Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.
1. Responsible for the processing of data is:
Responsible for our website and the processing of date within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as other data protection regulations is:
Etienne Aigner AG
Represented by the managing board: Sibylle Schön (chairman)
Phone: 089 76993-0
Fax: 089 7607785
Chairman of the supervisory board: Evi Brandl
Registered at: Amtsgericht München, HRB 63254
VAT ID number: DE 129272981
Responsible according to § 18 MStV: Sibylle Schön, Zielstattstraße 27, 81379 München
You can find comprehensive information on the person responsible in our imprint at: https://www.aignermunich.com/imprint
2. Data Protecion Officer
You can contact our data protection officer as follows:
Intersoft consulting services AG
Intersoft consulting services AG
Beim Strohhause 17
by e-mail to: [email protected]
3. Access data and hosting
You may visit our website without revealing any personal information. With every visit on the website, the web server stores automatically only a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request.
These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to Art. 6 (1) 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data are deleted no later than seven days after the end of your visit on our website.
4. Data collection and use for processing the contract, contact form
We collect personal data that you voluntarily submit to us when you place an order or contact us (e.g. via contact form or by e-mail). These are contact details such as name, surname, email address, password. Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request and you would otherwise not be able to complete your order or send the contact request.
We use the data that you disclose to us to perform the contract according to Art. 6 (1) 1 lit. b) GDPR. Insofar as you send us an enquiry, we process the data provided by you in accordance with Art. 6 (1) 1 lit. f) GDPR for the response to you enquiry.
After complete processing of the contract or answering your customer enquiries, your data will be restricted for further processing and insofar as it concerns contractual data, deleted after expiry of the retention periods under tax and commercial law §§ 147 AO, 257 HGB 10 years for tax-relevant facts and 6 years for business/commercial letters in accordance with § 147 AO, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
Insofar as we base data processing in the context of a customer enquiry on our legitimate interest, we delete the personal data at the latest after 2 years starting with the calendar year in which the enquiry was finally answered, in order to be able to carry out a quality check.
In the case of data processing based on legitimate interest, you can object to this data processing at any time. You can send your objection to the following e-mail address [email protected] or to the contact details under 1. All data stored in connection with the contact will be deleted in this case.
5. Log-In Registration/opening a customer account
We offer you the opportunity to register at out website by providing your personal data, such as title, first name, surname, email address, password and password confirmation. In addition, your IP address as a user and the date and time of the log-in are stored at the time of registration.
The data processing is based on the establishment of a contract and the implementation of pre-contractual measures in accordance with Art. 6 (1) lit. b GDPR. It serves the purpose of making the order process available in a secure area in the customer account.
As far as the data described above is no longer required for the purposes also described above, the data will be deleted. In the case of data in connection with contracts, there may still be legal (tax law §§ 147 AO, 257 HGB) or contractual obligations (warranty) to continue to store the data after termination of the contract.
The deletion of your customer account/log-in registration is possible at any time and can be done by sending an e-mail to [email protected].
6. Transfer of data
In order to fulfil the contract in accordance with Art. 6 (1) 1 lit. b) GDPR , we pass on your data (title, first name, surname, billing/delivery address, telephone, e-mail address, articles) to service providers (print service providers, shipping service providers, logistics providers, banks, IT service providers, marketing service providers) for the processing of orders and payments as well as returns, insofar as this is necessary.
We also use your data to assert and enforce our rights and in this case pass the data on to lawyers, tax consultants, insurance companies or debt collection agencies.
In addition, we may be obliged to transfer your personal data to public authorities in order to comply with legal obligations. These may include tax authorities and customs authorities.
If we use service providers outside the EU or the European Economic Area (EEA), we first check the level of data protection in the country of the service provider to determine whether this is sufficient and take measures in accordance with Art. 44 ff of the GDPR to achieve a sufficient level of data protection. Where the EU standard contractual clauses are used, we have taken additional contractual, organisational and technical measures to ensure the EU level of data protection and have carried out a transfer impact assessment. For more information, please visit [email protected].
Data are also processed by a provider that we have engaged to render hosting and website presentation services on our behalf. This serves to protect our legitimate interests in the correct presentation of our offer, which are outweighed by a balance of interests. This provider processes on its servers all data that are collected in the manner specified below when you visit our website or fill in forms made available for this purpose in our online shop. Data are processed on other servers only in the scope described herein.
This service provider, the company maxcluster (maxcluster GmbH), is located in Germany at Lise-Meitner-Str. 1b in 33104 Paderborn.
6.1 Processing of orders and returns:
Our logistics partner, the company ITG GmbH Internationale Spedition und Logistik in Schwaig, receives
a) the following data for order processing: Salutation, first name, last name, billing/delivery address, telephone, e-mail address, article, in order to make and notify deliveries to the customers.
b) ITG receives the following data from us and you for returns processing: Salutation, first name, last name, billing/delivery address, telephone, e-mail address, article in order to process the returns.
6.2 Processing of payments:
You can select various payment methods in our webshop (including: prepayment, credit card, Klarna pay in 30 days, Klarna slice it, PayPal). Depending on which payment service provider and which payment method you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us.
In some cases, the selected payment service providers (Klarna, PayPal) also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process.
Your personal data will be used by the payment service providers to check whether the selected payment option can be offered to you. Please note that these recipients claim their own right or duty as a legal basis for the data processing and are therefore considered their own data controllers. Their data protection provisions and T&Cs apply.
Furthermore, we would like to inform you that if you do not pay an invoice, the payment service providers and/or we may use debt collection agencies. In this case, the collection companies will receive your personal data, which are necessary to enforce the claim; the data processing is carried out in this respect in accordance with Art. 6 (1) lit. f GDPR.
The following payment service providers process payments for AIGNER:
6.2.1 Credit card payments (VISA, Amex and Master) are made via the company Mollie (Mollie B.V.).
Processed data: Account number or customer ID of the customer, which are used in combination with password, PIN to log in to the respective online banking at Mollie. First name, last name, billing/delivery address, e-mail address, card information (combination of card number [PAN], expiry date, verification numbers).
6.2.2 Klarna pay in 30 days, Klarna slice it is carried out via the company Klarna (Klarna Bank AB (publ)).
6.2.3 PayPal payment is made through PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.).
Data processed: Data used as destination address for ordering payment instruments for payment and customer authentication: Salutation, first name, last name, postal address, telephone number, e-mail address.
Their data protection provisions and general terms and conditions apply. When selecting the payment service provider in the order process, we refer to the specifically applicable data protection provisions and general terms and conditions of the respective payment service provider.
For detailed information on the individual selectable payment service providers and possible recipients, you can contact us at [email protected].
We process your personal data in accordance with § 26 (1) of the German Federal Data Protection Act (BDSG) insofar as this data is required for the application procedure in order to make a decision on the establishment of an employment relationship. This is the following data: first name, last name, address, job position, e-mail address, curriculum vitae, certificates of previous activities and regarding acquired professional qualifications as well as voluntary information, such as this may be contained in the covering letter. As a matter of principle, we only process the personal data that we receive from you as part of the application process.
Insofar as you have expressly consented to inclusion in the applicant pool, the data processing of your personal data is based on your voluntary and informed consent pursuant to Art. 6 (1) 1 lit. a GDPR, § 26 (2) BDSG. You can revoke your consent at any time, free of charge, also at [email protected] or by post to the contact details under point 1.
Your personal data will be deleted within 6 months after completion of the application process, unless you have expressly given us your consent to store your data for a longer period, we need the data to defend against legal claims or an employment relationship has been established with you pursuant to § 26 BDSG. If no employment relationship has arisen, but you have given us your consent for further data processing, we will store this data for a maximum of three years. You can apply to us electronically, via e-mail, among other ways. Please note that unencrypted e-mails are not transmitted in an access-protected form. If you do not wish to do this, please send us your application by post to the contact details under point 1. We will of course only use your details to process your application and will not pass them on to third parties.
The data you send us as part of your application will only be processed in the personnel department and by the superior (head of department) responsible for the specific personnel selection.
We only process your personal data listed above for longer than stated above if this is necessary due to our overriding legitimate interest pursuant to Art. 6 (1) lit. f GDPR in order to defend ourselves against claims in the event of a legal dispute. You can object to this at any time free of charge, also at [email protected].
8. Integration of the Trusted Shops Trustbadge / other widgets
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops services (seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order has been placed.
This serves to safeguard our overriding legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 (1) 1 lit. f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, with whom we are jointly responsible for data protection according to Art. 26 GDPR. In the context of this data protection notice, we will inform you below about the essential contents of the contract in accordance with Art. 26 (2) GDPR.
The Trustbadge is provided by an US CDN provider (Content Delivery Network) as part of a shared responsibility. An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on data protection at Trusted Shops GmbH can be found here.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. The IP address is anonymized immediately after collection, so that the stored data cannot be assigned to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.
After the order has been completed, your email address, which has been hashed using a cryptological one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 (1) 1 lit. f) GDPR. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfillment of our and Trusted Shops overriding legitimate interests in the provision of buyer protection linked to the specific order and the transactional evaluation services in accordance with Art. 6 (1) 1 lit. f) GDPR required. If this is the case, further processing takes place in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services, you will then be given the opportunity to do so for the first time. Further processing after registration is also based on the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.
Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 (1) 1 lit. f) GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA through standard data protection clauses and further contractual measures and in the case of Israel through an adequacy decision.
As part of the shared responsibility between us and Trusted Shops GmbH, if you have questions about data protection and to assert your rights, please contact Trusted Shops GmbH, whose contact options you can find here. Irrespective of this, you can always contact us using the contact option described in this data protection declaration. If necessary, your request will then be forwarded to the other person responsible for an answer.
9. Email newsletter
If you register for the Etienne Aigner AG newsletter on the website, we will use the data required from you in the form (e-mail address, gender) to inform you weekly about the products and services of Etienne Aigner AG based on your consent in accordance with Art. 6 (1) 1 lit. a GDPR. You can revoke your consent at any time for the future in the unsubscribe link of the newsletter or by email to [email protected].
In order to obtain your consent in a legally secure manner, we will send you a confirmation link to the email address you have provided. Only when you have clicked on this confirmation link is your consent deemed to have been granted (double opt-in procedure).
The newsletter is sent within the scope of processing on our behalf and according to our instructions by our service provider ActiveCampaign, to whom we pass on your email address for this purpose. This service provider is located in the USA.
10. Cookies and web-analysis
Cookies are small text files that are automatically stored on your end device. Some of the cookies used by us are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit us (persistent cookies). You can see the storage duration in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for each browser under the following links:Microsoft Edge™: https://support.microsoft.com/en-gb/help/4027947/microsoft-edge-delete-cookies
Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies
Below we present information on cookies we use and how you can customise your browser in that respect.
1. Necessary cookies
These cookies are necessary to enable you to use our website. This includes e.g. cookies that enable you to log into the customer area or add items to your shopping cart.
2. Analytical / performance cookies
These cookies enable collecting anonymised data about user behaviour on our website. We analyse them e.g. to improve the functionality of our website and recommend you products that will be interesting to you.
3. Functionality cookies
These cookies are used for certain features of our website, e.g. to improve the website’s navigation, or deliver to you customised and relevant information (e.g. ads that match your interests).
4. Targeting cookies
These cookies record information about your visit to the website, previously viewed pages and links you clicked. We use this information to tailor our website and displayed ads to your interests.
5. Third-party cookies
The cookies of some of our advertising providers help make the on-line offering and our website more attractive to you. Therefore, cookies of our partner providers are also saved to your hard disk when you are visiting our website. These are temporary cookies and are automatically deleted after a specific timeframe. As a rule, cookies of our partner providers are deleted a few days or up to 24 months later, or in some cases after several years. Cookies of our partner providers do not collect personal data, either. They will collect exclusively pseudonymised data under a user ID. These pseudonymised data will not be associated with your personal data at any time.
Using of Google (Universal) Analytics for web analytics
Insofar as you have given your consent according to Art. 6 (1) 1 lit a GDPR, this website uses Google (Universal) Analytics. Google Universal Analytics is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Google (Universal) Analytics uses methods, like e.g. cookies, that enable an analysis of your use of the website. The information collected automatically by cookies about your use of this website are as a rule transmitted to and stored on a Google server in the United States. At the same time, as IP anonymisation is enabled on this website, the IP address will be shortened before being transmitted within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be sent to a Google server in the USA and shortened there. Generally, Google does not associate the anonymised IP address, transmitted from your browser through Google Analytics, with any other data held by Google.
Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. You will see the up-to-date certificate here. Based on this agreement between the USA and the European Commission, the latter has recognised entities certified to the Privacy Shield as those ensuring an adequate level of data protection.
You may revoke your consent at any time with future effect by downloading and installing the browser plug that is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google.
Alternatively to the browser plugin, you may click this link, to prevent Google Analytics from recording your data on this website in the future. In this process, an opt-out cookie will be stored on your end-user device. If you clear your cookies, you will be asked to provide your consent again.
11. Advertisement for marketing purposes
Google Ads remarketingWe use Google Ads to advertise our website in Google search results and on third-party websites. As far as you have given your consent according to Art. 6 (1) 1 lit a GDPR for every visit of the website the so-called remarketing cookie of Google is set by Google, which allows the automatic displaying of interest-based advertising using a pseudonymous cookie ID and information about your website visits. After the purpose of use has ceased to exist and the use of AdWords Remarketing has ended from our side, the data collected in this context will be deleted.
Any data processing that goes beyond that scope takes place only if you have allowed Google to associate your web and app browsing history with your Google account and to use information from your Google account to personalise ads that you see across the web. If, in such a case, you visit our website while being signed in to Google, Google will use your data together with Google Analytics data to build and define audience lists for cross-device remarketing. For this purpose, Google will temporarily join your data with Google Analytics data to build audiences.
Google Ads is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk). Where information is transmitted to and stored by Google on servers located in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. You can see the up-to-date certificate here.
Based on this agreement between the USA and the European Commission, the latter has recognised entities certified to the Privacy Shield as those ensuring an adequate level of data protection.
If personal data is processed in a third country, a comparable level of data protection is ensured with the help of suitable guarantees in accordance with Article 45, 46 GDPR.
You can revoke your consent at any time with future effect by clickng the remarketing cookie via this link. In addition, you can obtain information about the setting of cookies from the Digital Advertising Alliance and accordingly adapt the settings of your browser.
We also work together with our cooperation partner Webgains who promotes our products on various platforms on the Internet. By clicking on this advertisement, you will be redirected to our website. Legel basis for data processing: Art. 6 (1) 1 lit b GDPR. If you participate in a cash back program, we will provide the provider of the program with the data it needs to pay the reimbursement. Click here to opt-out of the Webgains tracking.
Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that enables the marketer to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags that may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
Click here to opt out of Google Tag Manager capture.
emarsys Web Extend
Web Extend allows to track visitor behavior on our website. In this process also personal data (either anonymous before login or pseudonymized after login) and historical data can be used to provide our customers with more suitable offers.
We offer our customers to opt out of the behavior tracking at any time. On request and by sending us an email provided on the website we will retrieve all the data and delete all the data of our customers.
12. Social media plugins
Youtube video pluginsWe have embedded third-party content on our website. This content is made available by Google ("Provider").
YouTube is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.co.uk).
In respect of Youtube videos which are embedded in our website, we have enabled the privacy enhanced mode. This means that Youtube does not collect or store information about visitors unless they play the video.
Embedding the video serves the protection of our legitimate interests in the optimal marketing of our website according to Art. 6 (1) 1 lit f GDPR that are overriding in the process of balancing of interests
To find out more about the purpose and scope of collection, further processing and use of the data by the Providers, and to learn about your rights in this respect and how you can customise your browser to better protect your privacy, please see the data privacy policies of Google.
Our online presence on Facebook, Google, Twitter, Instagram
Our presence on social networks and platforms serves a better, active communication with our customers and interested parties. We inform there about our products and current special offers.
When you visit our websites on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from these data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your terminal. The visitor behaviour and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in an optimised presentation of our offer and effective communication with customers and interested parties that are overriding in the balancing of interests. If you are asked by the respective social media platform operators for a consent into the data processing, e.g. with the help of a checkbox, the legal basis of data processing is Art. 6 para. 1 lit. f GDPR.
If the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has adopted a decision on appropriateness for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
For detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options for the protection of your privacy, in particular opt-out options, please refer to the providers' data protection information linked below. If you still need help, you can contact us.
Google/ YouTube: https://policies.google.com/privacy
13. Sending rating reminders by email
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will use your e-mail address to send you reminders about rating your order using the rating system applied by us.You may revoke your consent at any time by sending a message to the contact option specified below.
Rating reminder by Trusted Shops
If, when or after placing your order, you have given us your express consent to doing so according to Art. 6 (1) 1 lit a GDPR, we will disclose your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.com), so that they can email you a rating reminder.
You may revoke your consent at any time by sending a message to the contact option specified below or directly to Trusted Shops.
14. Contact possibilities and your rights
Being the data subject, you have the following rights according to:
art. 15 GDPR, the right to obtain information about your personal data which we process, within the scope described therein;
art. 16 GDPR, the right to immediately demand rectification of incorrect or completion of your personal data stored by us;
art. 17 GDPR, the right to request erasure of your personal data stored with us, unless further processing is required
- to exercise the right of freedom of expression and information;
- or compliance with a legal obligation;
- for reasons of public interest or
- for establishing, exercising or defending legal claims;
art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
- dthe accuracy of the data is contested by you;
- the processing is unlawful, but you refuse their erasure;
- we no longer need the data, but you need it to establish, exercise or defend legal claims, or
- you have lodged an objection to the processing in accordance with art. 21 GDPR;
art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
art. 77 GDPR, the right to complain to a supervisory authority . As a rule, you can contact the supervisory authority at your habitual place of residence or workplace or at our company headquarters.
If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, restrict or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact us directly using the contact data provided in our site notice.
Data Protection Officer:
Intersoft consulting services AG
Beim Strohhause 17