonymised user profiles are created and cookies (see "Cookies") are used. The information generated by the cookie about your use of this website, such as

the browser type/version,
the operating system used,
the referrer URL (the previously visited page),
the host name of the accessing computer (IP address) and
the time of the server enquiry,

are transmitted to a Google server in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that they cannot be assigned (IP masking).

These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a GDPR via our cookie banner. You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be given to Google Analytics.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.
If you give your consent to the use of your data by Google Analytics, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Please be aware that in third countries such as the USA, which are not part of the European Economic Area, there is a much lower level of data protection and your data can therefore also be legally used there for processing that is unlawful in the European Economic Area without you having to be informed of this. For example, US companies can be forced by security authorities to hand over your data, which would not be possible under European law. However, the companies themselves can also use your data for much more extensive processing than would be permitted in the European Economic Area.

You can revoke your consent to the processing of personal data and thus also to the transfer to a third country at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be transferred to Google Analytics.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de).

You can view the Google Analytics privacy policy at: https ://support .google .com /analytics /answer /6004245 ?hl =de .

2 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. The operating company of Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing is a function of Google AdWords that enables a company to display adverts to Internet users who have previously visited the company's website. The integration of Google Remarketing therefore allows a company to create user-related adverts and consequently display adverts relevant to the interests of the Internet user.

The purpose of Google Remarketing is to display adverts relevant to your interests. Google Remarketing enables us to display adverts via the Google advertising network or on other websites that are tailored to the individual needs and interests of internet users.

Google Remarketing places a cookie on the data subject's IT system. By setting the cookie, Google is able to recognise the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time you access a website on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as your IP address or surfing behaviour, which Google uses, among other things, to display interest-relevant advertising.

Cookies are used to store personal information, such as the websites you have visited. Each time you visit our website, personal data, including your IP address, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or withdraw your consent, no (further) data will be passed on to Google Remarketing.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.
If you give your consent to the use of your data by Google Remarketing, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

You can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google can be deleted at any time via the Internet browser or other software programmes.

You also have the option of objecting to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from the Internet browser you are using and make the desired settings there.

You can view the Google Analytics Remarketing privacy policy at: https://www.google.de/intl/de/policies/privacy/.

V. Advertising

Google Ads

Our website uses the functions of Google Ads, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit.

Any further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalise ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to create target groups.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.
You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or withdraw your consent, no (further) data will be passed on to Google Remarketing.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.
If you give your consent to the use of your data by Google Ads, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

You can revoke your consent to the processing of personal data and thus also to the transfer to a third country at any time here. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be passed on to Google Remarketing.

You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/. Alternatively, you can obtain information from the Digital Advertising Alliance at the Internet address www .aboutads .info about the setting of cookies and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. We would like to point out that these measures may mean that not all functions of our website are available.

You can view the data protection provisions and further information from Google Ads at: https://www.google.com/policies/technologies/ads/

2 Google Ads with conversion tracking

We have integrated Google Ads on this website. The operating company of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an internet advertising service that allows advertisers to place adverts both in Google's search engine results and in the Google advertising network. Google Ads allows an advertiser to pre-define certain keywords that are used to display an advert in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the adverts are distributed on relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The purpose of Google Ads is to promote our website by displaying interest-relevant adverts on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party adverts on our website.

If you reach our website via a Google advert, a so-called conversion cookie is stored on your IT system by Google. A conversion cookie loses its validity after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping basket from an online shop system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who has reached our website via an AdWords ad has generated sales, i.e. completed or cancelled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via Ads ads, i.e. to determine the success or failure of the respective Ads ad and to optimise our Ads ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the web pages you have visited. Each time you visit our website, personal data, including the IP address of the Internet connection you are using, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or withdraw your consent, no (further) conversion cookies will be set by Google.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.

If you give your consent to the use of your data by Google Ads with conversion tracking, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Please be aware that in third countries such as the USA, which are not part of the European Economic Area, there is a significantly lower level of data protection and your data can therefore also be legally used there for processing that is unlawful in the European Economic Area without you having to be informed of this. For example, US companies can be forced by security authorities to hand over your data, which would not be possible under European law. However, the companies themselves can also use your data for much more extensive processing than would be permitted in the European Economic Area.

You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie already set by Google Ads can be deleted at any time via the internet browser or other software programmes. You also have the option of objecting to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from the Internet browser you are using and make the desired settings there. We would like to point out that these measures may mean that not all functions of our website are available.

You can view Google AdSense's privacy policy and further information at: https://www.google.de/intl/de/policies/privacy/.

VI Plugins and other services

1 Google Maps

We use Google Maps (API) on our website. The operating company of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. By using this service, you can, for example, view our location and make it easier for you to find us.

Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the Google Maps map is integrated. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be given to Google Maps.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.

If you give your consent to the use of your data by Google Maps, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Please be aware that in third countries such as the USA, which do not belong to the European Economic Area, there is a significantly lower level of data protection and your data can therefore also be legally used there for processing that is unlawful in the European Economic Area without you having to be informed of this. For example, US companies can be forced by security authorities to hand over your data, which would not be possible under European law. However, the companies themselves can also use your data for much more extensive processing than would be permitted in the European Economic Area.

You can revoke your consent to the processing of personal data and thus also to the transfer to a third country at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be transferred to Google Maps.

If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
You can view the data protection provisions of Google Maps at ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/.

2 Google reCAPTCHA

We use the reCAPTCHA function on this website. The operating company of Google reCAPTCHA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The main purpose of the reCAPTCHA function is to differentiate whether an entry is made by a natural person or is misused by machine and automated processing. The service also includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

These processing operations are only carried out if express consent is given in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be given to Google reCaptcha.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.

If you give your consent to the use of your data by Google reCaptcha, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Please be aware that in third countries such as the USA, which are not part of the European Economic Area, there is a much lower level of data protection and your data can therefore also be legally used there for processing that is unlawful in the European Economic Area without you having to be informed of this. For example, US companies can be forced by security authorities to hand over your data, which would not be possible under European law. However, the companies themselves can also use your data for much more extensive processing than would be permitted in the European Economic Area.

You can revoke your consent to the processing of personal data and thus also to the transfer to a third country at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be passed on to Google reCaptcha.

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

3 Google Tag Manager

We use the Google Tag Manager service on this website. The operating company of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool allows "website tags" (i.e. keywords that are integrated into HTML elements) to be implemented and managed via an interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on and can then record which content on our website is of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have opted out at domain or cookie level, this will remain in place for all tracking tags implemented with Google Tag Manager.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or withdraw your consent, no (further) data will be transferred to Google Tag Manager.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.

If you give your consent to the use of your data by Google Tag Manager, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Please be aware that in third countries such as the USA, which do not belong to the European Economic Area, there is a significantly lower level of data protection and your data can therefore also be legally used there for processing that is unlawful in the European Economic Area without you having to be informed of this. For example, US companies can be forced by security authorities to hand over your data, which would not be possible under European law. However, the companies themselves can also use your data for much more extensive processing than would be permitted in the European Economic Area.
You can revoke your consent to the processing of personal data and thus also to the transfer to a third country at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or revoke your consent, no (further) data will be transferred to Google Tag Manager.

Further information on Google Tag Manager and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

4 Google WebFonts

Our website uses so-called web fonts for the standardised display of fonts. Google WebFonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using establishes a connection to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our website.

These processing operations are carried out exclusively with your express consent in accordance with Art. 6 para. 1 lit. a GDPR in our cookie banner.

You can revoke your consent to the processing of personal data at any time here. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. If you do not give or withdraw your consent, no (further) data will be transmitted to Google WebFonts.

There is no adequacy decision by the EU Commission for the level of data protection in the USA and no appropriate guarantees for the transfer of data to the USA.

If you give your consent to the use of your data by Google WebFonts, you also consent to the possible transfer of the data to a third country in accordance with Art. 49 para. 1 lit. A) GDPR.

Further information on Google WebFonts and Google's privacy policy can be found at: https ://developers .google .com /fonts /faq https ://www .google .com /policies /privacy /.

VII Rights of data subjects

You can view and edit your own data at any time in the "My account" area - using your e-mail address and password. If you have forgotten your password, we offer you the service of sending a replacement password to the e-mail address you have provided. Please note: You should not disclose your password to third parties, always log out of your personal account after using it and use SSL encryption during the ordering process whenever we offer it.

In accordance with Art. 15 GDPR, you have the right to receive information about the personal data stored about you. If incorrect personal data has been processed, you have the right to rectification in accordance with Art. 16 GDPR. If the legal requirements are met, you can request the erasure or restriction of processing and object to data processing (Art. 17, 18 and 21 GDPR). According to Art. 20 GDPR, you can assert the right to data portability for data that is processed automatically on the basis of your consent or a contract with you.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR, which we use to assess creditworthiness.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

We process personal data for direct marketing purposes. You can object to the processing of your personal data for the purpose of such advertising at any time. If you object to processing for direct marketing purposes, we will no longer process the personal data for these purposes.

These rights can be exercised informally at shop-service@bianca.de or by contacting our data protection officer using the contact details provided above.

If you are of the opinion that data processing violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice (Art. 77 GDPR in conjunction with Section 19 BDSG). This also includes the data protection supervisory authority responsible for us, which you can reach using the following contact details

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

P.O. Box 20 04 44,
40102 Düsseldorf,
Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

VIII. Our activities in social networks

We have our own pages on social networks so that we can communicate with you and inform you about our services.

We are not the original provider (responsible party) of these pages, but only use them within the scope of the possibilities offered to us by the respective providers.

As a precautionary measure, we would therefore like to point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore entail data protection risks for you, as it may be more difficult to safeguard your rights, e.g. to information, deletion, objection, etc., and processing in the social networks is often carried out directly for advertising purposes or to analyse user behaviour by the providers without us being able to influence this. If user profiles are created by the provider, cookies are often used or the user behaviour is assigned directly to your own member profile of the social networks (if you are logged in here).

The described processing of personal data is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a timely manner or to inform you about our services. If you have to give your consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

We do not use the providers' plugins on our website, as they generally already collect the data of website visitors when they access the website. To prevent this data transfer, we use social media buttons that only establish direct contact between the networks and the visitor when the visitor clicks on the button and accesses the social media page. Please note that you will be redirected to the relevant network as soon as you click on one of the buttons. The providers of the networks may therefore collect data about you at that time.

As we do not have access to the providers' databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in the social networks and the possibility of exercising your right of objection or cancellation (so-called opt-out) is listed below with the respective social network provider we use:

Facebook/ Instagram

Controller for data processing in Europe:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland