This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data or sensitive content, such as orders or enquiries to the data controller. You can recognise an encrypted connection by the "https://" and padlock icon in your browser bar.

In accordance with Art. 13 GDPR, we inform you here about the legal bases for the data processing we perform. The following applies unless the legal basis is explicitly stated below in the Privacy Policy: The legal basis for obtaining consent is formed by Art. 6 (1)(a) and Art. 7 GDPR. The legal basis for processing in order to fulfil our services and implement contractual measures is formed by Art. 6 (1) (b) GDPR. The legal basis for processing in order to fulfil our legal obligations is formed by Art.  6 (1) (c) GDPR and the legal basis for safeguarding our legitimate interests is formed by Art.  6 (1) (f) GDPR.

If you merely use our website for informative reasons, i.e. you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you what to view our website, we collect the following information as a technical requirement for us to be able to display our website to you and guarantee stability and security (legal basis formed by Art. 6. (1) (1) (f) GDPR:

• IP address
• Date and time of access
• Time zone difference to Greenwich Mean Time (GMT)
• Content of your request (specific page)
• Access status/HTTP status code
• Volume of data transferred in each case
• Website from where the request came
• Browser
• Operating system and its interface 
• Language and version of the browser software 

In addition to the aforementioned data, cookies are stored on your computer. Cookies are small text files that are stored on your computer specific to the browser you are using and provide the party setting the cookie (in this case, us) with certain information. Cookies cannot run programs or transmit viruses to your computer. We use cookies to make our offering more user-friendly and effective as a whole.

Temporary, session or transient cookies are cookies which are deleted after a user leaves the online offering and closes their browser. Permanent or persistent are cookies that remain stored on the user's computer even after the browser is closed. This allows the login status to be saved, for instance, for when the user revisits the websites after a period of several days. Likewise, the interests of users can be stored in a cookie of this type, which is then used, for instance, to measure reach or for marketing purposes.

We use both temporary and permanent cookies so that we can identify you on subsequent visits if you have an account with us.  Otherwise you would have to log in again every time you visit our website.

You can configure your browser settings based on your preferences and, for example, refuse to accept third-party cookies (from providers other than the party responsible for operating the website) or all cookies in general. We would like to point out that eventually you may not be able to use all the features of this website as a result.

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. This usually means that you will have to provide additional details about yourself which we use to provide the relevant service and to which the aforementioned data processing principles apply.

If we use contracted service providers for individual functions of our offering or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes.

Some of our applications use what is referred to as geolocation, i.e. the assignment of a user process to the call location. This takes place exclusively on the basis of the anonymised IP address and only up to geographical level. In no way can conclusions be drawn about a user's actual place of residence from the geographical information obtained in this way.

Establishing Contact
When establishing contact with us (e.g. over our contact form, by e-mail, telephone or social media), the information you provide is processed exclusively for the purpose of processing the contact request. The legal basis for processing the data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) (f) GDPR.

Your data will be deleted once we have finally processed your enquiry. This will be the case if it can be inferred from the circumstances that the matter in question has been finally clarified, provided that no statutory retention requirements stand in conflict.

Using our web shop
If you would like to place an order in our webshop, we need your master and communication data for us to able to process your order. By master data we mean your name, address and date of birth. We need your date of birth to ensure that you are over 18 years and to distinguish between duplicate names. By communication data, we mean your e-mail address and, if provided voluntarily, your telephone number. We will only use your telephone number for queries from our Customer Service Dept. when processing the contract and not for marketing purposes. Processing here is based on Art.  6 (1) (1) (b) GDPR (contract fulfilment). If you place an order in our online shop, the collection of your e-mail address is legally necessary in order to be able to send you an electronic order confirmation and is therefore required in accordance with Art. 6 (1) (1) (c) GDPR.

We process the data you provide in order to process your order. To do so we may pass on your payment data to our payment service providers. The legal basis for this is formed by Art. 6 (1) (1) (b) GDPR.
We can also process the data you provide in order to inform you about other interesting products from our range or to send you e-mails containing technical details.

You also have the option to create a password-protected customer account on a voluntary basis through which we can save your data for future purchases. When you create an account under "My Account", the data you provide is stored revocably. You can manage and change your data yourself here and also view your order history.

Commercial and tax law requirements oblige us to store your address, payment and order data for a period of 10 years. However, we restrict processing after a period of two years. That means  that your data will only be used in order to comply with legal obligations.

In order to prevent unauthorised access to your personal data by third parties, in particular financial data, the order process is encrypted using TLS technology.

We also process order data (including e-mail address) for guest orders in order to analyze purchasing behavior and improve our offer. This is done on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Data is not passed on for advertising purposes.

Newsletter and news services
With your consent and independent of a contract settlement, you can subscribe to our newsletter which informs you about current and interesting offers at our company.

We use the double Opt-in procedure for subscribing to our newsletter. This means that after you subscribe, we send an e-mail to the e-mail address your provide and ask you to confirm that you wish to receive the newsletter. If we do not receive confirmation of your subscription within 48 hours, your information is automatically deleted. We also store your IP addresses and the times when you subscribed and confirmed your subscription. The purpose of this procedure is to prove that you subscribed and, if necessary, to clarify any possible misuse of your personal data.

The only requirement for sending the newsletter is an indication of your e-mail address. and, in order to be able to address you personally, your first and surname as well. The use of a real name is not compulsory and pseudonymous use is possible. Once you have confirmed your subscription, we save the data you provide for the purpose of sending you the newsletter. The legal basis  is formed by Art.  6 (1) (1) (a) GDPR.

You can revoke your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can declare this by clicking on the link provided in each newsletter you receive, by sending an e-mail to datenschutz@thomassabo.com or by sending a message to the contact details provided in the Legal Notice.

To send the newsletter, THOMAS SABO uses the Salesforce Marketing Cloud service, which is operated by Salesforce.com Inc, Salesforce Tower @ 415 Mission Street, 3rd Floor, San Francisco, California, CA 94105, USA.

In order to make our newsletter even more interesting for you in the future, we use standard market technologies such as cookies or tracking pixels in our newsletter. We evaluate the clicks you make in newsletters using what are referred to tracking pixels, i.e. invisible image files and also personalised links and embedded links (link wrapping). They are assigned to your e-mail address and are linked to their own ID so that clicks in the newsletter can be clearly assigned to you. The user profile is used to tailor the offering and our services to your interests. The legal basis for this is formed by Art.  6 (1) (1) (a) GDPR. We take your cookie settings into account.

We also use certain data (e.g. gender, postcode, VIP status) to segment or personalise our newsletter accordingly. The legal basis for this is our legitimate interest according to Art. 6 (1) (1) (f) GDPR.

Competitions
If you participate in a competition we run, we will process your data insofar as it is necessary for staging the competition. If required, we will obtain separate consent from you for the additional processing of your data within the framework of the competition.

The data collected for the purpose of participation will be deleted after the competition has ended, unless you have consented to its further processing.

The legal basis for processing personal data here is Art. 6 (I) (a) (separate consent) and Art. 6 (I) (b) EU GDPR.

Job Applications
You can apply online for a position of employment at THOMAS SABO over our application portal. Your online application is forwarded directly to our HR department over an encrypted connection and is treated confidentially in all cases. We will only use your details to process your application and will not disclose them to third parties outside the Group.

Please refer to the Privacy Policy of our application portal for further information on data processing as a part of the application process. If you have applied for a specific position and it has already been filled or if we consider you equally or even more suitable for another position, we will be more than happy to forward your application within the company. Please let us know if you do not agree to this. Your personal data will be deleted immediately after the application process has been completed, or after a maximum of 6 months, unless you have given us your express consent to store your data for longer.

Please note that we only offer the applicant portal for the purpose of job applications.  If you choose to apply to us by e-mail nevertheless, we explicitly point out that e-mail attachments are not encrypted.

You can, of course, also send in your application by post.

parcelLab
When we ship goods, we use the service provider parcelLab to send shipping notifications to our customers and provide them with the shipping status and tracking number of their shipment. The personal data required for the shipment information (name, address, order number, etc.) is forwarded to parcelLab for this purpose therefore. Please refer to the Privacy Policy from by parcelLab for more information: https://parcellab.com/privacy-policy/

We disclose your data to third parties if we are obliged to do so compulsorily due to legal provisions or legal processes (e.g. a request from an investigating authority) or if you have expressly consented to a transfer to third parties.

Insofar as we disclose personal data from you in all other cases, we do so exclusively to service providers or partner companies that support us in processing orders, providing customers with information and/or providing services based on instructions (commissioned data processing pursuant to Art. 28 GDPR). These concern, for example, web hosts, delivery service providers, payment service providers, fraud management providers and credit rating agencies. These companies are obliged to comply with data protection regulations for their part. Particularly strict data protection requirements apply to commissioned data processing pursuant to Art. 28 GDPR. In particular, such companies may only use the data to fulfil the tasks they have been commissioned with on our behalf.

Insofar as we process data in a third country (i.e. outside the European Union (EU) or European Economic Area (EEA)), or within the context of use by third-party services or the disclosure or transfer of data to third parties, it only takes place if it is required to fulfil our (pre-)contractual obligations, subject to your consent, subject to a legal obligation or our legitimate interests. Subject to legal or contractual permissions, we only process or have data processed in a third country when the special conditions of Art. 44 et seq GDPR exist. This means, for example, that processing takes place on the basis of special guarantees, such as the officially recognised level of data protection or compliance with officially recognised special contractual obligations (what are known as 'standard contractual clauses').

Below is a list of data recipients that process your personal data:

Adyen - Adyen N.V., Netherlands - Payment Service Provider
Criteo – Criteo SA, USA – Online Display Advertisement
Die Post – Schweizerische Post AG, Switzerland – Product Delivery
DHL – DHL Paket GmbH, Germany – Product Delivery
Direct Link Worldwide GmbH – Product Delivery for PostNord
Facebook – Facebook Ireland Limited, Ireland – Social Media Platform
Facebook Remarketing/Retargeting – Facebook Ireland Limited, Ireland – Personalised Advertisement
General Logistics Systems – Germany GmbH & Co. OHG
Google Ads – Google Ireland Limited, Ireland – Advertisement
Google Analytics – Google Ireland Limited, Ireland – Analytics
Google Firebase – Google LCC, USA – Analytics
Google Maps – Google LCC USA – Mapping Service
Google reCAPTCHA – Google LCC, USA – Captcha Service
GÜLL GmbH, Germany – Product Delivery for Post AT and Die Post
Instagram – Facebook Ireland Limited, Ireland – Social Media Platform
Klarna – Klarna Bank AB, Sweden – Payment Service Provider
LinkedIn – LinkedIn Ireland Unlimited Company, Ireland – Social Media Platform
Microsoft Advertising – Microsoft Corporation, USA – Conversion Tracking
Movable Ink – Movable Inc New York, USA – Newsletter personalisation
parcelLab – parcelLab GmbH, Germany – Shipping Status Communication
PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg – Payment Service Provider
Pinterest – Pinterest Inc., USA – Social Media Platform
PowerReviews – PowerReviews, Inc., USA – Rating Analytics Provider
Post AT – Österreichische Post Aktiengesellschaft, Austria – Product Delivery
PostNord – PostNord AB, Sweden, Finland and Denmark – Product Delivery
Salesforce Commerce Cloud – Salesforce.com Inc., USA – Website Hosting
Salesforce Marketing Cloud – Salesforce.com Inc., USA – Newsletter & SMS Marketing
Twitter – Twitter Inc., USA – Social Media Platform
UPS – United Parcel Service Deutschland S.à.r.l. & Co. OHG, Germany – Product Delivery
Xing – New Work SE, Germany – Social Media Platform
YouTube – Google LCC, USA – Social Media Platform

This list is subject to change if required.

We use cookies to be able to track your activities anonymously and, based on this, provide you with an optimal experience on our website and deliver personalised advertising. THOMAS SABO can disclose this data to third parties, such as advertising partners like Google, Facebook or Instagram. Please note that the settings you make may affect whether the features of the website are available in full. 

Manage tracking settings

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net) on our website to obtain consent for data processing and use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement and personalized advertising. With the help of “consentmanager” you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards. The purpose of integrating “consentmanager” is to let the users of our website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made. By using “consentmanager”, personal data and information from the end devices used, such as the IP address, are processed by consentmanager. In addition, the processed information may also be stored on your device.

The legal basis for processing is Art. 6 Para. 1 S. 1 lit. c) in conjunction with Art. 6 para. 3 sentence 1 lit. a) in conjunction with Art. 7 para. 1 GDPR and, in the alternative, lit. f). By processing the data, consentmanager helps us (according to GDPR this is the responsible party) to fulfill our legal obligations (e.g. obligation to provide evidence). Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. After two years after making the user settings, the consent will be asked again. The user settings made are then saved again for this period.
You can object to the processing. You have the right to object to reasons arising from your particular situation. To object, please send an e-mail to mail@consentmanager.net.

CLOUD SERVICES

We use software services over the internet and running on servers from their providers ("cloud services", also referred to as "software as a service") for the following purposes: Document storage and management, calendar management, emailing, spreadsheets and presentations, sharing documents, content and information involving specific recipients or publishing web pages, forms or other content and information, and chatting and participating in audio and video conferences.

In this context, personal data can be processed and stored on the providers' servers insofar as it forms part of the communication processes with us or we otherwise process it as set out in the context of this privacy policy. In particular, this data can include master data and user contact details, transaction data, contracts and other processes and their content. The cloud service providers also process user data and metadata, which they use for security purposes and service optimisation.

If we use cloud services to make forms or other documents and content available to other users or publicly accessible websites, said providers may store cookies on user devices for the web analytics purposes or to remember users' settings (e.g. in the case of media control).

If we ask for consent to use cloud services, the legal basis for processing is consent (Art. 6 (1) (1) (a) GDPR). Furthermore, their use form a component of our (pre-)contractual services, provided that the use of the cloud services has been agreed in this context (Art.  6  (1) (1) (b) GDPR). Apart from that, user data is processed on the basis of our legitimate interests (i.e. our interest in an efficient and secure administrative processes and office organisation) (Art. 6 (1) (1) (f) GDPR).

Services and service providers deployed:

• Salesforce Commerce Cloud
• Salesforce Marketing Cloud
• Salesforce Service Cloud

Retargeting is the term used to describe a process in which visitors to a website are identified in order to target them with specific messages on other websites. This method loads measurement pixels onto Internet pages, which in turn are stored in cookies.

The information collected and shared over what are known as third-party cookies is anonymous and not personally identifiable. It contains neither your address, telephone number or e-mail address. The cookies are small text files which are stored on your computer.

This technology used is also referred to as "usage-based online advertising" or "online behavioural advertising" (OBA). You can read more about this technology here: Usage-based online advertising:

Processing here takes place based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

You can find out how to turn off or prevent the use of this technology used by Google and other service providers here:  Managing your preferences. 
The service providers named there have committed to complying with this procedure.

In order to optimise our marketing activities, we use the Marketing Cloud from Salesforce.com, Inc, Salesforce Tower @ 415 Mission Street, 3rd Floor, San Francisco, USA. In this context, data from you (activity data outgoing from e-mails through our online channels, e.g. data on the page accessed, the page history, the device used, the approximate location and data for pseudonymised identification of the user profile) is collected, stored and used in order to adapt our offering (products, website, newsletter) to you. Since Salesforce is an international company with headquarters in the USA, it cannot be ruled out that your data will be transferred to the USA. By using our website, you consent to the use of your data in this way.

You can, of course, object to the collection, storage and use of your data in the Salesforce Marketing Cloud at any time for the future.

Our website uses Google Ads Remarketing, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, Google places a cookie in the browser on your end device, which automatically enables interest-based advertising with the help of a pseudonymous cookie ID and based on the pages you have visited. Processing here takes place based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

Any further data processing will only take place if you have given Google permission to link your Internet and app browser history to your Google account and to use information from your Google account to personalise advertisements which you view on the Internet. In this case, if you are logged in to Google when you visit a page on our website, Google will use your data in combination with Google Analytics data to collate and define target group lists for cross-device remarketing. Google temporarily links your personal data with Google Analytics data for this purpose in order to form target groups.

In addition, when DoubleClick is used, cookie IDs are used to record what are known as conversions that relate to ad enquiries. This is the case, for example, when a user sees a DoubleClick ad and visits the advertiser's website later using the same browser and buys something there. Google states that DoubleClick cookies do not contain any personal information. The marketing tools used cause your browser to automatically establish a direct connection to the Google server. We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By embedding DoubleClick, Google receives information that you have called up the corresponding part of our website or clicked on one of our advertisements. As soon as you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, the provider may still will obtain and store your IP address. 

You can permanently disable cookies being set for advertising preferences by downloading and installing the browser plug-in available from the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can obtain information about setting cookies from the Digital Advertising Alliance at https://www.aboutads.info and make settings for this. Finally can set your browser to inform you when cookies are being set. You can also decide whether you wish to accept them individually and whether you wish to prevent the acceptance of cookies in certain cases or in general. If you choose to disallow cookies, it may limit your ability to use our website in full. You can view additional information and the privacy policies concerning advertising and Google here: https://www.google.com/policies/technologies/ads/

Microsoft Advertising (formerly Bing Ads)

This website uses conversion tracking technology "Microsoft Advertising" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). In doing so Microsoft Advertising sets a cookie on your computer if you arrived at our Website over a Microsoft Advertising advertisement.  Cookies are small text files which are stored on your computer system. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, both Microsoft and the website site operator can recognise that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in this context, it takes place in accordance with Art. 6 (1) (f) GDPR due to our legitimate interest in effective marketing.

The information collected using the conversion cookie is used to compile conversion statistics, i.e. to record how many users reach a conversion page after clicking on an advertisement. We are informed of the total number of users who clicked on our ad through this and were redirected to a conversion tracking tag page. We do not receive any information that personally identifies users however. If you do not want to participate in tracking, you can opt-out by simply disabling the Microsoft Advertising Conversion Tracking cookie under User Preferences in your browser. Doing so stops you being included in the conversion tracking statistics. Alternatively, you can check whether Microsoft advertising cookies are set in your browser and disable them on the opt-out page for EU consumers at https://www.youronlinechoices.com/uk/your-ad-choices/  You can find more information about the Microsoft Advertising privacy statement at the following URL: https://privacy.microsoft.com/dede/privacystatement

Criteo (Criteo SA)

This website collects, stores and evaluates information about the surfing behaviour of website visitors  in pseudonymised form using technology from Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), using "cookie" text files, on the basis of our legitimate interest in displaying personalised advertising in accordance with Art. 6 (1) (f) GDPR. Criteo uses an algorithm to analyse surfing behaviour and can then display targeted product recommendations in the form of personalised advertising banners on other websites (what are known as publishers). In no case can the data collected be used to personally identify visitors to this website. Any further use or disclosure to third parties does not take place. You can obtain the following opt-out cookie in order to object to the collection of data and the creation of pseudonymised user profiles for the future: Criteo Discharge (https://www.criteo.com/de/privacy/) More information on the technology of Criteo can be found in the privacy policy of Criteo: https://www.criteo.com/en/privacy/

We use "Facebook Pixel" on our website from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). This serves the purpose of presenting interest-based advertisements to visitors to our website when they visit the social media network Facebook. A Facebook pixel has been implemented on our website for this purpose. A direct connection to the Facebook servers is established over this pixel when you visit our website. Doing so transmits to the Facebook server that you have visited our website and Facebook assigns this information to your personal Facebook user account. We would like to point out that, as the provider of this website, we have no knowledge or information about how Facebook uses this data. For more information about  how Facebook collects and uses this data, as well as your rights in this regard and options for protecting your privacy, please refer to the Facebook Privacy Policy at https://www.facebook.com/about/privacy/. We ourselves do not disclose customer data to Facebook. 

Using PowerReviews to capture and process product reviews

Your satisfaction is important to us, so we would like to know if you are happy with the products you have purchased. To this end, we transmit details on your person (including, without limitation, your e-mail address, the goods you purchased and the order date) to PowerReviews (PowerReviews, Inc., 1 North Dearborn Street Suite 810, Chicago, IL, 60602, USA) in order to send you an e-mail which invites you to review your product purchase(s) no later than a month after your purchase. We process this data in order to protect our legitimate interest in providing our customers with an excellent service, and to optimise the products and services we offer (legal basis: Art. 6 (1) (1) (f) GDPR. The same applies when you submit a product review on our website directly. This is important so that we can inform you about the status of your review. For more information on the PowerReviews Privacy Policy, please visit https://www.powerreviews.com/privacy-policy/.

Objecting to PowerReviews product review e-mails

If you have already received an e-mail asking you to review the product you purchased, you can opt-out of receiving it in future by clicking on the "Cancel" or "Unsubscribe" button/link at any object in each e-mail that asks you to submit a product review.