Privacy Policy

How is my personal data protected?

Protecting your privacy is just as important to us as it is to you. That is why we do everything we can to ensure that your data is as safe as possible with us. We are happy to inform you about your rights and how we handle your data. Do you have questions or suggestions about data protection? Our data protection officer will be happy to assist you personally.

What is personal data?

There are many types of personal data. Personal data concerns information relating to an identified or identifiable person. This mainly includes data that makes it possible to draw conclusions about your identity, such as your name, telephone number, address or email address. Data that we collect, for example, when you visit our website and that cannot be associated with your person, does not fall under the definition of personal data.

You can print or save the privacy policy by using the usual functionality of your browser.

About EroGoods

EroGoods is a brand of EliteToys B.V. EliteToys B.V. is committed to protecting and respecting your personal data.

You can contact us at any time. Please use the contact details below for this purpose:

You can find more information about EliteToys B.V. here. Please see all our contact options here, such as, email and contact pages. This way, you know exactly how to reach us as quickly as possible.

1. Contact person and data controller

The contact person and so-called controller (hereinafter: “controller”) for the processing of your personal data when visiting this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

EliteToys B.V.
Transportweg 11
9645 KZ Veendam
The Netherlands

(hereinafter “we” or “us”)

For all questions about data protection relating to our online offering or the use of our website, you may also contact our data protection officer. Please see all our contact options here, such as, email and contact pages. This way, you know exactly how to reach us as quickly as possible.

2. Account and payment data

2.1 User account

For all customers who register, we make password-protected direct access to their stored data with us available (customer account). Here you can view information about your completed, open and soon-to-be-shipped orders, or correct or change your stored data.

The legal basis for the processing of this data is Article 6(1)(b) GDPR.

2.2 Payment data

We offer payment options via invoice, advance payment, PayPal and credit card. We process your payment data in order to handle payments. Depending on the selected payment method, we provide your payment data to the bank or the payment service providers engaged by us.
The legal basis for the processing of this data is Article 6(1)(b) GDPR.

2.3 Processing of payments

Pay.nl

To process part of the payments in our webshop, we use the payment service provider Pay.nl, Kopersteden 10, 7547 TK Enschede, The Netherlands. Pay.nl processes your name, address and place of residence details, your IP address and your payment data such as your bank account number or credit card number. Pay.nl reserves the right to use your data to further improve the service and in this context to share anonymised data with third parties. Pay.nl does not store your data for longer than legally permitted on the basis of the applicable retention periods.
The legal basis for the processing of this data is Article 6(1)(b) GDPR.
You can find more information about this in the privacy policy of Pay.nl.

PayPal

When paying via PayPal, your payment data is transmitted during payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, “purchase on account” via PayPal. The result of the credit check with regard to the statistical probability of default is used by PayPal to decide on the availability of the respective payment method.

The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognised mathematical-statistical method. Address data, among other things, is included in the calculation of the score values.

The legal basis for the processing of this data is Article 6(1)(b) GDPR.
For more information on data protection, including the credit reference agencies used, please refer to PayPal’s privacy policy.

2.4 Credit check

If you choose to pay by purchase on account, your creditworthiness will be checked on the basis of mathematical-statistical methods for your transaction. For this purpose, we send your personal data (such as name and address) and the data relating to your order (such as IP address) in accordance with the provisions of the GDPR to Klarna Bank AB (publ), headquartered at Sveavägen 46, 111 34 Stockholm, Sweden.

For the purpose of our own identity and creditworthiness check, Klarna or partner companies engaged by Klarna send your personal data to credit agencies. They then receive information and, if necessary, credit information based on mathematical-statistical methods, in which address data is also included in the calculation. We use the information we receive about the statistical probability of payment default in order to make a considered decision on which payment method (purchase on account, instalment payment or direct debit) we can offer you. In the event of problems with address verification, a negative credit check or any outstanding claims from previous business relationships, we may under certain circumstances not be able to offer you the payment methods purchase on account, instalment payment and direct debit. The credit check may contain probability values (score values), which are calculated on the basis of scientifically recognised mathematical-statistical methods and in which address data is also included in the calculation. Detailed information about this and about the credit agencies used can be found in Klarna AB’s privacy policy.

If you do not agree with the payment methods offered to you based on this automated process, you can inform us of this in writing, please see our contact options here. We will then review our decision again, taking your point of view into account.

The legal basis for the processing of this data is Article 6(1)(f) GDPR, our legitimate interest in preventing payment default and misuse by third parties.

3. Customer service

3.1 Contacting us by email

You have the possibility to contact us, please see our contact options here. In this context, in addition to your contact details, we also process the content of your messages and communications with us. We process the aforementioned data exclusively in order to communicate with you.

The legal basis for the processing of this data is Article 6(1)(b) GDPR.

4. Newsletter, product recommendations and customer surveys

4.1 Newsletter

You have the option to subscribe to our newsletter, in which you regularly receive free information about our range or our partner companies and we inform you about exclusive offers.

For ordering our newsletter, we use the so-called double opt-in procedure, which means that we will only send newsletters by email after you have confirmed in our notification email that you wish to receive our newsletter by clicking on a link. If you confirm your wish to receive the newsletter, we store your email address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The storage serves exclusively to send the newsletter and to be able to prove your registration. The legal basis for the processing of the stated data is your consent according to Art. 6 para. 1 lit. a GDPR.

4.2 Product recommendations

If you place an order with us, we will also use your email address to send you product recommendations for products that may be of interest to you or that match the purchased product. The legal basis for this is Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG, based on our interest in sending individual offers.

4.3 Product reviews

If you place an order with us, we will also use your email address to ask you to write a review of the product you purchased. The legal basis for this is Article 6(1)(f) GDPR, justified by our legitimate interest in sharing your experience with our products with other customers.

4.4 Customer surveys

If you place an order with us, we will also use your email address to send you customer and satisfaction surveys. The answers to the surveys are collected pseudonymously (anonymised in customer surveys). We will use the results of the surveys to improve our products and services. The legal basis for this is Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in continuously improving our services.

4.5 Right to object

You may cancel the sending of newsletters, product recommendations, customer and satisfaction surveys (hereinafter “advertising emails”) at any time. A corresponding unsubscribe link is included in every advertising email. A message to the above contact details or the contact details stated in the email (for example by email or letter) is also sufficient.

4.6.1 Klaviyo

We use the tool “Klaviyo” 125 Summer St, 02111, Boston, Verenigde Staten, to personalise and automate our email marketing.
The legal basis for the use of CanopyDeploy is Art. 6 para. 1 lit. f GDPR, based on our interest in contemporary email marketing. We have concluded a data processing agreement with Klaviyo.

5. Competitions, vouchers, loyalty programme and events

5.1 Competitions

If you decide to participate in competitions organised by us, we will usually ask you to provide your name and email address.
We process the aforementioned data in order to be able to inform you in the event of a win and to ensure that each participant only participates once in the competition. In some cases, additional information may be required for participation in the competition (such as age, etc.). In these cases, you will be informed directly about the required data in the competition.

We also use your data for market and opinion research. Your answers to surveys are not passed on to third parties or published. We do not store the answers from our surveys together with your email address or other personal data.

You may object at any time to the use of your data for market and opinion research, in whole or in part, without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the above contact details (for example email, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey email.

The legal basis for the aforementioned processing is Art. 6 para. 1 lit. b GDPR.

5.2 Loyalty points programme

By creating a user account, you automatically participate in our loyalty points programme.

Therefore, in addition to your email address and name, we also process the data of your purchases (purchase and order data, such as date, product, product number, quantity, price).

The collected data is necessary for the execution of our loyalty points programme. We may send your current points balance or special promotions relating to the points programme to your email address if you have given consent for this.

By processing data about your purchases, we can assign the resulting loyalty points to you and store them in your points balance. More details about the structure of our loyalty points programme can be found in our participation conditions.

The legal basis for the processing as described above is Art. 6 para. 1 sentence 1 lit. b) GDPR.

5.3 Events

During EroGoods events and/or activations, video and photographic images may be recorded. By participating in one of these events and/or activations, you agree to the condition that you may appear in such images. We as the organisation (EliteToys B.V. / EroGoods) are also free to use these images for campaigns, on social media or to lend them to third parties. If this is not desired, you must indicate this in writing to the organisation before the start.

6. Device and access data and the creation of log files

Whenever you use our website, we automatically collect the data that your browser transmits to enable your visit to the website. This includes in particular:

Domain name or IP address of the requesting end device
Client file request (file name and URL)
http response code
Date and duration of the visit
Address of the accessed website and the requesting website

Data processing is necessary to enable the visit to the website and to ensure the permanent functionality and security of our systems. The stated data is also temporarily stored in internal log files for the purposes described above, in order to provide statistical information about the use of our website, to further develop our website with regard to the usage behaviour of our visitors (for example if the proportion of mobile devices with which the pages are accessed increases) and to maintain our website administratively in general.

The legal basis for the data processing described above is Art. 6 para. 1 lit. b GDPR.

7. Use of cookies and similar technologies

This website uses cookies and similar technologies (collectively referred to as “tools”), which are provided either by ourselves or by third parties. Cookies are small text files that are stored by the browser on your device. Cookies are not used to run programs or load viruses onto your computer. They enable comfortable internet browsing: when you revisit the website, the stored cookie is transferred to the web server. For example, goods that you have placed in your shopping cart are stored so that you can easily continue shopping where you left off next time.

Similar technologies include in particular web storage (local/session storage), fingerprinting, tags or pixels. Most browsers are set by default to accept cookies and similar technologies. However, you can usually adjust your browser settings to reject cookies or similar technologies or to store them only on the basis of prior consent. If you reject cookies or similar technologies, not all offers from us may function smoothly for you.

7.1 Legal basis and withdrawal

Legal basis

We use tools that are necessary for the operation of the website on the basis of our legitimate interest in accordance with Article 6(1), sentence 1, lit. f GDPR, in order to enable you to use our website in a more convenient and personalised manner and to make its use as time-saving as possible. In certain cases, these tools may also be necessary for the performance of a contract or for the implementation of pre-contractual measures, in which case the processing takes place in accordance with Article 6(1), sentence 1, lit. b GDPR.

We only use optional cookies and similar technologies for marketing and analysis purposes if you have given us your consent for data processing in accordance with Article 6(1), lit. a GDPR and, where applicable, for data transfer to third countries in accordance with Article 49(1), sentence 1, lit. a GDPR via our consent banner. You can find the risks associated with the transfer of data to third countries in paragraph 12 (“Transfer of data to third countries”). Access to and storage of information on the end device is based on the implementing laws of the ePrivacy Directive of the EU Member States.

Withdrawal of your consent or change of your selection

You may withdraw your consent at any time or adjust your selection of tools. More information on how to do this can be found at the following link: Cookie Policy – EroGoods.

7.2 Necessary tools

We use certain tools to enable the basic functions of our website (“necessary tools”). Without these tools, we would not be able to offer our service. Necessary tools are therefore used without consent on the basis of our legitimate interests according to Art. 6 para. 1 sentence 1 lit. f GDPR or in order to perform a contract or take pre-contractual measures according to Art. 6 para. 1 sentence 1 lit. b GDPR.

Own cookies

We use our own necessary cookies in particular
· for login authentication,
· for load balancing,
· to store your language settings,
· to record that you have seen information placed on our website – so that it is not shown again on your next visit to the website.

To improve our website, we use various technologies to improve our website, analyse user behaviour and evaluate the associated data. The collected data may include in particular the IP address of the end device, the date and time of access, the identification number of a cookie, the device ID of mobile devices and technical information about the browser and operating system. However, the collected data is stored exclusively under a pseudonym, so that no direct conclusions can be drawn about individuals.

In the following section, we would like to explain these technologies and the providers used for them in more detail.

Which technically necessary tools do we use?

The following tools are absolutely necessary for the use of our service for technical reasons. They ensure that our service is safe and functioning.

Google Tag Manager

Our website uses Google Tag Manager, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and for all other users by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”). The Tag Manager is used for managing tracking tools and other services, so-called website tags. A tag is an element that is placed in the source code of our website in order, for example, to collect prescribed usage data. Google Tag Manager ensures the activation of other tags which may in turn collect data. The data is partly stored on a Google server in the USA. If a deactivation has been carried out at domain or cookie level, this remains valid for all tracking tags implemented with Google Tag Manager.

Google Tag Manager works without the use of cookies.
The legal basis for the use of Google Tag Manager is Art. 6 para. 1 lit. f GDPR, based on our interest in efficient management of the tools we use.

Data is partly processed on a Google server in the USA. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google in accordance with Art. 46 para. 2 lit. c GDPR. More information can be found in paragraph 12 (“Transfer of data to third countries”).

Further information can be found in Google’s information about Tag Manager.

7.3 Which analysis and marketing cookies do we use?

We also use tools for analysis and advertising purposes (“marketing tools”). Some of the access data generated when using our website is used for interest-based advertising. By analysing and evaluating this access data, we are able to display personalised advertising on our website and on the websites of other providers that corresponds to your actual interests and needs.

In the following section, we would like to explain these technologies and the providers used in more detail. The data collected may in particular include:
· the IP address of the device;
· the identification number of a cookie;
· the device ID of mobile devices;
· Referrer URL (previously visited page);
· Visited pages (date, time, URL, title, duration of stay);
· Downloaded files;
· Clicked links to other websites;
· Where applicable, the achievement of certain goals (conversions);
· Technical information: operating system; browser type, version and language; device type, brand, model and resolution;
· Approximate location (country and possibly city).

However, the collected data is stored exclusively under a pseudonym, so that no direct conclusions can be drawn about the persons.

Google Ads

Our website uses the service “Google Ads”, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users.

With Google Ads, customer actions defined by us are recorded and analysed by means of “Google Ads Conversion Tracking” (for example clicking on an advertisement, page views, downloads). We use “Google Ads Remarketing” to display personalised advertisements for our products on Google partner websites. Both services use cookies and similar technologies.
The data collected in this context may be transferred by Google to a server in the United States and stored there. In the event of the transfer of personal data to the United States, we have concluded standard contractual clauses with Google for the evaluation of the data.

If you use a Google account, Google may, depending on the settings in your Google account, link your web and app browser history to your Google account and use information from your Google account to personalise advertisements. If you do not want this link to your Google account, it is necessary that you log out of Google before visiting our website.

If you have not consented to the use of Google Ads, Google will only display general advertisements that are not selected on the basis of the information collected about you on this website. In addition to withdrawing your consent, you also have the option of disabling personalised advertisements in Google’s advertising settings.

We have concluded a data processing agreement with Google Ireland Limited for the use of Google Ads. In the event of the transfer of personal data from Google Ireland Limited to the United States, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Article 46(2)(c) GDPR. In addition, we also obtain your explicit consent in accordance with Article 49(1)(a) GDPR for the transfer of your data to third countries.
The following cookies are set by Google:
· “_gcl_au” for 90 days
· “_gcl_aw” for 90 days
More information about this can be found in the information about data use and Google’s privacy policy.

Google Analytics

Our website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). According to Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is the contact point for all privacy matters.
Google Analytics uses cookies and similar technologies to analyse and improve our users’ website behaviour. Google will process the collected information in order to evaluate your use of the website, compile reports on website activities for website operators and provide other services related to website and internet use. The data collected in this process may be transferred by Google to a server in the USA for evaluation and storage.
We have selected the following privacy settings for Google Analytics:
IP anonymisation (shortening of the IP address before evaluation, so that no conclusions can be drawn about your identity)
Disabled advertising functions (including audience retargeting via GA Audience)
Disabled personalised advertisements
Disabled cross-device tracking (Google Signals)
Disabled data sharing with other Google products and services

The following data is processed by Google Analytics:
Anonymised IP address;
Referrer URL (previously visited page);
Visited pages (date, time, URL, title, duration of stay);
Downloaded files;
Clicked links to other websites;
Any goals achieved (conversions);
Technical information: operating system; browser type, version and language; device type, brand, model and resolution;
Approximate location (country and possibly city, based on anonymised IP address).

Google Analytics uses the following cookies for the stated purpose with the corresponding storage duration:
· “_ga” for 2 years and “_gid” for 24 hours (both for recognising and distinguishing website visitors by means of a user ID);
· “_gat” for 1 minute (for reducing requests to Google servers);
· Where applicable, “IDE” for 13 months (third-party cookie for recognising and distinguishing website visitors by means of a user ID, for recording interaction with advertisements and as part of the playback of personalised advertisements).

We have concluded a data processing agreement with Google for the use of Google Analytics and, in the event of the transfer of personal data to the USA or other third countries, standard contractual clauses. More information about this can be found in paragraph 12 (“Transfer of data to third countries”) of Google’s privacy policy.

More information about this can be found in Google’s privacy policy.

Google Optimize

Google Optimize is used in conjunction with Google Analytics. This means that Google Optimize uses the same cookies as Google Analytics. It is a testing tool and helps us to improve our website for you. The contact point for all matters is again Google. More information on data protection can be found under Google Analytics.

Vimeo

We use Vimeo, a video platform of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you watch a video on our website that has been uploaded to or embedded from Vimeo, certain data about you is processed by Vimeo. This includes information about the videos you watch and your IP address.

Vimeo may also use cookies and similar technologies to collect information about your interactions with the videos played on our website. Please refer to Vimeo’s privacy policy for more information about the specific information Vimeo collects and how it is used.

We have concluded an agreement with Vimeo to ensure that your personal data is only processed in accordance with our instructions and the applicable data protection legislation.

Microsoft Advertising (formerly Bing Ads)

Our website uses Microsoft Advertising, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft uses cookies and similar technologies to show you relevant advertisements. The use of these technologies enables Microsoft and its partner websites to place advertisements based on previous visits to our or other websites on the internet. The data collected in this context may be transferred by Microsoft to a server in the USA for evaluation and storage.

You can prevent Microsoft from collecting and processing the data generated by the cookies and relating to your use of the website by disabling personalised advertisements on Microsoft’s opt-out page. Please note that in this case the objection procedure must be followed again after deleting all cookies in your browser or when later using a different browser and/or profile.

More information about this can be found in Microsoft’s privacy policy.
We have concluded a data processing agreement with Microsoft.

Trusted Shops

If you have given us your express consent during or after your order by ticking a corresponding checkbox or clicking a button provided for this purpose, we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (“Trusted Shops”) for the reminder to leave a review of your order, so that they can remind you by email of the possibility to leave a review.

This consent can be withdrawn at any time here or by means of a message to the contact option mentioned above or directly to Trusted Shops. For more information, please refer to Trusted Shops’ privacy policy.

8. YouTube with enhanced data protection

This website contains videos from YouTube. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced data protection mode. According to YouTube, this means that YouTube does not store information about visitors to this website before they watch the video. The transfer of data to YouTube partners is not necessarily excluded by the enhanced data protection mode, however. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection is established to YouTube’s servers. In this process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud.
Further data processing operations may possibly be triggered after the start of a YouTube video over which we have no influence.
The use of YouTube takes place in the interest of the functionality of our website, the display of essential product information to customers and an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1), lit. f GDPR.
More information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=en.

9. Online presence on social networks

We have online presences on social networks in order, among other things, to communicate there with customers and interested parties and to inform them about our products and services.

The data of users is generally processed by the respective social networks for market research and advertising purposes. In this way, user profiles can be created based on the interests of users. Cookies and other identifiers are stored on users’ computers for this purpose. Based on these user profiles, advertisements are placed, for example, within the social networks, but also on third-party websites.

Within the framework of operating our online presences, it is possible that we have access to information such as statistics on the use of our online presences, which are provided by the social networks. These statistics are aggregated and may in particular contain demographic information and data on interaction with our online presences and the messages and content distributed there. Details and links to the data of the social networks to which we as operator of the online presence have access can be found in the list below.

The legal basis for data processing is Article 6(1), lit. f GDPR, based on our legitimate interest in effectively informing users and communicating with users, or Article 6(1), lit. b GDPR, in order to stay in contact with our customers and inform them, as well as for carrying out pre-contractual measures with future customers and interested parties.

The legal basis for data processing carried out by the social networks themselves can be found in the privacy policies of the respective social networks. Under the links below you will also find more information about the respective data processing operations and the possibilities to object.
We point out that data protection requests can most effectively be submitted to the respective provider of the social network, since only these providers have access to the data and can take appropriate measures directly. Below you will find a list with information about the social networks on which we have an online presence.

Facebook (USA and Canada: Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; all other countries: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Operation of the Facebook fan page under joint responsibility on the basis of an agreement on joint processing of personal data (so-called Page Insights Addendum regarding the controller)
Information about the processed Page Insights data and the contact option in the event of privacy requests:
https://www.facebook.com/legal/terms/information_about_page_insights_data
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.

Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy policy: https://help.instagram.com/519522125107875

Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: https://policies.google.com/privacy
Opt-out: https://www.google.com/settings/ads.

Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
Privacy policy: https://twitter.com/en/privacy
Opt-out: https://twitter.com/personalization.

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Operation of the LinkedIn company page under joint responsibility on the basis of an agreement on joint processing of personal data (so-called Page Insights Joint Controller Addendum)
Information about the processed Page Insights data and the contact option in the event of privacy requests: https://legal.linkedin.com/pages-joint-controller-addendum
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)
Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/NL

Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)
Privacy policy: https://policy.pinterest.com/en/privacy-policy

10. Amazon Marketplace

We also offer our products on Amazon Marketplace. Please note that we have no influence over the terms of use of the marketplaces and the services offered, and only limited influence over their data processing. Therefore, please carefully check which data you provide to us via Amazon. We cannot accept any liability for the conduct of the marketplace operators and other users, as well as third parties who may cooperate with the marketplace operators or also use their services. In general, we only receive from the marketplaces the data necessary for the shipment of the purchased product.

Please refer to the privacy policies of the respective marketplaces for the purpose and scope of data collection and the further processing and use of the data by the marketplaces, as well as your rights and options with regard to protecting your privacy.
Amazon is operated by Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA (“Amazon”). More information about this can be found in Amazon’s privacy policies.

11. Recipients of the data

We only provide the data collected by us if this is necessary for the performance of the contract or for providing the technical functionality of the website, or if there is another legal basis for data disclosure.

In principle, we process your data ourselves. However, we also use service providers. In addition to the service providers mentioned in this privacy policy, these may in particular include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we provide data to service providers, they may only use the data to perform their tasks. The service providers have been carefully selected and engaged by us. They are contractually bound by our instructions, have appropriate technical and organisational measures to protect the rights of the data subjects and are regularly monitored by us.

In addition, data may be disclosed in connection with requests from authorities, court decisions and legal proceedings if this is necessary for the enforcement or defence of rights.

If EroGoods engages third parties in the context of data processing in accordance with Article 28 GDPR for the collection, processing and use of data, this shall also only take place in accordance with the statutory data protection provisions.

Shipping service providers and logistics companies

For the delivery of your orders, we work together with external shipping companies (e.g. DHL). These service providers receive from us the data necessary for contract processing so that your orders arrive safely and you can track the shipment via a tracking code. This includes your name, email address and, if you have provided it to us, also your telephone number. The data is used exclusively for the execution of the shipping or logistics order. The legal basis is Article 6(1)(b) GDPR. You can remove your telephone number from your customer account at any time.

12. Transfer of data to third countries

As explained in this privacy policy, we use services of providers that are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. If this is the case and the European Commission has not adopted an adequacy decision (Article 45 GDPR) for these countries, we have taken appropriate measures to ensure an adequate level of data protection for any data transfers. This includes, among other things, the standard contractual clauses of the European Union or binding internal data protection rules.

If this is not possible, we base the data transfer on exceptions of Article 49 GDPR, in particular your express consent or the necessity of the transfer for the performance of a contract or prior measures.

If a transfer to a third country is planned and there is no adequacy decision or suitable safeguards, there is the possibility and risk that authorities in the respective third country (for example intelligence services) may gain access to the transferred data in order to collect and analyse it, and that the enforceability of your rights as a data subject may not be guaranteed. You will also be informed of this when obtaining your consent via the cookie banner.

13. Retention period

In general, we store personal data only as long as necessary to fulfil contractual or legal obligations for which we have collected the data. Thereafter, we delete the data immediately unless we still need the data until the expiry of the statutory limitation period for evidentiary purposes for civil claims or due to statutory retention obligations.

For evidentiary purposes, we must retain contract data for a further three years after the end of the year in which the business relationship with you ends. Any claims become time-barred according to the statutory limitation period at the earliest at that time.

Even after that, we must still retain some of your data for accounting reasons. This is required by statutory documentation obligations that may arise from the Commercial Code, the Tax Code, the Banking Act, the Anti-Money Laundering and Anti-Terrorist Financing Act and the Securities Trading Act. The document retention periods prescribed there range from two to ten years.

14. Your rights

Under the respective statutory conditions, you have the following statutory privacy rights:
Right of access (Article 15 GDPR, § 34 BDSG)
Right to erasure (Article 17 GDPR, § 35 BDSG)
Right to rectification (Article 16 GDPR, § 34 BDSG)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to withdraw consent (Article 7(3) GDPR)
Right to object to certain data processing activities (Article 21 GDPR)

To exercise your rights described here, you may contact us at any time using the contact details stated under “Contact person and controller”. You also have the right to lodge a complaint with the data protection supervisory authority responsible for us.

15. Data security

We have taken up-to-date technical measures to ensure data security, in particular to protect your personal data against risks during data transmission and against access by third parties. These are continuously adapted to the current state of the art. In order to secure the personal data that you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

16. Changes to the privacy policy

From time to time, we update this privacy policy, for example when we adjust our website or when the legal requirements change.