Privacy Policy

This privacy policy applies to the online portal www.dorotheen-quartier.de, which is operated by E. Breuninger GmbH & Co. (‘Breuninger’). The website www.dorotheen-quartier.de is an information portal dedicated to the Dorotheen Quartier.

Breuninger takes the requirements regarding the protection and security of your personal data very seriously. We recognise that our customers’ trust is a key element of our customer relationships and our business success, and we aim to uphold that trust by fulfilling our information obligations to the best of our ability.

1. General information

Breuninger offers a wide range of services, which you can access in various ways. Depending on how you contact us and which services you use, we process different types of personal data from various sources.

Personal data, one of the most important terms in this context, refers to any information relating to an identified or identifiable individual. This includes, for example, name, address, telephone number, email address, etc., whether collected online or offline. The General Data Protection Regulation (GDPR) serves as the primary legal basis for data protection.

We collect much of the data we process directly from you when you use our services or get in touch with us, for example when you use our contact form. However, we also receive technical device and access data, which is automatically collected by us when you use our services. This may include, for example, information about the device you are using.

However, you are, of course, free to visit any website or use any mobile app without having to identify yourself or log in.

2. Data controller, contact person and contact details

E.Breuninger GmbH & Co, Marktstrasse 1-3, 70173 Stuttgart, Germany, is responsible for the processing of personal data in all areas. You can contact us by telephone on 0049 (0) 711 / 211 – 0 or by email at kontakt(at)breuninger.de.

If you have any questions regarding data protection at Breuninger, please contact datenschutz(at)breuninger.de.

In addition, Breuninger’s Data Protection Officer is available to assist anyone with data protection concerns and can be contacted at datenschutz(at)breuninger.de or by post at the address given above, marked ‘For the attention of the Data Protection Officer’.

If you wish to contact the relevant supervisory authority regarding a matter relating to the processing of your data, the competent authority is the State Commissioner for Data Protection and Freedom of Information, postal address: PO Box 10 29 32, 70025 Stuttgart, Germany, Tel.: 0711/615541-0, Fax: 0711/615541-15, Email: poststelle@lfdi.bwl.de. Data subjects may, however, also contact any other data protection supervisory authority.

3. Your rights as a data subject

As a data subject, you have the right to obtain information about your personal data in accordance with Article 15 of the GDPR.

If you wish to exercise your right of access or right to erasure, or any other data protection right under Articles 15–22 of the GDPR, including unsubscribing from the newsletter, etc., please contact info(at)dorotheen-quartier.de

Important note: To ensure that your data is not disclosed to third parties in response to requests for information, please enclose sufficient proof of identity with your request.

Under Article 16 of the GDPR, you may request the rectification of your data or, where the conditions set out in Article 17 of the GDPR are met, the erasure of your data. You also have the right to restrict the processing of your data, Article 18 of the GDPR. If you can demonstrate a specific personal situation, you may object to the processing of your data in whole or in part, Article 21 of the GDPR. For data that you have provided to us, you may request a copy in a commonly used format, in accordance with Article 20 of the GDPR.

You may withdraw any consent you have given us to process your data at any time. Please note that the withdrawal will only take effect from that point onwards and will not render any processing carried out prior to that time unlawful.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.

Hierfür können Sie sich an den Landesbeauftragten für Datenschutz und Informationsfreiheit wenden.

In addition, Breuninger’s Data Protection Officer is available to assist anyone affected. The contact details of the State Commissioner for Data Protection and Freedom of Information and the Data Protection Officer can be found in Section 2.

4. Legal basis for the processing of personal data

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

Where the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.

Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and where the interests, fundamental rights and freedoms of the data subject do not override those interests, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

For each of the processing operations described below, we specify the legal basis used and, where applicable, our legitimate interests.

5. Specific data processing operations

Below is an overview of the specific data processing activities:

5.1. Log data

Purposes of processing and legal basis:

When you visit our website, the browser used on your device automatically stores the following data without any action on your part:

IP address

• Date and time

• Page accessed/Name of the file accessed

• data transferred

• Notification as to whether the access/retrieval was successful

This is done in order to:

• to ensure a smooth connection,

• to ensure a user-friendly experience on our website/app

• and to assess system security and stability.

The legal basis for processing the IP address is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the purposes of data processing listed above. Where the processing serves to prepare a contract, the legal basis for data processing is Article 6(1)(b) of the GDPR.

Recipients of the data: Your data will not be disclosed to third parties.

Retention period:

Data is stored in log files for a very limited period (7 days) in order to ensure the website functions properly. We also use this data to optimise the website and to ensure the security of our IT systems.

5.2. Newsletter distribution

Purposes of processing and legal basis:

To keep you up to date with news and events relating to the Dorotheen Quartier, you can sign up for our newsletter.

To prevent errors and misuse, once you have requested the newsletter, you will first receive a confirmation email to ensure that you have indeed requested it. The newsletter will only be sent to you once you have confirmed your request.

The legal basis for this is your consent under Article 6(1)(a) of the GDPR.

Recipients of the data:

Where external processors are used to send out the newsletter, they are contractually bound in accordance with Article 28 of the GDPR.

RRetention period:

You can unsubscribe from the newsletter at any time free of charge by clicking the unsubscribe link at the bottom of each newsletter or by sending an email to info(at)dorotheen-quartier.de.

5.3. Contact form and contacting us by email, telephone or post

Purpose of data processing and legal basis:

We naturally treat any personal information you provide to us via the contact form, by telephone, by email or by post as confidential. We use your data exclusively for the specific purpose of processing your enquiry. The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard arises from our desire to respond to enquiries from our customers and visitors to this website, thereby maintaining and promoting customer satisfaction.

Recipients of the data:

We do not, as a matter of principle, disclose data to third parties outside E. Breuninger GmbH & Co. In exceptional cases, data is processed on our behalf by data processors. These are carefully selected and contractually bound in accordance with Article 28 of the GDPR.

RRetention Retention period:period:

Any personal data you provide to us via our contact channels will be deleted once we have responded to your enquiry.

6. Cookies & Tracking Technologies

To enhance your experience on our website and enable you to use certain features, we use various cookies and tracking technologies.

The following section provides further details on the different categories of cookies we use.

1. Statistics: We are committed to continuously improving the user experience on our website. To this end, we use cookies to anonymously track and analyse which features and content on our site are used most frequently and extensively, and to understand which content and products on our site are of particular interest to users.

2. Preference: These cookies enable a website to remember information that affects the way the website behaves or looks, such as your preferred language or the region you are in.

3. Marketing: These cookies are used to display adverts on websites with content tailored specifically to you, which we believe may be of particular interest to you. These cookies are used by advertising networks operated by companies that process your data as independent data controllers.

4. Essential cookies only: Essential cookies help us to ensure that our website is technically accessible and usable for you. They enable key basic functions such as website navigation, correct display in your web browser, and this consent management system. Without these cookies, our website cannot function.

You have the option of either consenting to the use of all cookies or making a specific selection.

Of course, you can also configure your web browser so that it does not accept cookies. You can usually find instructions on how to do this via your web browser’s help function. However, we would like to point out that, in this case, the functions of the Breuninger online shop may be limited.

7. Embedding YouTube videos

This website embeds content from YouTube. YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For YouTube videos embedded on our website, the enhanced privacy settings are enabled. This means that YouTube does not collect or store any information about website visitors unless they play the video.

To prevent tracking cookies from being set even when the video is played, you can prevent cookies from being stored by adjusting your browser settings accordingly – as described above; however, please note that in this case you may not be able to make full use of all the features of this website.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your privacy. YouTube’s address and privacy policy: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy/.

8. Use of social media buttons with data protection (Shariff)

If you like any of the content on this website, you can share it using the social media buttons provided.

On this website, we use privacy-friendly ‘Shariff’ buttons. ‘Shariff’ was developed by specialists at the computer magazine c’t, published by Heise Verlag, to enhance online privacy and replace the standard ‘Share’ buttons used by social networks. The standard “Share” buttons used by social networks transmit users’ personal data – such as their IP address and other activities – simply by visiting the websites on which they are used, and provide the social networks with detailed information about users’ browsing behaviour (known as user tracking). Users do not need to be logged in or members of the social network for this to happen.

Unlike standard ‘Share’ buttons, our ‘Shariff’ buttons only establish a direct connection between the social network and the user once the user actively clicks on the ‘Share’ button. Data is only transferred to the social network once the relevant pop-up window has opened. Data is therefore transferred when the user is redirected to the social network’s website. If the user is already logged in to a social network, this takes place without a further window appearing.

The number of ‘likes’ etc. can also be retrieved using the ‘Shariff’ solution. ‘Shariff’ acts as an intermediary here: instead of the user’s browser, the website operator’s server retrieves the number of ‘likes’ etc. The user remains anonymous in this process.

Using the ‘Shariff’ solution prevents you from leaving a digital trail on every website you visit, thereby enhancing data protection to the fullest extent possible with current technology. As the ‘Shariff’ solution is integrated by this website’s webmaster, you, as a user, do not need to take any further action.

For more information on the ‘Shariff’ project – the ‘Shariff’ solution is kindly made available as open-source software by c’t and heise online – please visit the c’t website (https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html).

Further information on the privacy settings of the social networks whose social media buttons are used on this website can be found in the following privacy policies of the social networks:

Facebook: https://www.facebook.com/privacy/explanation

Twitter: https://twitter.com/privacy?lang=de

YouTube: https://www.google.de/intl/de/policies/privacy/

Instagram: https://help.instagram.com/155833707900388

9. Social media profiles/pages

Purposes of our processing and legal basis:

The purpose of our data processing on our social media profiles/pages is to inform our customers about events, services, competitions, promotions and company news, and to interact with visitors to our social media profiles and our customers. The legal basis is Article 6(1)(f) of the GDPR. Data processing is carried out in the interests of representing our company on social media and responding to enquiries and comments from our customers and page visitors, thereby ensuring the satisfaction of our customers and page visitors.

The platform operator has no influence over how we process your data in the context of customer communications or competitions via our social media channels.

Recipients of the data:

We do not pass on your personal data – including any information you enter on our social media pages, such as comments, videos, images, likes, public posts, etc., which are published via the social media platform – to any third parties. We reserve the right to delete content that infringes the law or is criminally relevant/illegal, should this be necessary.

In exceptional cases, data is processed on our behalf by data processors. These are carefully selected, audited by us and contractually bound in accordance with Article 28 of the GDPR. If it is necessary to pass on your enquiry to contractual partners for processing, we will anonymise your enquiry. Should the disclosure of your personal data appear appropriate in individual cases, we will inform you of this in advance and ask for your consent. We will not disclose your data to third parties for these purposes without your consent.

RetentioRetention period:n period:

Any personal data that you send to us via our social media profiles or pages in confidence (e.g. via a private message) will be deleted once we have provided a final response to your enquiry. Any public posts you make on our social media profiles or pages will remain on the timeline indefinitely, unless we delete them due to a breach of the law or you delete the post yourself.

We have no control over any deletion carried out by the platform operator itself. Please therefore also refer to the privacy policy of the relevant platform operator.

Joint controllership, Article 26(1) of the GDPR:

We share “joint responsibility” with the platform operators of our social media profiles in certain respects, in accordance with Article 26(1) of the GDPR.
This means that Breuninger and the platform operators act as joint controllers with regard to the web tracking methods used on the social media profiles/pages. Web tracking may take place regardless of whether you are logged in or registered on the social media platform. As described, we have no influence over this.

The legal basis for the web tracking methods is the legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in optimising the social media platform and the resulting visitor experience.

10. Updates to this privacy policy

Breuninger reviews its privacy policy regularly and will update it as necessary. We will inform you (for example, on our website) of any changes to this privacy policy that are relevant to you.