ROTHO Babydesign GmbH: DATA PRIVACY STATEMENT

The protection of your personal data is especially important to us. We therefore process your data exclusively on the basis of legal provisions, and observe the applicable data protection regulations. In this data privacy statement, we inform you how data is processed with respect to our internet presence:
https://www.rotho-babydesign.com


1.      Data controller
The responsible body in respect of data protection regulations is:

Rotho Babydesign GmbH
represented by the managing director Mr Görgen,
Hauptstr. 84
79733 Görwihl, Germany

Email:This email address is being protected from spambots. You need JavaScript enabled to view it.

 

2.      Data protection officers 
You can contact the data protection officers at the body responsible for data protection, the ROTHO Group, using the details below: 

Robert Thoma GmbH
FAO the data protection controllers
Hauptstr. 84
79733 Görwihl, Germany 

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Tel: +49 351 2820 51 75 

 

3.      Processing of data

3.1       General, deletion

Personal data comprises all data that makes you identifiable as a person, such as your name, address, email address and online credentials.  

Our users’ personal data is used as follows:  
1.    To provide our services,
2.    To ensure technical support.

We only transfer personal data to third parties if this is on the basis of your consent, and is necessary for supplying goods (delivery of goods by postal or courier services) or for any other reason in order for us to fulfil our contractual obligations to you. 

Personal data is deleted as soon it has fulfilled its purpose, provided the deletion does not conflict with storage obligations. 

 

3.2       Informational use of our website 
During pure informational use of our website, i.e. if you do not register or log in to use the website, or transfer information to us in any other way, we will not collect any personal data, except for data transmitted by your browser in order to make it possible to use the website.  This data is:

–     The IP address 

–     The date and time of the request 

–     Time zone difference to Greenwich Mean Time (GMT) 

–     Content of the request (specific page) 

–     Access status/HTTP status code 

–     The quantity of any data transferred 

–     The website from which the request comes 

–     The browser 

–     The operating system and its interface 

–     The language and version of the browser software. 

This data enables us to provide our website’s content as well as to guarantee the functioning of our IT systems and optimise our web presence. The data can be used in anonymised form for statistical purposes (see below), as well as for data security purposes, in particular for defending our web server against attack attempts (Article 6, paragraph 1f, GDPR).Access data is not used to create individual user profiles, and nor is it passed to third parties. After appropriate needs-based use, in compliance with data protection regulations, it is deleted.Due to the nature of the internet, it is necessary for this data to be processed on a range of servers, before your request reaches our web server. Consequently, the collection and use of data in ‘third party countries’ (e.g. in the USA) is also possible. Our company has no influence whatsoever on this process. Apart from reasons of technical necessity, the provider of this website does not transfer any personal data to countries outside the area of application of the EU Data Protection Regulation, or without a suitable level of data protection.  

In addition to the pure informational use of our website, we also offer a range of services you can use if you are interested. To do so, you normally have to provide personal data, which we will use to provide the respective service. If additional voluntary details are possible, they are marked accordingly. 

 

3.2       Contact form
If you contact us via this website or by email, your email address, name and any other details you voluntarily provided (company, telephone number, your message) are saved by us so that we can answer your questions. Our communication with you occurs via unencrypted email. The data we collect in this context is deleted once we have processed your enquiry, provided there is no need to save it for longer. Insofar as binding legal storage periods apply, the data is blocked for other purposes.

Data processing is carried out on the basis of the legal provisions of Article 6, paragraph 1a (consent) of the GDPR. This processing of data is legal provided you have given your consent for it. You can revoke your consent at any time. 

 

3.3       Newsletter
If you wish to receive our newsletter, we require your email address, as well as information that allows us to verify that you are the owner of the specified email address and that you consent to receiving the newsletter. Provided you grant this, we store information about what interests you, and for better readability of the newsletter, your (company) name. We use this data exclusively for the provision of the requested information. 

You can revoke your consent to your data and email address being stored, and the use of this data to send the newsletter, at any time, for example via the ‘unsubscribe’ link in the newsletter.

  

3.4      Tailored advertising for you
The information we receive from you helps us to permanently improve your shopping experience and design it so that it is customer-friendly and tailored to your needs. The information you provide, and also the information that is automatically generated, is used to produce advertising tailored to you and your interests. We use existing information for this purpose, for example receipt and read confirmations of emails, information about your computer and internet connection, operating system and platform, your order history, your service history, the date and time you visit our website, and products you have viewed. We use this information solely in anonymised form. The analysis and evaluation of this information enables us to improve our website and internet presence, as well as, as a result, to send you customised advertising. This means advertising that recommends products that really could interest you. Our objective is to design our advertising so that it is more useful and interesting for you. This evaluation and analysis of the anonymised data collected on you helps us ensure we don’t send you random, indiscriminate advertising. Rather, we send you advertising, such as for example newsletters or product recommendations, by email or post, which correspond to your areas of interest. In this respect, we also check which of our emails you open, so that we can avoid sending you unnecessary emails.

Should you not wish to receive personalised advertising, you can revoke consent entirely or just for certain types. To do so, email This email address is being protected from spambots. You need JavaScript enabled to view it. or write to the postal address given in section 1.

 

3.5       Retargeting technologies
This website uses online retargeting technology. On our partners’ websites, this enables us to target advertising at those internet users who have already shown interest in our shop/website and our products. With retargeting, advertising is shown on the basis of cookie-based analysis of previous user behaviour. Of course, no personal data is stored, and retargeting technology also of course complies with applicable data protection regulations.

 

3.6       Use of our online shop platform
We would like to make you aware that Babydesign does not offer goods and services via our website, merely through various linked online shops (Amazon, Babywalz etc). The contract of sale with you is concluded with the respective online shop. Babydesign is not a contractual partner in this regard, and does not collect any of your personal data. The respective online shop operator is responsible for data processing. Please see the respective third party website for details.

 

3.7       Creating a customer account
All business customers have the opportunity to use login details (user name, password) to register on a protected area of the website, in order to receive additional services and information. The details you provide are entirely voluntary!!! See above. The legal basis for this is Article 6, paragraph 1 a) of the GDPR. You have the right to cancel your access at any time. We will delete your customer account as soon as we are no longer legally obligated to store its data. Once the warranty period has expired, we will limit processing of your data, i.e. your data will only be used to comply with legal obligations. 

 

4.     Cookies      
Our websites use so-called cookies. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and are saved by your browser.

We use cookies to be able to reidentify you on your next visit, if you have an account with us. Otherwise, you would have to log in again each time you visit.  This website uses the following cookies:

-      Transient cookies (for temporary use)

-      Persistent cookies (for time-limited use)

-      Third party cookies (from third party providers)

-      Flash cookies (permanent use). 

Transient cookies are deleted automatically, when you close the browser. In particular, they include session cookies. They save a so-called session ID, which allows your browser’s various requests to be allocated to a common session. This allows your computer to be recognised when you return to the website. Session cookies are deleted when you log out or close the browser. 

Persistent cookies are deleted automatically after a specified period of time, which can differ per cookie. You can delete the cookies at any time using the security settings in your browser. 

You can configure your browser settings as you wish and, for example, reject third party cookies or all cookies. We would, however, like to point out that doing so may mean that you are unable to use all of the functions of this website. 

Browsers and cookies do not have an automatic expiry date. If you do not wish Flash cookies to be processed, you must install an appropriate add-on, such as for example ‘Better Privacy’ for Mozilla Firefox or similar, or the Adobe Flash Killer Cookie for Google Chrome. These Flash cookies are not generated by your browser, but by your Flash plug-in. They save the required data irrespective of the browser you use. 

This saved information is stored separately from any other data provided to us. In particular, the data in the cookies is not linked to any other data of yours.

You can make settings in your browser so that you are notified about the setting of cookies, only allow cookies in individual cases, reject cookies for particular cases or in general, as well as automatically delete cookies when the browser is closed. If cookies are deactivated, the functioning of this website may be restricted.

 

5.      Analysis services

5.1       For the purposes of marketing and for optimising our products and services, we have integrated analysis tools into our website. The legal basis for this is Article 6, paragraph 1f, GDPR.

5.2       The website uses Google Analytics, 

a web analysis service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.(‘Google’). Google Analytics uses so-called ‘cookies’, text files which are saved on your computer and which allow us to analyse your use of the website. The information the cookie generates about your use of this website is normally transferred to one of Google’s servers in the USA and saved there. This website uses Google Analytics with the ‘_anonymizeIp()’ add-on. The result is that IP addresses are processed in shortened form, which therefore rules out direct reference to identifiable individuals. As a rule, the IP address is first shortened by Google before it leaves the member states of the European Union or other contracting countries to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address first sent to Google’s servers in the USA and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the website, in order to compile reports about the website activities and to provide the website operator with other services relating to the use of this website and the internet. 

The IP address transferred by your browser for Google Analytics is not consolidated with other data that Google holds. 

You can prevent cookies being saved by making corresponding settings in your browser software. We would however like to point out that in this case, you may not be able to use all this website’s features in their entirety. 

You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) being transferred to, and being processed by, Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. 

You can prevent Google Analytics recording your data by clicking on the following link. This sets an opt-out cookie, which prevents your data being recorded on future visits to this website:  Deactivate Google Analytics. 

More information about the handling of user data by Google Analytics can be found in Google’s data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.

Google Analytics (please indent):

Duration of data storage

The data sent, and which is linked to cookies, login details (e.g. user IDs) or advertising IDs is automatically deleted after 14 months. Once a month, data that has reached the end of its retention period is automatically deleted.

Google Analytics is used in accordance with the prerequisites that the German data protection authorities have agreed with Google. Information about the third party provider: https://support.google.com/analytics/answer/6004245?hl=en, as well as the data privacy statement: https://policies.google.com/privacy?hl=en.Google is subject to the terms of the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

5.3       This website uses Commerce Connector Buy Now Online (previously Commerce Connector Online)https://www.commerce-connector.com/web/en/,Commerce Connector GmbH 
Eberhardstr. 69–71, 70173 Stuttgart, Germany

We, the manufacturer (Rotho Babydesign), via whose digital touchpoint (e.g. website, microsite, advertising banner etc) you have arrived at this website, use the software-based service Commerce Connector Buy Now Online (previously Commerce Connector Online).  We use this to show visitors to our digital touchpoint from which online retailers they can buy a certain product. The list of online retailers who sell the product you selected on the referring page originates from the software-based service Commerce Connector Buy Now Online.

When you click the ‘Buy now’ button (this can also bear different text to that stated here) or the respective online retailer’s shop logo, you are taken to the relevant online retailer’s website and directly to the product you are interested in.

Sales tracking cookies are set, which provide us with information about your purchase from the online retailer. Cookies are text files that the browser saves on your computer and which contain information about your use of a website (see above).

When you click the ‘Buy now’ button (this can also bear different text to that stated here) or the respective online retailer’s shop logo, we place a cookie on your device for a time-limited period (usually seven days). Should you make a purchase from the participating online retailer during this period, we can access the cookie in order to see that you arrived at the online retailer’s website via one of our digital touchpoints. When the order confirmation page is shown, we also receive information about your purchase from the online retailer.

We do not receive any information that enables you to be identified (apart from the unique cookie number). Commerce Connector uses the purchase information generated to create anonymised sales statistics about our products, which are then supplied to us.

 

6.      Use of social media plug-ins

6.1       For the purposes of marketing and for optimising our products and services, we have integrated social media plug-ins into our website. The legal basis for this is Article 6, paragraph 1f, GDPR.

If you activate a plug-in, the plug-in provider receives the information that you have visited the respective page of our online presence. Furthermore, the data stated under section 5 of this statement is also transferred. In the case of Facebook, and according to the respective provider in Germany, only an anonymised IP is collected. This occurs irrespective of whether you have an account with this plug-in provider and are logged into it. If you are logged in at the plug-in provider, this data is directly linked to your account. If you click the activated button, for example to share the page, the plug-in provider also saves this information in your user account and publicly shares it with your contacts. If you do not wish the plug-inprovider to link this to your profile, you must log out before activating the button. 

The plug-in provider saves this data in user profiles, and uses it for advertising and market research purposes, and/or for the legitimate design of their website. In particular, such analyses result in relevant advertising being shown (including for users who are not logged in), and to inform other users of the social network about your activities on our website. You have the right to object to these user profiles being created. To exercise it, you must contact the respective plug-in provider.

6.2       Facebook plug-ins (‘Like’ and ‘Share’ buttons)

We have integrated plug-ins from the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA) into our pages. You can recognise the Facebook plug-ins on our pages by the Facebook logo or the ‘Like’ button. You can find an overview of all Facebook plugins at the following link: https://developers.facebook.com/docs/plugins/.

When you visit our website, the plug-in establishes a direct connection between your browser and Facebook’s servers. Facebook therefore receives the information that your IP address has visited our website. If you click the Facebook ‘Like’ button while you are logged into your Facebook account, you can share the content of our web pages to your Facebook profile. As a result, Facebook can link your visit to our website to your user account. We would like to make you aware that, as the provider of these pages, we receive no information about the content of the data transferred in this way, nor how it is used by Facebook. You can find more information about this in Facebook’s privacy policy: https://www.facebook.com/policy.php.

There you can also find further information about your rights and customisation options in respect of the protection of your privacy.

If you do not wish Facebook to be able to link your visit to our website to your Facebook account, please log out of your Facebook account before visiting our website.

6.3       Instagram plug-in

Integrated into our website are functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can click the Instagram buttons on our website to share the content of our pages to your Instagram profile. As a result, Instagram can link your visit to our website to your user account. We would like to make you aware that, as the provider of these pages, we receive no information about the content of the data transferred in this way, nor how it is used by Instagram.

You can find more information about this in Instagram’s privacy policy:

 https://instagram.com/about/legal/privacy/.

 

6.4       Twitter plug-in

https://twitter.com/rothobaby

https://help.twitter.com/en/rules-and-policies/update-privacy-policy

Use of Twitter plug-ins (e.g. ‘Tweet’ button). Our website uses so-called social plug-ins (‘plug-ins’) from the microblogging service Twitter, which are maintained by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (‘Twitter’). The plug-ins can be recognised by the Twitter logo, for instance in the form of a blue ‘Twitter bird’. You can find an overview of the Twitter plug-ins and what they look like here: https://about.twitter.com/en_us/company/brand-resources.html.

If you visit a page of our website that contains such a plug-in, your browser establishes a direct connection to Twitter’s servers. The content of the plug-in is transferred from Twitter directly to your browser, and embedded in the web page. This integration results in Twitter receiving the information that your browser has loaded the respective page of our website, even if you do not have a Twitter profile or are not currently logged into Twitter.

This information (including your IP address) is transferred from your browser directly to one of Twitter’s servers in the USA, where it is then stored.

If you are logged into Twitter, Twitter can immediately associate your visit to our website with your Twitter account. If you interact with the plug-ins, for example by clicking the ‘Tweet’ button, the respective information is also directly transferred to one of Twitter’s servers and stored there. The information will then be published on your Twitter account and shown to your contacts there.

For information on the purpose and scope of data collection, and how the data is processed and used by Twitter, as well as your rights and customisation options regarding the protection of your privacy, please see Twitter’s data protection notice: https://twitter.com/privacy.

Should you not wish Twitter to immediately link the data collected from our web presence to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent Twitter plug-ins loading by using add-ons for your browser, for example the script blocker ‘NoScript’ (http://noscript.net/).


6.5         Pinterest
Use of Pinterest Social Plugins

Our website uses so-called social plug-ins (‘plug-ins’) from the social network Pinterest, which are maintained by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (‘Pinterest’). The plug-ins can be recognised by, for example, buttons with the logo ‘Pin it’ on a white or red background. You can find an overview of the Pinterest plug-ins and what they look like here: https://developers.pinterest.com/docs/getting-started/introduction/.

If you visit a page of our website that contains such a plug-in, your browser establishes a direct connection to Pinterest’s servers. The content of the plug-in is transferred from Pinterest directly to your browser, and embedded in the web page. This integration results in Pinterest receiving the information that your browser has loaded the respective page of our website, even if you do not have a Pinterest profile or are not currently logged into Pinterest.

This information (including your IP address) is transferred from your browser directly to one of Pinterest’s servers in the USA, where it is then stored.

If you are logged into Pinterest, Pinterest can immediately associate your visit to our website with your Pinterest account. If you interact with the plug-ins, for example by clicking the ‘Pin it’ button, the respective information is also directly transferred to one of Pinterest’s servers and stored there. The information will then be published on your Pinterest account and shown to your contacts there.

For information on the purpose and scope of data collection, and how the data is processed and used by Pinterest, as well as your rights and customisation options relating to the protection of your privacy, please see Pinterest’s data protection notice:

https://about.pinterest.com/en/privacy-policy

Should you not wish Pinterest to immediately link the data collected from our web presence to your profile on Pinterest, you must log out of Pinterest before visiting our website. You can also completely prevent Pinterest plug-ins loading by using add-ons for your browser, for example the script blocker ‘NoScript’ (http://noscript.net/).

 

7.      Integration of third party services

7.1       The services provided by the third parties detailed below are integrated into our web presence in order to present our online content in an appealing way and to enable our locations to be more easily found. This represents a justified interest as per Article 6, paragraph 1f, GDPR.

7.2       We have integrated YouTube videos into our web presence. These are stored on http://www.YouTube.comand are directly playable from our website. They are all embedded in ‘enhanced data protection mode’, which means that if you do not play the videos, no data about you as a user is transferred to YouTube. Personal data will only be transferred if you play one of the videos. We do not have any influence over this data transfer. You can find more information about the handling of user data in YouTube’s data privacy statement: https://policies.google.com/privacy.  

7.3       We have embedded Google Maps into our website. This is a service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.(‘Google’). When you visit our web page, the third party provider receives the information that you have visited the respective page of our website. In order for you to use the features of Google Maps, it is necessary to store your IP address. This information is normally transferred to one of Google’s servers in the USA and saved there. The provider of this website has no influence over this data transfer. You can find more information about the handling of user data in Google’s data privacy statement: https://policies.google.com/privacy?hl=en.Google is subject to the terms of the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

  

8.      Rights available to affected parties

            You have the right: 

a)       To request information about the categories of processed data, the processing purposes, any recipients of data, the planned duration of storage (Article 15, GDPR);

b)       To request the correction or supplementation of incorrect or incomplete data (Article 16, GDPR); 

c)       Torevoke any consent given, with effect for the future (Article 7, paragraph 3, GDPR);

d)       Toveto the processing of data, based on a justified interest, for reasons arising due to your own particular situation (Article 21, paragraph 1, GDPR);

e)       In specific cases within the scope of Article 17, GDPR, to request the deletionof data – in particular if the data is no longer required for the intended purpose or is processed illegally, if you have revoked your consent as per (c) or have declared your objection as per (d) above; 

f)       To request the restrictionof data under certain conditions, if a deletion is not possible or the obligation to delete is disputed (Article 18, GDPR);

g)    To request the transfer of data, i.e. you can receive the data you have provided to us in a common machine-readable format, such as CSV, and where necessary transfer it to others (Article 20, GDPR);

h)    To lodge a complaintabout the data processing with the relevant regulatory authority, therefore in particular the state representative for data protection for the German state of Baden-Württemberg (https://www.baden-wuerttemberg.datenschutz.de/).

If you have provided consent for the use of your data, you can revoke this at any time with future effect. 
Please send all information, deletion and correction requests, requests for information, requests for data transfer and objections to data processing etc by email to This email address is being protected from spambots. You need JavaScript enabled to view it..  

If you are of the opinion that the processing of your data violates data protection rights, or that your data protection law claims have been violated in any other way, you can also contact the responsible data protection regulatory authorities, specifically the data protection commissioner of the German state of Baden-Württemberg.

 

9.      Data security
We undertake the latest technical and organisational measures to ensure processing is safe, in particular to protect your personal data from hazards resulting from the transfer of data and to prevent third parties gaining knowledge of it. They are adjusted to meet the latest state of technology, the need to protect personal data and the risks to your rights and freedoms. 


10.    Changes to the data protection notice
We reserve the right to amend the data protection notice, in order to adapt it to changing legal situations or changes to our offers. 

Last updated: May 2018

 

 

 

Rotho Logo Rotho Logo Rotho Logo