Data protection declaration

I. Who is responsible for the processing and who can I contact?

The controller for the processing of your personal data (hereinafter: data) is

Engelbert Strauss GmbH & Co. KG
Frankfurter Straße 98-108
63599 Biebergemünd

You can find further contact details for the controller in the imprint.

If you have any questions, complaints or suggestions regarding data protection or if you want to obtain access to your personal data, please send an an email to datenschutz@strauss.de or a letter to the above postal address with the addition “Data protection”.

Contact details data protection officer:

Dr. Florian Modlinger
Mitterweg 36a
83233 Bernau a. Chiemsee
Phone: 0176-32572896
Fax: +4932121434755
E-Mail: modlinger@strauss.de

II. Which data is processed?

1. Orders

We use data which you provide us with in the course of the order process (e.g. name, addresses, email addresses, bank details) to fulfil contracts or execute precontractual measures. We may also process the data you provide in order to inform you of other interesting products from our portfolio.

Why is this data processed?

Order processing: We process this data for purposes relating to accepting orders, shipping, billing, payment processing, customer service, debt collection and, where applicable, executing or defending against legal claims arising from the supply relationship. The legal basis is Article 6 (1)(b) GDPR. External service providers (call centre agencies) support us with order processing. These process your data exclusively according to our instructions and not for their own purposes. Should you fail to pay bills despite repeated reminders, we will, if necessary, transmit data to debt collection agencies for the purpose of fiduciary collection; the legal basis is also Article 6 (1)(f) GDPR.

Shipping of ordered goods: Shipping: We cooperate with various transport companies in shipping the ordered goods. We forward the data required to deliver the ordered goods to these transport companies. If you order goods from third party vendors (additional purchase products), we may forward your data to these vendors for the purpose of direct shipping. Legal basis: Article 6 (1)(b) GDPR. Shipping control: To ensure that the ordered goods are delivered properly, we work with an external service provider who assists us in controlling the shipping process. We provide the necessary data (order, customer, and parcel numbers, delivery address) to our service provider for this purpose. The processing of data is based on a data processing agreement. The legal basis is Art. 6 para. 1 f) GDPR, Art. 28 GDPR. Shipping notifications: In order to provide you with shipment tracking, we use an external service provider who sends shipping notifications and status updates for your delivery on our behalf. For this purpose, we provide the data of the respective shipment (e-mail address, title, last name, first name, company name, delivery address, customer, order, and shipment numbers) to this service provider. The data is stored by the service provider for a maximum of three months and then anonymized. The processing of data is based on a data processing agreement. The legal basis is Art. 6 para. 1 f) GDPR, Art. 28 GDPR. If you do not wish to receive shipping notifications or status updates for your delivery, you can object to the processing for this purpose (e.g. by e-mail to datenschutz@strauss.de).

Credit check: We generally provide you with various payment options. If you choose an insecure payment method (e.g. purchase on account), we have a legitimate interest in protecting ourselves from possible defaults on payment. We may therefore obtain creditworthiness information from infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, or CRIF GmbH, Victor-Gollancz-Str. 5 in 76137 Karlsruhe, before allowing you to use these payment methods. For this purpose, we will transmit the personal data required for a credit assessment and use the information received on the statistical likelihood of a payment default for a balanced decision on the justification, execution or termination of the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical procedures, taking address data, among other things, into account. Your interests worthy of protection will be taken into account in accordance with legal requirements. We will allow you to use your desired payment method regardless of your score value. Legal basis: Article 6 (1)(f) GDPR.

2. Website

When you visit our website (incl. help.strauss.de), we process your IP address, the date and time of your visit, information on the browser you are using, including language setting, and possibly your operating system, the address of the website from which you visited our website (referrer URL) and information on the files you call up. Your browser automatically transmits this data to your Internet service provider and the latter transmits it to us.

Why is this data processed?

We process this data so that you can load our website, for the purposes of analysis and guaranteeing the security of our systems, to optimise our website, and for statistical purposes. This data cannot be assigned to a specific person. The legal basis is Article 6 (1)(f) GDPR. We have a legitimate interest in ensuring that our website is correctly displayed on your screen and that we can determine and rectify the causes of disruptions.

How long will this data be stored? Do I have to provide this data?

This data will be stored in log files for a maximum of thirty days. The provision of this data is not mandatory and is also not required in order to conclude a contract. It would, however, not be possible for technical reasons for you to visit our website without this data being processed.

Data Processing by Third Parties

On our website, we use a Content Delivery Network (CDN) provided by the service provider "Fastly" (Fastly Inc., 475 Brannan St., Suite 300, San Francisco, CA 94107, USA). The CDN helps us deliver content from our online platform, such as large media files, graphics, or program scripts, faster and more securely through regionally distributed servers connected via the Internet. Additionally, we employ a Web Application Firewall (WAF) from Fastly to swiftly identify and prevent attacks on our website.

In connection with the aforementioned purposes, technical connection data from server access (IP address, date, time, requested page, browser information) is processed. Storage is only carried out in individual cases and for a maximum duration of 30 days. The legal basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring and improving the stability and functionality of our website.

The transfer of data to the USA is carried out based on the Standard Contractual Clauses of the European Commission. Furthermore, Fastly has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection standards for data transfers to the USA, according to the European Commission. Fastly processes the aforementioned data based on a data processing agreement, which is why Fastly is not considered a "third party."

For more information on data protection at Fastly, please refer to https://www.fastly.com/privacy.

In addition, we use the Eye-Able® software from Web Inclusion GmbH on our website to ensure reduced-barrier access to information on the internet. The necessary files, such as JavaScript, stylesheets, and images, are loaded locally from this website. When functions are activated, Eye-Able® uses the browser's local storage to save settings. All settings are stored locally and are not transmitted further.

The legal basis for processing is Art. 6 (1) (f) GDPR. We have a legitimate interest in implementing accessibility requirements as effectively as possible. 

Further information about Eye-Able® can be found in the following privacy policy: https://eye-able.com/datenschutz/.

3. Cookies

What are cookies?

Cookies are small files containing an identification number. Cookies are stored on your computer or mobile device when you call up our website (incl. help.strauss.de). When you call up our website, your computer or mobile end device can be recognised using this identification number. Cookies cannot run programs or transfer viruses to your computer. They are designed to make our services more user-friendly and more effective.

Which type of cookies does Engelbert Strauss use?

Our cookies are used in accordance with the GDPR and the TDDDG. We use the following category of cookies:

Necessary cookies

Some functions on our website (incl. help.strauss.de) are not possible if cookies are not set. These are required so that the browser is recognised after changing websites. These functions include e.g. the possibility of placing products in the shopping cart or logging into your customer account on our website.

Functional cookies

Functional cookies enable us to record and save your user settings, for instance the selected language, your username etc.

This also includes cookies that analyse the surfing behaviour of our users and transfer the following information, for example: Entered search terms; frequency of website call-ups; the use of website functions, the data and duration of the visit. This user data is processed anonymously. It is no longer possible to assign the data to the active user.

Personal cookies (for analysis and advertising purposes in a pseudonymous form)

We also use cookies that allow the user's surfing behaviour to be analysed in a pseudonymous form. In this way, the following information can also be transmitted, for example: Entered search terms; frequency of website call-ups; the use of website functions, the data and duration of the visit.

The user data collected in this way is pseudonymised by technical means. This prevents data being assigned to the active user. The data is not saved with other data. This statistical data helps us to tailor our online sites to personal interests and quantify the efficiency of our advertising campaigns.

Why does Engelbert Strauss use cookies?

We use necessary and functional cookies to make visiting our website an attractive and user-friendly experience. They are also necessary to allow and facilitate the use of certain functions. We also use analysis and advertising cookies to create statistics on the use of our website. The analysis cookies show how our website is used so that we can continuously optimise our services.

The legal basis for the use of necessary cookies is Art. 6 (1)(b) GDPR (General Data Protection Regulation). Necessary cookies are required to view our website and use basic functions. Functional cookies are used based on Art. 6 (1)(f) GDPR (General Data Protection Regulation). We have a justified interest in enabling user-friendly use of our websites and improving the quality of our website and the associated contents. The legal basis for the use of analysis and advertising cookies is Art. 6 (1)(a) GDPR (General Data Protection Regulation) and Art. 49 (1)(a) GDPR (General Data Protection Regulation). We only use these, if you have given us your consent. This may also include the associated transfer of data to the USA. We would therefore like to point out that the USA does not have an adequate data protection level within the meaning of the EU Regulation 2016/679, especially because there is a risk that, in certain statutory circumstances, the US authorities have the right to access your data for controlling and monitoring purposes, without there being any appropriate remedial measures.

How long will this data be stored?

Some cookies are deleted after the browser session ends (so-called transient cookies, especially session cookies). Other cookies remain on your device and allow us to recognise your computer on your next visit (so-called permanent cookies). You can find out how long they are stored in your web browser’s cookie settings.

Do I need to provide this data? How can I prevent the use of cookies?

There is no obligation to use cookies. You can change how cookies are used at any time by means of the following settings:

We would like to point out that deactivating cookies may impact on how our website works.

You can also prevent cookies via certain settings in your web browser. You need to make these settings separately for every browser and device that you use. You can also delete set cookies at any time via the web browser or other software programs.

5. Google Maps

We use the service 'Google Maps' by the supplier Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter called 'Google') to show you how you can find us (e.g. our workwear stores pop-up stores etc.). Here, corresponding map contents are called up by Google servers. It is possible that Google may log and save, amongst other things, your IP address, when external Google servers in the USA are called up. Therefore, it cannot be ruled out that your data may be processed outside the European Union (EU) region. If the respective sub-page is called up (for instance, by actively clicking the button 'Information and opening hours' under 'Workwearstores'), you give your consent for the data to be processed by Google as described above. For more information on data protection at Google, please refer to policies.google.com/privacy.

Data is processed based on your consent. Legal basis is Art. 6 Par. 1 a) DSGVO and Art. 49 Par. 1 a) DSGVO.

6. YouTube

Within the scope of our legitimate interests pursuant to Art. 6(1) S. 1 f) GDPR, we have included Youtube videos in our online services which are saved on www.youtube.com and can be played directly from our homepage. The plugin serves to enhance the design of our websites.

These videos are embedded in our homepage so that the setting of Youtube cookies is blocked until 'play' is actively clicked. By clicking the 'play' button, you grant consent for Youtube to set cookies on the end device you are using; these can also be used to analyse the usage behaviour for market research and marketing purposes.

YouTube is service of the company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you call up a website with one of these plugins whilst visiting our online sites, a connection is made to the YouTube servers and the plugin is shown. As a result, the YouTube-server is informed that you have visited our website. If you are logged in as a YouTube member, YouTube will assign this information to your personal user account. If the plugin is used, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment if, before using our websites, you log out of your YouTube user account or any other accounts of the companies YouTube LLC und Google Inc. and also delete the respective cookies of these companies.

The data collected by cookies is usually sent to a server in the USA where it is saved. If data is transferred to the USA, the data transfer is based on standard contractual clauses.

For more information about data processing and information about data protection by YouTube (Google), please visit google.de/intl/de/policies/privacy/.

For more information about the use of cookies by Youtube, please refer to Google's cookie policy at policies.google.com/technologies/types?.

7. Creating a customer account

You can create a customer account in our online shop for future orders (“register” - order and create account).

Why is this data processed?

Your customer data is processed here to simplify and accelerate future orders. You can log in with your login details in the online shop after registering. If you log in as a registered customer, your login details will be transmitted to us for the purpose of checking your identity. After you log in with your login details, the customer data we have stored on you will be transferred to any new orders. II.1. otherwise applies accordingly.

We may process the data you provide on registration on the basis of Article 6 (1)(b) GDPR, insofar as this is necessary for the fulfilment of a contract or to execute precontractual measures; clause II.1. applies here. We may also process data which you have voluntarily shared with us on registration according to Article 6 (1)(a) GDPR and Article 49 (1)(a) GDPR if you have consented to processing.

How long will this data be stored? Do I have to provide this data?

The data provided in the course of registration will be deleted as soon as you delete your customer account. If you have not logged in for more than two years since your last order, your registration will be deleted. We may be entitled to store it for longer according to II.1. The provision of personal data by registering is not legally or contractually required.

8. Contact form and email contact

We process data, which you have entered in our contact form or transmitted to us by email, to allow us to process and answer your query.

We may process data which you enter into our contact form according to Article 6 (1)(a) GDPR and Article 49 (1)(a), provided that you have consented to processing. If you enter sensitive information into the “message” field containing particular categories of data (e.g. origin, political or religious convictions, union membership, health or sexual data), you also consent to the processing of this data. If you transmit data to us by email, the legal basis is Article (6)(1)(f) GDPR. If you are also a customer of ours, the legal basis is Article 6 (1)(b) GDPR.

This data will be deleted twelve months at the latest after we receive your query, unless we are entitled or obliged to store it for longer due to legal regulations in connection with Article 6 (1)(c) GDPR. If you are also a customer of ours, clause II.1. shall apply as regards storage periods.

The provision of this data is not mandatory and is not required in order to conclude a contract. The use of the contact form does require, however, that you provide an email address, because we cannot reply otherwise. If you provide further data, you do so voluntarily.

9. Contact via live chat

You can still contact us via live chat. For this we use the chat software of the company "Zendesk" (Zendesk Inc., 1019 Market Street in San Francisco, CA 94103 USA). You can use the chat like a contact form to chat with our staff in near real time. When you start the chat, the following personal data is collected:

• Conversation ID
• Author ID
• received date
• channel source
• amount of sent data
• and if given: first name, last name and e-mail address

In order to be able to use the chat, corresponding cookies are set if you have previously given your consent to personal cookies. You can prevent the storage of cookies via your settings (see above, Section II.3) or alternatively by changing the settings in your browser. Depending on the course of the conversation with our employees, further personal data may arise in the chat, which you enter or transmit. The nature of this data depends heavily on your request or the problem you describe to us. In addition, pages from our online shop that you have previously viewed can be displayed to our customer service. The processing of all this data serves to provide you with a quick and efficient contact option and thus improve our customer service. The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR, which you can revoke at any time with effect for the future. If your request is made to prepare / initiate a contract with you, Article 6 (1) (b) GDPR is the legal basis.

Your data will be deleted at the latest after the retention periods specified in Section 257 of the German Commercial Code and Section 147 of the Tax Code have expired after receipt of your contact request, depending on the nature of your request. The legal basis is Article 6 (1) (c) GDPR in conjunction with the aforementioned laws. The deadlines can be up to 10 years. The storage of the chat data also serves the purpose of ensuring the security of our information technology systems. At the same time, this is our legitimate interest, which is why processing is permitted under Article 6 (1) (f) GDPR.

Zendesk processes the aforementioned data on our behalf. We have entered into an order processing agreement with Zendesk, which means that Zendesk is not considered a "third party". Zendesk processes your data in the EU/EEA and partly in the USA. For this purpose, the company has Binding Corporate Rules (BCR) which have been approved by the Irish Data Protection Authority and thus legitimize secure data transfers to third countries outside the EU and the EEA. For more information, see www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/.

If you do not agree to us processing your request via Zendesk, you can alternatively contact us by e-mail, telephone, contact form or fax.

Further information on the processing of your data by Zendesk can also be found at www.zendesk.de/privacy-notice/.

10. Advertising

We process your data for the purposes of sending email advertising (this includes, among other things, new products, promotions and offers), if you provided us with your email address when ordering, and print advertising. In this way, we make sure that you receive catalogues tailored to you in addition to the main catalogue. The legal basis is Article 6 (1)(f) GDPR. We have a legitimate interest in sending our customers direct advertising within the legally allowed scope.

11. Satisfaction surveys

In connection with customer satisfaction surveys, we use the rating platform of Trustpilot A/S (Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark, hereinafter "Trustpilot"). With your consent (Art. 6 Para. 1 a) GDPR), after your purchase, we will send you an e-mail asking you to leave a review of your purchase on the Trustpilot rating platform. To verify that the persons reviewing have actually used our services, we transmit the necessary data (name, e-mail address, and reference number) to Trustpilot with your consent according to Art. 6 Para. 1 a) GDPR. If you rate us as a user via the rating platform or process, or provide feedback in another way, the general terms and conditions or terms of use and the privacy notices of Trustpilot apply. You can also choose to give an independent review of your purchase with us directly on Trustpilot. However, such a review is not verified.

12. Newsletter

You have the option to subscribe to a free newsletter. When you register for our newsletter on our website, the email address you provide will be transmitted to us. You also have the option of receiving a tailored, personalised email newsletter from us. We produce the latter on the basis of the data you provide us for this purpose via the input form.

Why is my data processed?

We process your email address for the purpose of regularly sending our newsletter. After subscribing to the email newsletter, you will receive an email from us with a link to verify your email address. After confirming your email address you may provide more data via a separate input form. We process the data entered here for the purpose of producing a tailored, personalised and sector-specific newsletter.

The legal basis is your consent, which you gave us when subscribing to the newsletter or a personalised newsletter (Article 6 (1)(a) GDPR and Article 49 (1)(a) GDPR). The legal basis for sending the newsletter after you purchase goods or services is Article 6 (1)(f) GDPR and Section 7 (3) UWG (Unfair Competition Act).

How do I unsubscribe from the newsletter? How long will the data be stored?

If in the future you no longer wish to receive the newsletter, you may withdraw your consent to receive the newsletter at any time via the unsubscribe link in the newsletter or via our unsubcribe form in the online shop under “Newsletter” (for further information on the right of withdrawal see IV.).

The data you provided when subscribing to the newsletter will be promptly deleted after you withdraw your consent or unsubscribe from the newsletter. If you are also a customer of ours, the storage periods given above under II.1 will apply.

Do I have to provide this data?

Our newsletter is a voluntary offer. However, you must provide your email address in order to receive the newsletter. Additional data is required if you wish to receive a tailored, personalised newsletter (e.g. profession/sector for the production of a sector-specific newsletter, surname to address the newsletter to you personally and location for sector-specific campaigns in your geographical area).

13. Fraud prevention

To secure order processes, we use the data you provide to check for anomalies with respect to the specific order. We have a justified interest to do so because we want to avoid payment defaults and protect customers against abuse of their personal data. The legal basis for this is Art. 6 Par. 1 f) DSGVO.

When orders are placed in our online shop, contract processing data (e.g. purchased object, name, postal address, e-mail address, delivery address, payment method and bank data) and the usage data about visits to our website (e.g. at the start, end and scope of the use) are processed together with a cookie and/or a visitor ID. This could contain anonymous data of the end device used to visit the website, and which is most probably recognised again during further visits. The sole purpose of processing here is to protect your customer account, the websites that you visit and services that you use on our websites from fraud and abuse (e.g. against takeover of user accounts, the automated creation of falsified user account or the use of stolen identities or payment data).

If there is a suspicion of fraud or abuse, one of our employees checks the assessment and the underlying clues. If as a result the conclusion of a contract is rejected, you will be informed. On request, we will also explain to you the most important reasons for the decision. You then have the opportunity to put forward your case, and the decision is reviewed again by an employee.

We prevent fraud ourselves or with the support of an external service provider. This service provider will only process your data in line with our instructions and not for its own purposes. Measures are taken to secure the order process in the online shop by the company infoscore Tracking Solutions GmbH, Kaistraße 7, 40221 Düsseldorf, the company infoscore Profile Tracking GmbH, Kaistraße 7, 40221 Düsseldorf, the company infoscore Tracking Technology GmbH, Kaistraße 7, 40221 Düsseldorf and computer centre service providers that have been commissioned to save the data.

The data processed for this is automatically deleted after five months.

You can revoke your consent for processing the above-mentioned data by sending us an e-mail to datenschutz@strauss.de or a letter marked ‘Data protection’ to Engelbert Strauss GmbH & Co. KG, Frankfurter Straße 98-108, 63599 Biebergemünd (see also Section IV.).

14. Additional data use when using the e.s. app

If you install and use the e.s. app, we process the following data in addition to the data stated in the about sections of this paragraph II:

Google Firebase

We use Google's Firebase software to help us improve usage of our app, e.g. by analysing crash reports. Firstly, Firebase identifies the scope and which user groups call up certain contents in the app. This allows us to make the app and its contents more attractive for the users.

Firebase uses identifiers (‘IDs’) so that it can assign the stated information to a device. However, the usage data is analysed anonymously and does not allow any conclusions to be made about you personally. You will find more information about Google Firebase at: https://firebase.google.com/support/privacy/

Why is this data used?

We use the data from Firebase for market research purposes, and to improve the user-friendliness and needs-based design of the app. Your data is processed in compliance with the legal regulation Art. 6 Par. 1 f) German Data Protection Act.

Do I need to supply this data? How long is this data saved?

You are not obliged to provide us with this data, nor is it necessary to conclude a contract with us. You can object to the collection of your data and the creation of IDs that Firebase assigns to a device by clicking the menu item ‘Data protection’ under ‘Settings – Legal aspects’ and switching off ‘Data processing’ by moving the slide to the left. This is how you can deactivate data collection by Firebase. Data will be stored for a maximum period of 14 months.

III. Is my data forwarded to third parties?

Some data may also be forwarded to the following recipients if this is necessary for the fulfilment of the contract (Article 6 (1)(b) GDPR), we are legally obliged to do so (Article 6 (1)(c) GDPR), or this is necessary in order to safeguard our legitimate interests (Article 6 (1)(f) GDPR):

• Banks and payment service providers, for payment processing
• Collection agencies
• Manufacturers, for the purpose of processing warranty claims
• Transport companies, postal service providers, service provider for shipping control, service provider for shipping communication
• Prosecution authorities, courts, arbitration boards, auditors, lawyers or tax advisers
• Insurers, for processing any claims

We may use external service providers to process your data. We have chosen and commissioned these carefully, and they are bound by our instructions and are regularly checked. These service providers include, for example, call centre agencies, letter shops and printing companies, agencies for data capture and data maintenance, IT service providers, service providers for data destruction, sanction list screening providers as well as service providers for shipping control and shipping communication. The legal basis is Article 28 GDPR where these service providers are order processors.

IV. Which rights do I have in relation to my data?

You may request information from us concerning whether and how we are processing your data under the conditions set down in Article 15 GDPR. You can demand that your data is corrected and perhaps completed according to Article 16 GDPR. You have the right to ask us to delete your data under the conditions set down in Article 17 GDPR or Article 18 GDPR. Article 20 GDPR gives you the right to receive your data transmitted on the basis of consent or a contract, if processing is taking place automatically. If you so wish and it is technically possible, we will transmit this data to a third party. Your rights may be restricted or excluded by law under particular conditions. You have the right to lodge a complaint with the competent data protection authority at any time.