The responsible body within the meaning of § 5 of the Telemedia Act (TMG) for the Trusted Shops feedback platform and related online offers is:
Trusted Shops GmbH
Subbelrather Straße 15c
Telephone: 0221 – 77 53 66
Fax: 0221 – 77 53 6 89
Cologne District Court, Commercial Register (HRB) 32735,
VAT ID No. DE 812 947 877
Managers: Jean-Marc Noël, Thomas Karst, Ulrich Hafenbradl
Youth Protection Officer pursuant to § 7 of the System for the Protection of Minors against Harmful Media (JMStV): Frieder Schelle, firstname.lastname@example.org
We appreciate your interest in the Trusted Shops feedback platform. The protection of your privacy is very important to us. Detailed information about the handling of your data is provided below.
You can access the Trusted Shops feedback platform and Trusted Shop online offers without providing any personal information. Each time a web page is called up, the web server merely automatically stores a so-called server log file which contains, for example, the name of the requested file, your IP address, the date and time of retrieval, the data volume transferred and the requesting provider (access data) and documents the retrieval.
In addition, to reduce loading times, we may use a Content Delivery Network ("CDN") for some of our offers, whereby web assets are delivered via the web server of a CDN provider who works for us within the framework of a commissioned processing contract. Access data is also collected on the provider's web servers.
Access data is used solely to ensure trouble-free operation of the Trusted Shops feedback platform, to analyse errors and to improve the Trusted Shops offering. In balancing the various interests, the use of a CDN provider, as well as the procedure described herein, serves to safeguard the legitimate prevailing interests of Trusted Shops in accordance with Article 6 (1) (f) GDPR in the correct presentation of our offer. All access data will be deleted no later than seven days after your visit to the page.
Hosting services by a third-party provider
Within the framework of a commissioned processing contract, a third party provides Trusted Shops with services for hosting and displaying the Trusted Shops feedback platform as well as the online offers.
This service provider is based in the USA and is certified under the EU-US Privacy Shield. Pursuant to this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield. In addition, the EU standard data protection clauses have been agreed with the service provider and it has been stipulated that data relating to persons shall be stored exclusively within the European Union.
All data collected in connection with the use of the Trusted Shops feedback platform or in the related forms as described below will be processed on the service provider's servers. Processing on other servers takes place only in the framework described herein.
Data collection and utilisation in connection with the use of the Trusted Shops feedback platform
We collect personal data if you willingly provide it to us when you contact us (e.g. by contact form or e-mail). Mandatory fields are marked as such since in these cases we need this information to process the contract or your contact message or to open the customer account in accordance with Article 6 (1) (b) GDPR, and you cannot send the contact message without providing the requested information. The information that is collected can be seen from the respective input forms. We use the data you provide to process your inquiries.
After complete processing, your data will be restricted for further processing and deleted upon the expiry of the fiscal and commercial retention periods, unless you have explicitly consented to a further use of your data or we have reserved the right to further legally-permitted data use, about which we inform you in this privacy statement.
Sending of feedback reminders by e-mail or SMS
Provided you give us or the rated company your explicit consent in accordance with Article 6 (1) (a) GDPR, we will use your e-mail address and/or your mobile phone number to send you feedback reminders by e-mail and/or SMS.
Your consent may be withdrawn at any time with future effect by sending a message to the contact option described below.
The feedback reminder will be sent as part of the processing on our behalf by service providers, to whom we pass on your e-mail address and/or your mobile phone number.
If the feedback reminder is sent via a service provider based in the USA, then that service provider has been certified under the EU-US Privacy Shield. Pursuant to this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
Submission of your feedback
If you submit an evaluation and/or comment via the Trusted Shops feedback platform or send a completed questionnaire (collectively, "feedback"), then, in accordance with Article 6 (1) (b) GDPR, Trusted Shops and the rated company will require your e-mail address to ensure the validity and trustworthiness of the feedback and to contact you if necessary in order to clarify any complaints and verify the feedback provided. The e-mail address will be stored for this purpose along with a transaction number and the feedback, and will be shared with the rated company.
You can personalise your feedback by voluntarily entering other personal details such as your name, place of residence and/or a profile picture in the Trusted Shops login area or when submitting a feedback form. For such purpose your e-mail address serves as identification and username for access to the members' area of the Trusted Shops feedback platform.
Your submitted feedback can then be displayed with this additional information, although certain publicly displayed information will always be shown in truncated form in order to protect your privacy. In this way, a summary of your submitted feedback will be publicly visible and available to the rated company. Your e-mail address will not be displayed publicly. You can change or remove your personal data at any time in the login area of the Trusted Shops feedback platform. You can also disable the public display of your profile there.
In addition, when you submit a product review, the URL of the product and product image, product name, product SKU, GTIN and MPN, and the manufacturer are also saved.
In order to secure the Trusted Shops feedback platform, to prevent inaccurate or false feedback and to ensure proper operation of the system, Trusted Shops will also collect your IP address when your feedback is submitted. This serves to safeguard the legitimate prevailing interests of Trusted Shops in the prevention of misuse and the protection of our systems in accordance with Article 6 (1) (f) GDPR. The IP address is saved for a maximum of 7 days following the submission of the feedback, and then deleted.
Your feedback will be stored for twelve months after its submission to Trusted Shops. Your personal information stored in connection with the feedback will then be deleted, unless you have explicitly consented to further use of your data, or we have reserved the right to further legally-permitted data use, about which we inform you in this privacy statement. The feedback itself will be retained without your personal data and may continue to be included in the overall rating of the assessed company.
Data transfer with consent
If you have submitted feedback and provided your consent in accordance with Article 6 (1) (a) GDPR, Trusted Shops will also forward your personal data contained in the forms to the recipient specified in the consent text for the purposes stated therein.
If you submit your feedback without consenting to the transmission of your personal information, the feedback may be sent in anonymous form to the aforementioned recipients for anonymous posting on the website.
You may withdraw your consent at any time with future effect by sending a message to the contact option described below. Trusted Shops will then delete your personal information, unless you have explicitly consented to further use of your data, or we have reserved the right to further legally-permitted data use, about which you are informed in this privacy statement.
In order to make the visit to our websites attractive and to allow the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. In balancing the various interests, this serves to safeguard our legitimate prevailing interests in an optimised presentation of our offer in accordance with Article 6 (1) (f) GDPR. Cookies are small text files that are automatically stored on your terminal. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your terminal and allow us to recognise your browser on your next visit (persistent cookies). The storage duration can be found in the overview in the cookie settings of your web browser. You can configure your browser so that you are informed about cookie settings and can decide on a case-by-case basis whether to accept them, or to reject cookies in specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:
Failure to accept cookies may limit the functionality of our websites.
Use of Google (Universal) Analytics for web analysis
For website analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.com). In balancing the various interests, this serves to safeguard our legitimate prevailing interests in an optimised presentation of our offer in accordance with Article 6 (1) (f) GDPR. Google (Universal) Analytics uses methods, such as cookies, that make it possible to analyse your use of the website. The information automatically collected about your use of this website is generally transmitted to a Google server in the USA and stored there. The IP address will be truncated by activating the IP anonymisation on this website prior to transmission within the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. The anonymised IP address delivered by Google Analytics will not be combined with other data by Google. When our implementation of Google Analytics has been completed, and if no longer needed, the data collected in this context will be deleted.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Pursuant to this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser plug-in, you can click on this link to prevent data collection by Google Analytics on this website in the future. An opt-out cookie will then be stored on your terminal. If you delete your cookies, you must click the link again.
Contact options and your rights
As a data subject you have the following rights:
Pursuant to Article 15 GDPR, the right, to the extent specified therein, to request information about your personal data processed by us;
Pursuant to Article 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
Pursuant to Article 17 GDPR, the right to demand the deletion of your personal data stored by us, if further processing is not necessary
Pursuant to Article 18 GDPR, the right to demand the restriction of the processing of your personal data, where
Pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller;
Pursuant to Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual place of residence or place of work or our head office.
For questions about the collection, processing or use of your personal data, the disclosure, correction, restriction of processing or deletion of data and cancellation of consent or objection to a particular use of data, please contact our company data protection officer
Trusted Shops GmbH
Datenschutzbeauftragter [Data Protection Officer]
Subbelrather Str. 15c
Right to object
To the extent that, in balancing the various interests, we process personal data as described above in order to safeguard our legitimate prevailing interests, you may object to this processing with effect for the future. If the processing is for the purposes of direct marketing, you may exercise this right at any time as described above. If the processing takes place for other purposes, you have a right of objection only if there are reasons that arise from your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the data is processed in order to assert, exercise or defend legal claims. This does not apply if the processing is for direct marketing purposes. In that case, we will not process your personal data for this purpose.