data protection

PRIVACY POLICY
Chapter 1: Scope and overview

Chapter 2: Person responsible, contact person and contact details

Chapter 3: Your rights as a data subject

Chapter 4: Overview of data processing at Aleri GmbH

4.1 Log data

4.2 Newsletter dispatch

4.3 Customer account in the online shop

4.4 Processing of orders

4.5 Customer reviews

4.6 Recognition

4.7 Analysis and marketing

Chapter 5: Cookies & tracking technologies

5.1 Pinterest

5.2 Meta

5.3 Google Ads

5.4 Snapchat

Chapter 6: Social Media Profiles/Pages

Chapter 7: Data security

Chapter 8: Updating this Privacy Policy

Aleri Gmbh takes the requirements of data protection and data security of your personal data very seriously. We are aware that the trust of our customers is an essential feature of the customer relationship and our business success and we want to live up to this trust by fulfilling our information obligations as best as possible.

To make it easier for you to read, we have decided to present the information in chapters. This should give you the opportunity to either get a quick overview of all data processing and your rights in this regard, or to find out more about how Aleri GmbH handles your personal data.

If you have any questions about data protection at Aleri GmbH, you can contact info@aleridesign.com. If you would like to exercise your right to information or data deletion or any other data protection right in accordance with Art. 15-22 GDPR, including revoking consent for marketing purposes, unsubscribing from the newsletter, etc., please contact customer service.

Further information on this can be found in the chapters Your rights as a data subject and controller, Contact persons and Contact details.

Chapter 1: Scope and overview
This privacy policy explains to you the extent to which we collect and process personal data when you visit our websites, as well as in various other areas, for what purposes it is used, who the recipients of the data are and when it is deleted. The way in which we process your data is similar for most of our offers. Please note that which data is processed in detail and in what way it is used depends largely on which services you use and which country you are in. Therefore, not all parts of this privacy policy are
Information applies to you.

This privacy policy applies to the online portal www.aleridesign.com operated by Aleri GmbH.

Chapter 2: Person responsible, contact person and contact details
Aleri GmbH, Künische Str. 2, 93059 Regensburg, Germany is responsible for the processing of personal data in all areas. You can reach us by email at info@aleridesign.com.

If you have any questions about data protection at Aleri GbmH, please contact info@aleridesign.com.

In addition, the company data protection officer of Aleri GmbH is available to any data subject and can be reached at info@aleridesign.com or by post at the address given above with the addition “Attention of the Data Protection Officer”.

Chapter 3: Your rights as a data subject
As a data subject, you have the right to receive information about the personal data concerning you in accordance with Art. 15 GDPR.

If you wish to exercise your right to information or data deletion or any other data protection right under Art. 15-22 GDPR, including revoking consent for marketing purposes, unsubscribing from the newsletter, etc., please contact customer service.

Important note: To ensure that your data is not disclosed to third parties in case of requests for information, we may ask you for further
Request proof of identity. Please include sufficient proof of identity with your request when submitting your application to enable quick processing.

According to Art. 16 GDPR, you can correct your data or have it deleted if the requirements of Art. 17 GDPR are met. You also have the right to restrict the processing of your data, Art. 18 GDPR. If you can assert a special personal situation, you can object to the processing of your data in general or in part, Art. 21 GDPR, provided that the data processing is based on Art. 6 Para. 1 lit. e or f GDPR. In addition, you have the right to data portability under the conditions of Art. 20 GDPR.

You can revoke any consent you have given us for the processing of your data at any time. Please note that the revocation will only take effect for the future
effective and that processing that has taken place previously does not become unlawful as a result.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.

For this purpose, you can contact the State Commissioner for Data Protection and Freedom of Information of the State of Bavaria.

Chapter 4: Overview of data processing at Aleri
Aleri offers you a wide range of offers that you can use in a variety of ways. Depending on how you contact us and which
Offers you use, we process different personal data from various sources.

Personal data, as one of the most important terms, means all information relating to an identified or identifiable
Person. This includes, for example, name, address, telephone number, email address, ordered goods, payment details, etc., whether collected online or offline.
The General Data Protection Regulation (GDPR) in particular serves as the legal basis for data protection.

We collect much of the data we process from you when you use our services or contact us, for example when you
register and provide your name, email address or address. We also receive technical device and access data that we automatically collect when you use our services. This may include, for example, information about which device you are using.
We collect additional data through our own data analyses (e.g. as part of market research studies and through click and link profiling). We may also receive data about you from third parties, for example from credit agencies and payment service providers.

However, you can of course visit all websites without identifying yourself or logging in.

4.1 Log data
Purpose of processing and legal basis:

When you access our websites and individual services, the following data is processed automatically and without your intervention:

IP address (partially shortened)

Private Access Token (in certain cases and if available)

Date and time of call

Details about protocol version, referrer, HTTP method, user agent string

page accessed/name of the retrieved file and amount of data transferred

Message whether the access/retrieval was successful

This is done to:

to ensure a smooth connection setup,

To direct you, where possible, to the correct language version of our website

to enable convenient use of our websites/applications

and to ensure and evaluate system security and stability.

The legal basis for the processing of the above data is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the presentation serves to prepare a contract, the legal basis for data processing is Art. 6 Para. 1 lit. b GDPR.


Recipient of the data:

Your data will not be passed on to third parties.

Storage period:

The log files are stored for 14 days, in exceptional cases 30 days, to ensure the functionality of the website.

4.2 Newsletter dispatch
Purpose of processing and legal basis:

We offer you a personalized newsletter service as part of your customer relationship, but also independently of registration or ordering goods.

We use your personal data to send you tailored information about products, promotions, events and news from the fashion and lifestyle sector, as well as information about product data from your favorites list and your shopping cart and to send you recommendations for a product you are looking for in the service emails of the reavailability notification.

The data processing includes the following data:

Your contact details such as title and email address

Your purchase and order data for sending the satisfaction bonus

Your date of birth for our annual birthday mailing or interest-based newsletter address, if you have provided your date of birth

Your affinities (online/offline, preferred store, product range, favorites) based on your purchase and order data

Your online usage behavior in order to send you personalized content in the newsletter based on your interests, provided that you have consented to corresponding cookies, see chapter Cookies & Tracking Technologies

Your country of origin and gender

General click behaviour, i.e. whether and when you have opened our newsletter and your click behaviour in the newsletter, i.e. whether and when you click on which
Information in the newsletter to send you information about products and services that may be of interest to you.

Device tracking, i.e. we record the device with which you opened the newsletter, as well as the operating system

Product details of your shopping cart if you have not completed the purchase. We will send you an email reminder and information about items
in your shopping cart, e.g. about their availability, price changes or corresponding offers

Product information from your favorites list. We will send you an email reminder and information about items on your favorites list, such as their
Availability, price changes or related offers

The legal basis for the above-mentioned data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

In order to prevent errors and misuse, you will first receive a confirmation email upon your newsletter request, which is intended to ensure that you
have actually requested the newsletter. The personalized newsletter will only be sent to you after you have confirmed.

Storage period:

You can unsubscribe from the newsletter at any time using the unsubscribe link at the end of each newsletter. You can unsubscribe from promotional emails in the same way.
at any time with future effect.

Alternatively, you can contact customer service by email.

After unsubscribing from the newsletter, the email service provider deletes response data at contact level after two months. The email address is retained for three months after unsubscribing and then anonymized. Anonymized contacts are deleted after one year.

4.3 Customer account in the online shop
Purpose of processing and legal basis:

In order to provide you with the greatest possible convenience when shopping, we offer you the permanent storage of your personal data in a
password-protected Aleri customer account. This opens up various possibilities for you, e.g. being able to track the shipping of the ordered goods and view My Account information, and view the purchases you have made.

When you register, we ask you to provide various information that is necessary for the customer relationship.

The legal basis for this is Art. 6 (1) (b) GDPR, i.e. we process this data on the basis of the contractual relationship or to carry out pre-contractual measures.

Otherwise, we process the data you provide on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR), such as the clear identification of the respective customer as part of the credit check, any advertising objections and deletion requests, to improve the enforceability of claims, the definition and implementation of target group-specific and other marketing measures (e.g. birthday mailings).

Recipient of the data:

The data will not be passed on to third parties.

Storage period:

If you request the deletion of your customer account, your data will be deleted accordingly.

4.4 Processing of orders
Purpose of processing and legal basis:

The aim of our online shop is to offer you, as a customer of Aleri GmbH, goods, services and gift cards for distance selling. In this context, we process the data required for the conclusion, implementation or termination of a contract. This includes in particular:

First name Last Name

Billing and delivery address

E-mail address

Billing and payment data

IP address

The legal basis for this is Art. 6 (1) (b) GDPR, i.e. we process this data on the basis of the contractual relationship or to carry out pre-contractual measures.

Otherwise, we process the data you provide on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR), such as the control of possible payment methods, the clear identification of the respective customer as part of the credit check, any advertising objections and deletion requests, to improve the enforceability of claims, fraud prevention and the definition and implementation of target group-specific and other marketing measures.

Recipient of the data:

As part of the data processing mentioned above, your data will be processed on our behalf by contract processors, in particular from the communications, logistics and transport sectors. These are carefully selected and, where required by law, contractually bound in accordance with Art. 28 GDPR.

In order to process payments for you, we use the services of payment service providers. These are listed on our website under payment methods.

These companies receive the necessary data from us to process their contractual payment obligations.

In order to control the possible payment methods, individual data, such as first and last name, date of birth, IP address and address, are transmitted to CRIF GmbH.

In addition, Aleri grants the statutory right of cancellation for online purchases. Data about the returned goods is collected and stored by Aleri in this context.
Aleri is entitled to protect the legitimate interests of Aleri or third parties to avoid excessive returns in accordance with Art. 6 (1) lit. f GDPR, to transfer this data to
CRIF to take into account when offering payment methods. Aleri evaluates this data and approaches customers with high return rates with the aim of finding a solution that is satisfactory for both parties.

Storage period:

Unless we use your contact details for advertising purposes, we store the data collected for contract processing until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period, we retain the information required by commercial and tax law for the contractual relationship for the legally specified periods. During this period (usually ten years from the conclusion of the contract), the data is only processed again in the event of an audit by the tax authorities and in the event of customer enquiries. All information that is not relevant to tax is deleted once the purpose no longer applies, in the case of communication histories after 36 months at the latest.

4.5 Customer reviews

Purpose of processing and legal basis:

As our customer, you will receive regular invitations, e.g. to evaluate your last order and returns, within the framework of the legal requirements and regardless of whether you register to participate in customer surveys and market and opinion research, unless you have already objected to this in the past. We use your personal data for a target group-specific evaluation and to derive strategic measures to make your future shopping experience even more pleasant.

The data processing includes the following data:

Your contact details such as title and email address

Country of origin, gender and age

Your purchase and order data as well as your affinities (e.g. online/offline, preferred store, product range) based on your purchase and order data

General click behavior, i.e. whether and when you opened our feedback invitations or whether you fully completed a survey

Device tracking, i.e. we record the device with which you opened our feedback invitation as well as the operating system

The legal basis for the invitation for purchase-related feedback is Art. 6 (1) lit. f GDPR, our legitimate interest.

Recipient of the data:

The information we collect as part of purchase-related feedback is for internal use only.

Storage period:

The survey results are evaluated anonymously. If you provide your personal data (e.g. telephone number for callback) as part of a survey, this will be deleted after 18 months at the latest. All other personal data (e.g. email address for the invitation to the survey) will be deleted after three years at the latest.

You can unsubscribe from purchase-related feedback in accordance with Section 7 Paragraph 3 of the German Unfair Competition Act at any time free of charge by using the unsubscribe link at the end of the email or by sending a message to customer service.

4.6 Recognition
Purpose of processing and legal basis:

When you log in to our website, the following data is stored automatically and without your intervention:

IP address

Date and time of call

User agent string

Login route

Origin of the request

cid-Cookie

On the client side, only the cid cookie is stored.

This is done to recognize devices and networks on the server side and to detect and prevent attempts at third-party access. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest is to detect and prevent malicious actions and third-party access on our website and among our website visitors.

Recipient of the data:

Your data will not be passed on to third parties.

Storage period:

The data is stored for one year after the last login with the corresponding device/network.

4.7 Analysis and marketing
Purpose of processing and legal basis:

If you have a customer account or have subscribed to our newsletter and have given us your consent for one of the services mentioned, we will use your data for the following purposes to which you have consented:

Merging of personal data from the aforementioned services, other data and data from third parties

Analyses

Sharing your personal data/user profiles with selected marketing partners

Aleri uses the following data to link them together:

Your email address and other master data (such as gender (title), name, address, date of birth),

Your purchasing behavior (online and offline),

Your interactions and online user behavior

on our website, provided you have agreed to the corresponding categories in the consent layer, if applicable on third-party platforms and websites,

and your interaction with our advertisements.

The exact categories of personal data that we process can be found in the relevant chapters of our privacy policy:

Customer account in the online shop
Newsletter distribution

Cookies & Tracking Technologies

We use your data to create pseudonymized user profiles, to derive target groups and to carry out analytical evaluations. We also use your data for other marketing purposes, in addition to our own analysis tools, to use advertising analysis solutions from third parties such as Facebook or Google to compare your purchasing behavior with target group profiles contained in our databases. This enables us to show you digital advertisements on platforms such as Google, Facebook, YouTube, etc. as well as on other websites that you visit. In addition, it helps us to understand and analyze your purchasing behavior online and offline, your interests and interactions in order to show you interest-based and personalized content on our website or on third-party websites and to improve our marketing and advertising strategies.

With your consent, we may also share your personal data and/or pseudonymous user profiles and target group segments in a secure manner and under appropriate safeguards with carefully selected marketing partners in order to design, manage or optimize our advertising campaigns.
Our partners may be based outside the EU/EEA, where the level of data protection may not be comparable to that in the EU/EEA.
Data transfer to the USA takes place on the basis of the EU-US Data Privacy Framework. Data transfers to unsafe third countries are based on concluded EU standard contractual clauses and the corresponding measures taken.

The legal basis for the creation of user profiles, the transfer of your personal data to selected partners, as well as analysis and marketing purposes is your consent in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent for the future at any time by contacting Aleri customer service. Even after revoking your consent, you may still randomly see advertisements on Aleri's social media platforms and third-party websites.

The revocation will have no negative impact on the retention of your customer account or the receipt of our newsletter.

Recipient of the data:

In the event that personal and pseudonymized data is passed on to selected partners, your data will be passed on to onboarding partners, analysis tools, paid and social media platforms, customer data platforms and data management platforms, as well as, if applicable, other partners that Aleri uses to fulfill the purposes. The partners used are contractually obliged in accordance with Art. 28 and, if applicable, Art. 26 GDPR, as well as to comply with suitable guarantees in accordance with Art. 44 GDPR.

Storage period:

In principle, we process your personal data for as long as stated in the individual chapters of our privacy policy. We store the user profile created for 2 years in the event of inactivity.

Chapter 5: Cookies & tracking technologies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages.
Cookies are small text files that are stored on your device and store certain settings and data for exchange with our system via your browser.

Which cookies are set in detail and which personal data are subsequently processed depends largely on the type and extent of use of our website and the consent you have given. We operate internationally in various European countries. In individual countries, the services offered on our websites and thus the consent offered with regard to data processing and the use of cookies may differ. Therefore, not all parts of this information will apply to you.

When using cookies, we observe the applicable national requirements for obtaining consent on each of our country-specific websites: in Germany Section 25 TTDSG, in Austria Section 96 Para. 3 TKG, in Switzerland Art. 45c FMG and in Poland Art. 173 and Art. 174 Polish Telecommunications Act.

The individual categories of cookies we use are explained in more detail below.

Analysis & statistics: We want to constantly improve the user-friendliness of our website, which is why we use cookies that anonymously or pseudonymously measure and evaluate which functions and content of our site are used particularly often and frequently, and to understand which content and products on our site are particularly interesting for users. The query of your data is based on Art. 6 Para. 1 lit. a GDPR (consent).

Advertising: These cookies and other technologies are used to show you advertising on pages on the Internet with content tailored specifically to you, which we believe may be particularly relevant to you. These cookies use advertising networks of companies that process your data as an independent responsible body. The query of your data is based on the legal basis of Art. 6 Para. 1 lit. a GDPR (consent).

Functional cookies: Functional cookies improve the user experience when you visit our website and control how our website is displayed for you. We also use these cookies to display our products and content to you so that shopping on our website is as comfortable and convenient as possible for you. Your data is requested on the legal basis of Art. 6 Para. 1 lit. a GDPR (consent).

Required cookies: Required cookies help us to make our website technically accessible and usable for you. Essential basic functionalities such as navigation on the website, correct display in your internet browser or consent management via the consent layer are enabled. Our website cannot function without these cookies. Furthermore, the cookies help us to offer you certain services on our website that you can normally expect when visiting a fashion shop and to offer you a tailor-made user experience on our website. The query of your
The processing of data is based on Art. 6 (1) (f) GDPR (legitimate interest), as we assume that it is in your interest that our website is usable for you and that you consider certain services to be required on our website.

You have the option of either agreeing to the use of all cookies or rejecting them and making individual selections. Excepted from this are the required cookies that are necessary for the display of the website.

Of course, you can also set your Internet browser so that it does not accept cookies. You can usually find information on how to do this using the help function in your Internet browser. However, we would like to point out that in this case the functions of the Aleri online shop may only be available to a limited extent.


5.1 Pinterest

We use the retargeting and conversion technology of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) on our website, which enables us to show you, who are already interested in our website and our content/offers and are a Pinterest member, relevant advertising and offers on Pinterest. For this purpose, a so-called Pinterest conversion tracking and retargeting pixel and the Pinterest API are integrated into our pages, which informs Pinterest when you visit our website that you have visited our website and which parts of our offer you are interested in (retargeting).

If you have accessed our website via a Pinterest ad or another route, we and Pinterest can recognize that you have clicked on an ad, were redirected to the website and reached a previously determined landing page (conversion site) that was linked via the ad and whether you have, for example, made or performed a purchase or other services that were defined as a conversion.

If you have agreed to the use of the Pinterest pixel, your browser will automatically establish a direct connection to the Pinterest server via this pixel.
The Pinterest API provides a server-to-server connection between our web server and Pinterest's servers. To transmit data via the Pinterest API, we temporarily store your data on our servers.

For the processing of so-called event data, ad measurement and reporting, we have concluded a joint responsibility agreement with Pinterest in accordance with Art. 26 GDPR. Pinterest uses this data to show its users targeted and personalized advertising and to create interest-based user profiles. In addition, Pinterest processes your data to measure the effectiveness of ads, to serve ads, to create reports, to improve security on Pinterest, for research purposes, for product development and to create aggregated and anonymous measurements of the use of Pinterest's advertising service, e.g. to calculate the total number of conversions to which Pinterest has contributed. These measurements do not identify you.

Pinterest also states that created retargeting audiences are only used to provide the advertising service on the social network and that Pinterest does not use the audiences for any other purposes.

The data collected is anonymous and not visible to us and is only used by us to measure the effectiveness of advertising. Each controller is responsible for its part of the processing with regard to the legal basis, the security of the joint processing and the violations of the protection of personal data in connection with the joint processing.

Aleri assumes the information obligations for the processing of personal data.

If you are registered with Pinterest, Pinterest can assign the visit to your account. Even if you are not registered with Pinterest or are not logged in
If you have logged in, there is a possibility that the provider will find out and save your IP address.

When you use our website, Pinterest collects in particular the IP address, device information, browser information, location information, usage data, user behavior, pixel ID, mobile advertising ID (IDFA/GAID), hashed email address, interaction with advertising materials, interaction with products, interactions with
Website services, viewed advertisements and online shop content are processed.

Your data will be stored on servers in the USA until it is no longer required for processing purposes. Your data will not be passed on to third parties outside the Pinterest network. The transmission of your data to servers in the USA takes place on the basis of the Pinterest Europe Controller-to-Controller Data Sharing Addendum.

You can object to the collection and storage of data at any time with effect for the future by going to the data protection settings on our website, removing the check mark under advertising on Pinterest, updating the description of your personalization settings on Pinterest or visiting the AdChoices website for data processing via the Pinterest pixel.

For further details on data processing, please refer to Pinterest’s privacy policy

5.2 Meta (formerly Facebook)

We use the retargeting and conversion technologies of the social network "Facebook" of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Meta") on our website, which enables us to show users who have already shown an interest in our website and our content/offers and are Meta members, relevant advertising and offers on Meta. For this purpose, the so-called "Facebook pixel" and the Meta conversion API are integrated into our pages, via which Meta is informed when you visit our website that you have accessed our website and which parts of our offer you have registered for.
were interested in (retargeting). If you came to our website via a Facebook ad or another way, we and Meta can recognize that you clicked on an ad, were redirected to the website and reached a previously determined landing page (conversion site) that was linked via the ad and whether you made or performed a purchase or other services that were defined as a conversion.

If you have agreed to the use of the Facebook pixel, your browser will automatically establish a direct connection to the Meta server via this pixel.
The Conversion API provides a server-to-server connection between our web server and Meta's servers. For the transmission of data via the Conversion API, we temporarily store your data on our servers. We have no influence on the scope and further use of the data collected by Meta through the use of these tools other than for the purposes mentioned and therefore inform you according to our level of knowledge: By integrating the technologies, Meta receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with Meta, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, there is a possibility that Meta will use the
Facebook Pixel finds out and stores your IP address.

When you use our website, Meta processes in particular the IP address, Facebook user ID, mobile advertising ID (IDFA/GAID), hashed email address, device information, browser information, location information, usage data, user behavior, marketing information, interaction with advertising materials, interaction with products, interaction with website services, viewed advertisements and online shop content.

Your data will be stored on servers within the EU until it is no longer required for processing purposes and will not be passed on to third parties outside the Meta network. A transfer to a third country in accordance with the GDPR, such as the USA, may take place within the Meta network. The transfer of your data to servers in the USA takes place on the basis of the Meta Page Controller Addendum, the Meta Data Processing Conditions, the Meta EU Data Transfer Addendum, the Meta Addendum for Controllers and the EU standard contractual clauses concluded between Meta Platforms Ireland Ltd. and Meta Platforms LLC, USA.

The data transfer to Meta Platforms Ireland Ltd. takes place within the framework of joint responsibility according to Art. 26 GDPR for the aforementioned processing.
Each controller is responsible for its part of the processing with regard to the requirements of the legal basis, the security of the joint processing and the breaches of the protection of personal data in connection with the joint processing.

Aleri assumes the information obligations for the processing of personal data.

Both controllers are independently responsible for granting your data subject rights.

You can object to the collection and storage of data at any time with effect for the future. To object to the collection and storage of your data for the future, click here.

For further details on data processing, please refer to Meta’s privacy policy.

5.3 Google Ads

We use technologies from Google (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland) as an independent controller on our website. This includes Google Conversion Tracking and Google Retargeting (collectively Google Ads).

For Google Conversion Tracking, we use the Google Pixel as well as the Google Enhanced Conversion and Consent Mode functions. We only use all functions if you have given us your consent to Google Ads.

If you have reached our website via a Google ad, Aleri and Google can recognize that someone has clicked on an ad, been redirected to the website and reached a previously determined landing page (“conversion site”). Furthermore, Google and we can see that you have accessed the website via another route and have made/performed a purchase or service that was defined as a conversion. In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures were by measuring the success of certain parameters, such as the display of the ads or clicks by you, and optimize them accordingly. In order to increase the accuracy of our conversion measurement, we also use Google Enhanced Conversion Tracking. For this purpose,
We transmit hashed first-party conversion data such as your hashed email address to Google via the Google Ads API, which means that Google itself has no direct access to input fields and corresponding data on our website. Google checks the hashed Aleri data against Google user data. If there is a match, a conversion is reported to the Aleri Google account, which helps us optimize our advertising measures. In addition, we use Google's Consent Mode for partial modeling of conversions. We do not use Consent Mode to control Google tags on our website. Due to the technical implementation, no further personal data is processed using Consent Mode and, like the other functions, it is only used if you have given your consent.
have given their consent to Google Ads.

We do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, and in particular we cannot identify users based on this information.

In addition, Google retargeting technology is used, whereby information about your user behavior on our website is collected and stored. This data is stored in cookies on your computer and read by Google. The cookies enable Google to collect, process and use information from the
Cookies from which usage profiles are created using pseudonyms. These usage profiles are used to analyze your visitor behavior on our website and are used to display advertisements in order to show you relevant and personalized content on external websites that appears interesting to you based on your user behavior on our website.

Due to the marketing tools used, your browser sometimes automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our current level of knowledge:
By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

When you use our website, Google processes in particular the IP address, cookie ID, mobile advertising ID (IDFA/GAID), pixel ID, hashed email address, device information, browser information, location information, usage data, user behavior and user agent.

Your data will be stored on servers within the EU and will not be passed on to third parties outside the Google network. A transfer to a third country in accordance with the GDPR, such as the USA, may take place within the Google network. The transfer of your data to servers in the USA takes place on the basis of concluded EU standard contractual clauses.

Log data is anonymized after nine months and cookie information after 18 months. If there is no match via Enhanced Conversion, Google deletes this data after 48 hours. Otherwise, the data is deleted as soon as the purpose of processing has been fulfilled.

You can object to the collection and storage of data at any time with future effect by clicking here.

For further details on data processing, please refer to Google’s privacy policy.

5.4 Snapchat

We use the retargeting and conversion technology of the social network Snapchat (Snap Inc., 3000 31st Street, Santa Monica, California 90405, USA) on our website, which enables us to show relevant advertisements on Snapchat to users who have already shown an interest in our website and our products and are Snapchat members. For this purpose, a so-called retargeting pixel and the Snapchat Conversion API are integrated into our website, via which Snapchat
When you visit our website, you are informed that you have accessed our website and which parts of our offering you are interested in (retargeting).
If you came to our website via a Snapchat ad or another way, we and Snapchat can recognize that you clicked on an ad, were redirected to the website and reached a previously determined landing page (conversion site) that was linked via the ad and whether you, for example, made or performed a purchase or other services that were defined as a conversion.

Due to the marketing tool used, your browser automatically establishes a direct connection to the Snapchat server. The Conversion API represents a server-to-server connection between our web server and the Snapchat servers. For the transmission of data via the Conversion API, we temporarily store your data on our servers. We have no influence on the scope and further use of the data beyond the stated purposes that are made possible by the use of these tools by
Snapchat and therefore inform you according to our current knowledge: By integrating Snapchat, Snapchat receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with Snapchat, Snapchat can assign the visit to your account. Even if you are not registered with Snapchat or have not logged in, there is a possibility that the provider will find out and save your IP address.

When you use our website, Snapchat collects in particular the IP address, hashed email address, device information, browser information,
Location information, usage data, user behavior, pixel ID, mobile advertising ID (IDFA/GAID), interaction with advertising materials, interaction with products, interactions with website services, viewed advertisements and online shop content are processed.

Your data will be stored on servers in the USA until it is no longer required for processing purposes. Your data will not be passed on to third parties outside the Snapchat network. The transfer of your data to servers in the USA takes place on the basis of the Data Processing Agreement, the Business Service Terms and the EU standard contractual clauses between Aleri and Snap Inc, USA.

Snap Inc. processes the personal data for the purposes mentioned above as a processor of Aleri on the basis of a closed
Order processing agreement according to Art. 28 GDPR. Aleri assumes the information obligations for the processing of personal data that is processed when visiting the Aleri website. Snap Inc. is responsible for data processing within the framework of a Snap account and assumes all corresponding information obligations.

Both controllers are each independently responsible for granting your data subject rights for the processing operations mentioned in the previous paragraph.

You can object to the collection and storage of data at any time with effect for the future. To object to the collection and storage of your data for the future, click here or go to the privacy settings on our website and remove the check mark in the Snapchat advertising section.

Chapter 6: Social Media Profiles/Pages
Purposes of our processing and legal basis:

Aleri runs social media profiles/pages on Facebook, Instagram, Pinterest, YouTube, TikTok and Snapchat.

The purpose of our processing on our social media profiles/pages is to inform our customers about goods, offers, events, services, promotions, competitions, company news and interaction with visitors to the social media profiles and our customers. The legal basis is Art. 6 Para. 1 lit. f GDPR. The data processing is carried out in the interest of our company, to represent Aleri as a company in social media, for marketing purposes and to answer the inquiries and comments of our customers and site visitors and thus to achieve the satisfaction of our customers and site visitors.

The platform operator has no options to prevent us from processing your data in the context of customer communication or competitions via our social media presences.
of influence.

Recipient of the data:

We do not share your personal data, i.e. the data you enter on our social media pages such as comments, videos, images, likes, public messages, etc. that are published through the social media platform, with third parties. We only reserve the right to delete content that violates the law or is criminally relevant/illegal if this should be necessary.

If you contact us, for example, via a private message function on our social media channels regarding your customer relationship, purchases made, etc., this data will only be passed on internally to our customer service. In exceptional cases, data will be processed on our behalf by contract processors. These are carefully selected, audited by us and contractually bound in accordance with Art. 28 GDPR. If it is necessary to pass on your request to contractual partners (e.g. manufacturers in the event of complaints) for processing, we will anonymize your request. If the passing on of your personal data appears to be expedient in individual cases
we will inform you of this in advance and ask for your consent. We will not pass your data on to third parties for these purposes without your consent.

Storage period:

All personal information that you send to us confidentially via our social media profiles/pages (e.g. as a private message) will be deleted after your request has been finally answered. All public posts by you on our social media profiles/pages will remain in the timeline indefinitely, unless we delete them due to a legal violation or you delete the post yourself.

We have no way of influencing deletion by the platform operator itself. Please therefore also note the data protection information of the respective platform operator, Facebook, Instagram, TikTok, LinkedIn, Xing, YouTube, Pinterest, Snapchat.

Joint responsibility, Art. 26 Para. 1 GDPR:

There is a partial "joint responsibility" with the platform operator of our social media profiles in accordance with Art. 26 Para. 1 GDPR. This means that Aleri and the platform operators act as joint controllers with regard to the web tracking methods used on the social media profiles/pages. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As described, we have no influence on this (e.g. to prevent advertising tracking by the platform providers). With regard to Facebook and Instagram, an adequate level of data protection cannot be assumed due to processing in the USA. There is a risk that government authorities will access the data for security and surveillance purposes without you being informed or being able to take legal action. Please note this.

Chapter 7: Data security
We maintain technical and organizational measures to ensure data security, in particular to protect your personal data from risks during data transmission and from being accessed by third parties.

These are always adapted to the current state of the art. If you enter personal data on our website, it will be encrypted using an encryption protocol during transmission.

Chapter 8: Updating this Privacy Policy
Aleri reviews the privacy policy regularly and will update it as necessary. We will inform you (for example on our website) about any changes to this privacy policy that are significant to you.

Date: 01.02.2024