This website is provided and managed by MCM - Lederwaren & Accessoires GmbH (hereafter referred to as “MCM”, “we” and “us”).
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use the Site. This policy may change from time to time. So please check the policy periodically for updates.
Our Site is not intended for children under 16 years of age. No one under age 16 may provide any personal information to or on the Site. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Site or on or through any of its features/register on the Site, make any purchases through the Site, use any of the interactive or public comment features of this Site or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us on the email address or postal address detailed below in CONTACT US section.
TYPES OF DATA MCM COLLECTS AND PURPOSES
MCM collects certain individually identifiable data that you actively submit through the Site and through cookies, flash cookies, web beacons and other tracking technologies. Additionally, MCM collects some information from our customers who submit a customer information card at one of our stores.
Personal Data also includes information regarding your usage of the Site. In this context we may collect the following personal data from you:
- Your IP address,
- Date and time of your request,
- Time difference to Greenwich Mean Time,
- Content of your request,
- Status of your request/HTTP-status code
- Extent of the transferred data,
- Website from which your request was redirected,
- Browser, operating system and user interface, language and version of your browser,
- Location from which you retrieve data from the Site,
- Other communication data and source, which you retrieve.
This data will be collected through log-files and cookies. Please see below for further information regarding cookies.
We are using this data in order to pursue our legitimate interests to
- Display the Site on your computer,
- Ensure the functionality of the Site,
- Optimise the Site,
- Ensure the security of our IT systems.
The legal basis of such processing is Art. 6 para. 1 lit. f GDPR.
The data will be deleted, as soon as it is no longer required for the fulfilment of the purpose the data has originally been collected for.
You may place orders and purchase products through the Site. In order to enter into a contract with you and to perform this contract, we collect the following information from you:
- Shipping address,
- Billing address
- Email address,
- Payment details.
- Further voluntary details, if applicable.
This information is required to process your order and to perform the contract with you. The processing of your personal data is based on Art. 6 para. 1 lit. b GDPR. We may also use such data to carry out fraud checks in order to pursue our legitimate interests to protect you and ourselves from unauthorised usage of your personal information, i.e. your payment details.
You may also create a customer account, which allows you to view prior purchases, to reorder the products you ordered and to store your personal details and payment details for future orders. When you create a customer account we will store the information you entered into the online form. You may request your customer account be deleted by contacting us on the email address or postal address detailed below in CONTACT US section. Storing your personal information is based on Art. 6 para. 1 lit. b GDPR.
Your address, payment and order details will be stored as long as we are required to according to statutory retention periods.
USE OF YOUR PERSONAL DATA WITH KLARNA
If you chose Klarna Pay Later or Klarna Slice it, payment services provided by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden (Klarna), as payment method, we will collect and transmit your name, address, date of birth, gender, email address, IP address and phone number to Klarna. This information is required in order to carry out an identity check and a credit assessment. We will also transmit information regarding your purchase, such as amount, article number, invoice amount, and applicable taxes to Klarna, as this is necessary to process the purchase on account.
The processing this required to offer you these payment methods, to verify your identity and to conduct a credit assessment and to assess Klarna’s risk of non-payment receivables. The processing is based on Art. 6 para. 1 lit. b GDPR. You are entitled to withdraw your consent for the future at any time by contacting us under the contact details provided below.
Klarna will transmit your information to credit agencies to verify your identity and to conduct a credit assessment.
In order to decide about entering into, performing or terminating an agreement with you, Klarna collects and uses information regarding your payment behaviour in the past and probability values for the future (Scoring). The calculation of the score values by Klarna is conducted on the basis of scientifically approved mathematical and statistical procedures and models.
You are entitled to withdraw your consent you gave to Klarna for the future at any time. However, Klarna will still be entitled to process your information that is required to contractually process the payment.
The Site also offers a contact form, which allows you to make enquiries, ask questions, give recommendations and make suggestions to us. When you use the contact form, the details you entered into the form, your IP address and the time and date of your enquiry will be transmitted to us.
We will use your email address to contact you when processing your enquiry. If you provided us with voluntary personal information, such information will be used to either address you personally or to facilitate processing your enquiry. Such information will only be used to process your enquiry. We will not use such information for other purposes.
ONLINE APPLICATION FORM
You have the opportunity to apply to us online. In order to use the online application procedure, personal data such as name, e-mail address, postal address, telephone number as well as any other application documents submitted to us (cover letter, CV, certificates, etc.) are collected and processed. In addition, we may process job-related information made publicly available by you, such as a profile on professional social media networks (e.g. LinkedIn).
We use such information to verify your application, to assess, whether you are qualified for a vacant position, to contact you in relation to your application, and to offer you a position at us or one of our affiliated companies. We may also share the information you submitted to us with other members of the MCM affiliated group of companies to process your application properly.
If your application is successful, we use the data provided for administrative matters within the scope of employment. If we are unable to offer you an employment, the information you provide will be retained for up to six months for the purpose of answering questions relating to your application and refusal. If you consented to your data being stored for a longer period, we may further consider your application data for similar job offers or future employment opportunities if your application profile is of fundamental interest to us.
The legal basis for the processing is Art. 6 para. 1 lit. b, f GDPR or, in the case of consent, Art. 6 para. 1 lit. a GDPR. If you apply within Germany, the legal basis is § 26 para. 1 German Federal Data Protection Act (BDSG) or Art. 6 para 1 lit. a GDPR.
We may use your email address to transmit direct marketing communications to you by email, but only in case you have consented in receiving newsletters by registering on the Site.
Besides your email address, we also collect the following information from you:
- IP address,
- Time and date of the registration.
We store and use your email address in order to send email messages with marketing communications on a regular basis. Your email address will not be disclosed to any third party.
The collection of the remaining information is intended to prevent misuse of our services and the email address, which has been entered.
You can opt-out of receiving newsletters or marketing communications at any time by responding to the opt-out instructions within the communication, via email to email@example.com or via our Customer Service through the ‘CONTACT US’ page on our website.
Your personal data will be stored until you unsubscribe to the newsletter or you withdraw your consent.
Legal basis for the processing is Art. 6 Sec. 1 lit. a GDPR.
Our newsletter also contains a web-beacon or tracking pixel, which represents a one-pixel image that is stored on the Site. We use this technology to analyse your using behaviour. For this analysis, we link the data that is collected by cookies when you use the Site with a unique ID. These data will be collected and analysed using pseudonyms and will not be linked with your personal data. Hence, it is ruled out that the collected data may refer to you directly.
You are entitled to object to the tracking at any time by clicking the link which is provided with every newsletter email or by informing us about your objection via email or letter.
This information will be deleted after you unsubscribed to the newsletter.
The processing is based on Art. 6 Sec. 1 lit. f GDPR.
MCM CUSTOMER IN STORE REGISTRATION
We may also collect personal data from you when you sign up to our customer card by filling out the application form. The application form may be provided in paper or through an app installed on a device held available in the Stores.
We will store the information you supplied to us in the application form. This includes your name, street address, telephone number, mobile number, date of birth, nationality and email address. Besides your email address, all information you enter is voluntary. With your consent, we will use it in order to personally address you and for internal marketing research and to carry out internal analyses. These analyses may also include your purchase history.
We will use your email address to regularly send you direct marketing communication about the MCM fashion collection, news, events, offers and styles to you via email.
If you consented to receiving marketing communication via postal mail, we will also use your complete postal address to regularly send you marketing communication via postal mail.
If you consented to receiving marketing communication via SMS, we will also use your phone number to regularly send you updates about MCM, its fashion collection, news, offers and styles via SMS.
You consented to such usage when you signed up to the customer card by checking the relevant box in the application form. You are entitled to withdraw your consent at any time for future use by sending us a message to the email address or postal address provided below.
The legal basis for such processing of personal data is Art. 6 para 1 lit. a GDPR.
To offer you the best possible customer experience in our Stores, we use a clientelling solution, which allows the sales assistants in the Stores to view your transaction and purchase history and to give you individual recommendations regarding goods that may be of your interest.
The sales assistants can only view your purchase history and possible recommendations, if you have identified yourself as a registered user of our clientelling solution by telling the sales assistant your name, email address or phone number which is associated with your customer account.
By creating a customer account or by enrolling to our customer card, we have asked you to consent to such use of your personal data. Such processing is based on Art. 6 Sec. 1 lit. aGDPR.
The clientelling solution is available in participating stores in certain countries. Please contact us under the contact details below if you want to learn more about the countries, in which our clientelling solution is available and the operators of the respective Stores.
DATA DISCLOSURE AND SHARING
We may share and receive personal data within the MCM affiliated group of companies, so that MCM may inform you of other products that may be of interest to you, improve your shopping experience, and improve our Site design. We may also disclose personal data (such as IP Address, email and phone number) for profiling and marketing purposes. You may opt out of our sharing your personal data with such affiliates and franchisees by contacting us as described below. Your personal data may also be disclosed to companies within the MCM affiliated group of companies which are not established in member states of the European Union. For protecting your personal data, such transfers to recipients established in countries which the European Commission did not recognise as providing adequate data protection, will be subject to the EU Model Clauses for the transfer of personal data in third countries.
We contract with selected third parties that provide services on our behalf to maintain our Site, provide our client communications, and provide other services. The personal data that we obtain through this Site may be accessed by these third parties solely on MCM’s behalf, and we generally do not authorise these service providers to make any other use of your personal data. These service providers operate the following services for us:
- Website hosting,
- External customer services,
- Marketing research,
- Handling orders,
- Shipping orders,
- Organization of email marketing,
- Analyses of the use of our homepage.
We may also disclose personal data to financial institutions or other third parties in connection with performing payment transactions. We do not otherwise disclose your personal data to third parties unless required by law, necessary in connection with a legal claim or proceeding, or when otherwise necessary to protect the rights or interests of MCM or third parties.
If you are registered with us and would like to delete your registration and personal details from our database, you can contact us by emailing to firstname.lastname@example.org or via our customer service through the ‘CONTACT US’ page on our website. Please keep your personal data accurate, current, and complete by regularly updating your personal account or by contacting us as specified below.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure.
But the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about communicating information in public areas of the Site like message boards. Any information you share in public areas may be viewed by any user of the Site.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures in relation to the Site.
The use of such technologies is based on Art. 6 para. 1 lit. f GDPR.
Opting out of cookies prevent the future collection of your data when you visit this website. To prevent Google Analytics from collecting data across several devices, you must opt out on all devices you use. If you click here, the opt-out cookie will be set: https://tools.google.com/dlpage/gaoptout?hl=en
SaleCycle is used to track the use of the website in order to understand which products and services are of interest to you and to collect certain personal information such as name, email address, phone number, and a unique identifier associated with your device. This information is then used to assist you in the buying process including contacting you from time to time (either by email or SMS) or to personalise advertising displayed to you online. Please see the SaleCycle Service Privacy Notice for more details regarding the data used by SaleCycle - please visit: http://www.salecycle.com/privacypolicy/
We are using the social media plugins of the social networks Facebook and Twitter on the Site.
The Facebook plugin is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The Twitter plugin is operated by Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA („Twitter“).
The operator of the plugin will receive the information that you have visited the Site and the information included in the logfiles as described above, regardless if you are registered with the relevant operator. By activating the plugin, personal data will be transmitted to the operator of the relevant plugin and stored on servers located in the USA.
We neither have influence on which data will be transmitted to the operator of the respective plugin, nor do we have full knowledge to what extent the operator collects personal data, for which purpose this data will be used and how long it will be stored.
The operator of the respective plugin uses such data in order to compile user profiles, which are used for advertising, market research and/or for optimising his website. Such use of personal data occurs in particular for presenting advertising to you which matches your interests and to inform other users about your activities on the Site. You are entitled to object to such creation of profiles. In order to exercise this right, you are required to file an enquiry with the operator of the relevant plugin.
You consent in the transmission of personal data to the operator of the relevant plugin by clicking on and activating the relevant plugin. Processing the personal data is based on Art. 6 para 1 lit. a GDPR.
The personal data will be transmitted to the operator of the relevant plugin regardless whether you are registered with the operator of the relevant plugin or if you are logged into your account. If you are logged into your account, the operator of the relevant plugin will be able to associate your visit of the site with your personal account. If you interact with the relevant plugins, this information will also be stored in your personal account and published to your contacts.
We have embedded content from the social network Instagram, operated by Instagram, Inc., 1601 Willow Road, Menlo Park, CA, 94025 USA (“Instagram”) in the Site. If you are logged into your personal Instagram account and you click on the embedded content, you may link the content to your personal Instagram account. This allows Instagram to associate your visit of the Site with your personal Instagram account. As the operator of the Site, we do not know, which data is transmitted to Instagram when you click on the embedded content.
EMBEDDING YOUTUBE VIDEOS
We may embed videos in the Site which are hosted on www.youtube.com and which may be played directly on the Site. Youtube is a service operated by Youtube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“Youtube”). All videos are embedded using the privacy-enhanced mode.
We use videos hosted on Youtube in order to pursue our legitimate interests to present you contents in an appealing and optimized form. The basis for the processing is Art. 6 para 1 lit. f article 6 (1)(f) GDPR.
Because we use DoubleClick, your browser will automatically establish a direct connection to the Google servers. We do not have influence which personal data Google collects to what extent. According to Google, Google will be notified when you have accessed a site on which DoubleClick is implemented or that you clicked on a DoubleClick ad. If you are logged into your Google account, Google may be able to associate your visit of the Site with your Google account. Even if you are not registered with Google or logged into your account, it is likely that Google will receive your IP address and store this information.
You may opt out of such tracking by using one of the following procedures:
- By setting the appropriate preferences to your browser, i.e. by not allowing third party cookies,
- By deactivating cookies for conversion tracking when you configure your browser in a way that cookies from the domain www.googleadservices.com will be blocked. In order to do that, please visit https://www.google.de/settings/ads and make the appropriate settings. In case you delete your cookies, you may be required to renew your opt-out.
- By deactivating behavioural advertising from providers which are certified under the self regulation campaign “about ads” by visiting the link http://www.aboutads.info/choices. In case you delete your cookies, you may be required to renew your opt-out.
- By permanent deactivation if you use Firefox, Internet Explorer or Google Chrome: when you download and install a browser plugin under http://www.google.com/settings/ads/plugin
We use DoubleClick in order to pursue our legitimate interest to show you advertisements that match your interests and to measure the effectiveness of our advertising. Processing your personal data is based on Art. 6 para. 1 lit. f article 6 (1)(f) GDPR.
We cooperate with Rakuten Marketing Europe Ltd. as a partner to create a unique customer experience. To improve this experience, prevent fraud and process affiliate transactions, we assign a unique user identifier and exchange the respective transaction data. Information may be processed by Rakuten in the US or the UK based on corporate binding rules and standard contract clauses. Legal Basis of our disclosure of data to Rakuten is your consent (Art. 6 sec. 1 a) GDPR), where applicable, and your order, where we have to process data for performance of the contract (Art. 6 sec. 1 b) GDPR), legal obligation (Art. 6 sec. 1 c) GDPR), or legitimate interest, where the requirements of Art. 6 sec. 1 f GDPR are met. For more details on the processing by Rakuten please refer to https://rakutenadvertising.com/en-uk/legal-notices/website-privacy-policy/.
HOW MCM PROTECTS PERSONAL INFORMATION
MCM will take all precautionary measures to protect the personal information that is shared on our website. MCM [and hired third parties related to transaction and fulfilment only] store information internally in controlled, secure environments. MCM occasionally hires other companies to provide limited services on our behalf, including packaging, dispatching and delivering purchases, sending postal mail and processing event registrations. MCM will provide those companies only the information they need to deliver the respective service, and they are prohibited from using that information for any other purpose.
If MCM requests general demographic information, this information is limited to reporting purposes only; users remain anonymous. Phone numbers, e-mail addresses, and postal addresses are never shared for demographic reports with entities outside MCM.
HOW TO UPDATE YOUR PERSONAL INFORMATION
You can help MCM maintaining the accuracy of your personal information by updating the settings in My Account where you may change your name, billing & shipping addresses, title, date of birth, phone number, email address, view your order history, or your content preferences. If at any time you wish to update your information or preferences or you prefer to stop receiving communication from MCM, feel free to update your preferences in My Account. For technical concerns and troubleshooting your personal information, please contact our customer service at email@example.com at any time.
HOW LONG IS YOUR PERSONAL DATA KEPT
MCM must keep personal information for no longer than necessary for us to fulfil the purposes for which the personal information was collected, unless we are specifically required to keep your personal information longer by applicable law.
Our website contains links to other websites. When following a link to one of these websites, please be aware that MCM assumes no responsibility for content or privacy policies and practices of such websites.
MCM encourages you to read the privacy statements of these linked sites; their privacy practices may differ from ours.
Upon request, we will provide you with details of any of your personal data we store, where we collected the data, the recipients or categories of recipients of the data to which these data has been transferred to and the purpose of the collection. You can also have your personal data rectified, deleted or restricted from further processing by us at any time.
If the processing is based on our legitimate interests, you are entitled to object to the processing of data at any time. In this case, we will only execute the processing if demonstrate compelling legitimate grounds which override your interest regarding the exclusion of your data from the processing or the processing is carried out to establish, exercise or defend legal claims.
If the processing of your data is based on your consent, you are entitled to revoke your consent at any time. In this case, we will cease processing your data, unless we are entitled to further processing your data by law. Your revocation will not affect the lawfulness of the processing of your data carried out prior to your revocation.
If you supplied personal information to us, we will, upon request, provide you with them in a machine readable form in order to use such data with other service providers.
If you believe that the processing of your data infringes data protection laws, you are entitled to lodge a complaint with a supervisory authority.
If you believe that the processing of your data infringes data protection laws, you are entitled to lodge a complaint with a supervisory authority.
DATA PROTECTION OFFICER
If you have any inquiries in the context of the protection of your personal data, you may also contact our data protection officer by email: firstname.lastname@example.org.