Privacy policy

1.1  The controller responsible for data collection and processing within the meaning of data protection law is:

Peek & Cloppenburg D.O.O. BEOGRAD
Vojislava Ilića 141
11050 Belgrade (Zvezdara)

(hereinafter referred to as "we")
We are a member of the group of companies Peek & Cloppenburg B.V. Co. KG, Düsseldorf, HRA 6862 (hereinafter "P&C Group").

1.2  You can contact our data protection officer at:

Peek & Cloppenburg B.V. Co. KG
Datenschutzbeauftragte
Berliner Allee 2
40212 Düsseldorf
E-Mail: [email protected]

The protection of your personal data is very important to us. We process your data primarily in order to provide a functional and easy-to-use website. We want to ensure that you can use our content and offers via this website. In addition, we only process your data if and insofar as this is permitted by law. For further information, please refer to the following declarations.

1.3  You can access and save or print out the Peek & Cloppenburg B.V. Co. KG privacy policy at any time at the URL https://www.peek-cloppenburg.com/en/privacy-statement.

2.1  Each time you visit our website, our system automatically collects information from your computer system. This data is stored in the log files of our system. The aforementioned data is not stored together with other personal data. We collect the following data:

• Information about the browser type and version used
• Information about the language used on your browser
• Country settings
• The operating system you are using
• Your IP address
• Date and time of access
• Websites from which your system accesses our website
• Websites that are accessed by your system via our website

2.2  It is necessary for our system to process the above-mentioned data in order to guarantee the functionality and availability of the website. The processing of this data also enables us to display our website to you in your preferred language. We also use this data to optimize our website and secure our IT systems. The data is not used for marketing purposes in this context. The legal basis for the processing of this data and the log files is Article 12 Paragraph 1 item 6 of Serbian Personal Data Protection Law (hereinafter: „PDPL“). Accordingly, our legitimate interest is to be able to provide you with a functional and user-friendly website.

2.3  The data will be processed and, in particular, stored for as long as is necessary to fulfil the above- mentioned purpose. If data is required to provide the website, it is no longer required once the respective session has ended. Your data will then be deleted automatically. If the data is stored in log files, this is usually done after fourteen days at the latest. However, if the above-mentioned data continues to be stored, your IP address will be deleted or anonymised so that it is no longer possible to identify the accessing internet connection. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website.

2.4  Insofar as we evaluate user behaviour on our website beyond this and in a legally permissible manner without express consent, we only use anonymised data that does not allow any conclusions to be drawn about individual persons in order to improve the usability of the website and the user experience for our visitors.

We use the following trackers and scripts on our website:

a) OneTrust Cookie Compliance
OneTrust is a tool for obtaining and managing cookie consent, provided by OneTrust, LLC. The tool enables us to obtain and manage your consent to the use of cookies and other technologies in accordance with the PDPL and other relevant laws. Personal data processed by us includes cookie preferences.

b) Magnolia
Magnolia is a content management system (CMS) provided by Magnolia International Ltd. Magnolia allows us to create and manage content for our website. Magnolia's script is used to dynamically load the content displayed on our website. No personal data is processed.

4.1 We use so-called "cookies" on our website. These are text files that are stored in or by your internet browser on your computer system. When you visit our website, a cookie may be stored on your system. This contains a unique string of characters that can be used to identify your browser the next time you visit the website. These are stored on your computer and the data is transmitted from it to our site. Cookies that have already been saved can be deleted at any time. This can also be done automatically by setting your browser accordingly. In the following section "Required cookies" (Section 5), we explain in detail which types of cookies we use and which data is processed in each case.

4.2 With the exception of necessary cookies, we only set cookies with your express consent. When you visit our website for the first time, you can either consent to the use of all cookies "Analysis and statistics cookies" (Section 6) by clicking "I agree" or select your cookie settings individually by clicking on "Individual settings". Here you can choose which cookie category you would like to activate by clicking on the corresponding slider (blue=activated; grey=deactivated). You can activate or deactivate individual cookies within a category by clicking on "Information on the activation". The activation of cookies is voluntary. You can revoke your consent at any time via the "Cookie preferences" link. You can also use our website to its full extent without activating cookies. If you wish to deactivate the use of individual cookies (Section 6) and revoke your consent, you can do so by deactivating the respective cookie under cookie settings. Unless other deletion periods are specified in the following statements (in particular Section 5), the following summarises the storage period, regardless of the type and purpose of the cookies: Cookies are not subject to a fixed deletion period. Instead, we use cookies on the basis of your consent (Section 6) until you revoke this consent.

5.1 We use necessary cookies on our website. These are cookies that serve to enable basic functions of the website and the functions that are absolutely necessary for normal visits to the website and navigation on the website. With the help of necessary first-party cookies, we can enable basic functions of the website, such as login or page navigation during the session. Thus, some functions of our website require the browser to be recognised even after a page change. These functions could not be offered without the use of cookies. The following data, among others, is processed:

• Session and device IDs

5.2 Necessary cookies do not require consent.
Necessary cookies are required in order to provide you with the website in a functional and legally compliant manner and to enable you to make use of the other services on our website that you wish to use.

5.3  The legal basis for the further processing of the personal data collected by means of necessary cookies is our legitimate interest in being able to provide you with a functional and user-friendly website (Article 12 Paragraph 1 item 6 PDPL). The data collected by the required cookies is not used to create user profiles. The above-mentioned data is processed and, in particular, stored for as long as is necessary to achieve the above-mentioned purpose. As a rule, the required cookies are stored until the end of your visit to our website. Depending on the type of browser you are using, a restore of the previously visited page may be activated in the default settings so that the session cookies are automatically deleted after a predefined period of time. The storage period of a session cookie can be up to two years, depending on the setting. You can change this default setting yourself in your browser settings. If cookies are generally deactivated for our website (e.g. by a corresponding setting in your browser), no necessary cookies can be set, which may mean that not all functions of the website can be used to their full extent, for example our website will not be able to recognise your browser and certain content may not be accessible or data may be lost.

5.4  We also use so-called third-party cookies as necessary cookies. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

5.4.1 Cloudflare
Third-party provider:	Cloudflare, Inc, 101 Townsend Street, San Francisco, CA 94107, USA
Purpose of processing:	Page navigation and recognition of the browser even after a page change (e.g. to save products in your shopping basket during a session). Protection of the website from harmful bots.
Processed data:	Session ID, IP address, information on the time of the visit to the website
Data transfer to a third country:	Storage and processing takes place on servers in the EU and in the United States of America on the basis of the adequacy decision for data transfer to the USA (Data Privacy Framework) and concluded standard contractual clauses (SCC). Cloudflare Inc. is DPF certified.
Storage duration:	24 hours

 

5.4.2 OneTrust
Third party provider:	OneTrust Technology Limited, 82 St John St, Farringdon, London EC1M 4JN, UK
Purpose of the processing:	OptanonAlertBoxClosed: This cookie is set by websites that use certain versions of OneTrust's cookie compliance solution. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notification. It allows the website to display the message no more than once to a user. The cookie has a lifespan of one year and does not contain any personal information.
OptanonConsent:	This cookie is set by OneTrust's cookie compliance solution. It stores information about the categories of cookies used by the website and whether visitors have given or withdrawn their consent to the use of each category. In this way, website owners can prevent cookies of the individual categories from being set in the user's browser if they have not given their consent. The cookie has a normal lifespan of one year so that returning visitors to the website can remember their preferences. It does not contain any information that can be used to identify the website visitor.
Processed data:	Website visitors' decision to activate or deactivate cookies.
Data transfer to a third country:	The storage and processing takes place on servers in the EU and in the United States of America on the basis of the adequacy decision for the transfer of data to the USA (Data Privacy Framework) and concluded standard contractual clauses (SCC). OneTrust Technology Limited is DPF certified.
Storage period:	365 days

6.1  We also use first-party cookies and third-party cookies (hereinafter collectively referred to as "analysis and statistics cookies") on our website, which enable us to analyse your surfing behaviour. We process data on surfing and purchasing behaviour in order to create anonymised statistical evaluations, reports and analyses that help us to optimise our processes and workflows.

6.2  The purpose of using analysis and statistics cookies is to improve the quality of our website and its content. We also use them to prevent abusive behaviour when orders are placed. Through the analysis and statistics cookies, we learn how the website is used and can thus constantly improve our offer. We only use analysis and statistics cookies with your consent. Further information on your consent in connection with cookies can be found above under 4.2. The legal basis for the further processing of the personal data collected by means of the analysis cookies for the improvement of our website and our offers is your consent in accordance with Article 12 Paragraph 1 item 1 PDPL).

6.3  We use the following third-party cookies to analyse your surfing behaviour. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

6.3.1 Google Analytics
Third-party provider:	Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland
Purpose of processing:	Analysis of the surfing behaviour of website visitors to improve our website and our offer.
Processed data:	IP address, cookie ID, browser information (country settings, browser version, operating system, screen and browser image resolution, device type, browser apps), information about previously visited websites and/or adverts. We use the code extension "anonymizeIP", which serves to activate IP anonymisation on our website. By using this extension, the IP address is shortened. The IP address transmitted by the browser as part of Google Analytics is not merged with other Google data.
Data transfer to a third country:	The storage and processing takes place on servers in the EU and in the United States of America on the basis of the adequacy decision for data transfer to the USA (Data Privacy Framework) and concluded standard contractual clauses (SCC). Google Ireland Limited is DPF-certified.
Storage period:	26 months

We summarise your rights under the PDPL on Personal Data Processing

7.1  Right to revoke the declaration of consent under the Article 15 Paragraph 3 PDPL.
You can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please send your cancellation to: [email protected]
or by post to:

Peek & Cloppenburg B.V. & Co. KG
Customer Service
Berliner Allee 2
D-40212 Düsseldorf

or use the cancellation options as listed elsewhere in this privacy policy (e.g. by changing your cookie settings after giving your consent).

7.2  Right to information - Article 26 PDPL
You can request comprehensive information about the personal data concerning you and the circumstances of the processing, such as among other things, the purposes for which this data is processed or the duration of storage.

7.3  Right to rectification – Article 29 PDPL
You can request that incorrect data concerning you be corrected.

7.4  Right to erasure - Article 30 PDPL
In principle, you can request that we erase data relating to you if this data is no longer required for legal reasons or may no longer be processed by us.

7.5  Right to restriction of processing - Article 31 PDPL You have the right to demand that we restrict processing in accordance with Article 31 PDPL. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the period of time required to verify the accuracy, as well as in the event that you request restricted processing instead of deletion in the case of an existing right to deletion; furthermore, in the event that the data is no longer required for the purposes pursued by us, but you need it for the establishment, exercise or defence of legal claims or if the successful exercise of your right to object to processing between us and you is still disputed.

7.6  Notification obligation – Article 33 PDPL
We are obliged to inform all recipients to whom your data has been disclosed of any rectification or erasure of your data or restriction of processing. This only does not apply if the information is impossible for us or involves a disproportionate effort. We will inform you of these recipients if you request this.

7.7  Right to data portability - Article 36 PDPL
You are entitled to receive the personal data concerning you from us in a commonly used, machine-readable format in accordance with Article 36 PDPL or to have it transmitted to another controller.

7.8  Right to object - Article 37 PDPL
If personal data is processed for the performance of tasks carried out in the public interest (Article 12 Paragraph 1 item 5 PDPL) or for the purposes of legitimate interests (Article 12 Paragraph 1 item 6 PDPL), you can object to the processing of your personal data at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the above- mentioned purposes, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or processing is necessary for the establishment, exercise or defence of legal claims.

You can withdraw the consent for use of your data for the purpose of direct advertising at any time with effect for the future. In the event of a withdrawal, we must refrain from any further processing of your data for the purpose of direct advertising.

7.9  Right not to be subject to an automated decision – Article 38 PDPL
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. An automated decision is exceptionally permissible if you have either (i) given your express prior consent or (ii) the decision is necessary for the conclusion or fulfilment of a contract between you and us or (iii) applicable legal provisions permit this and these provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate interests. In cases (i) and (ii), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests. This includes that you can explain your point of view, challenge the automated decision and request a personal consultation with one of our employees.

7.10 Right to lodge a complaint with a supervisory authority – Article 82 PDPL
You have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection if you believe that our processing of data concerning you is in breach of the PDPL.

We reserve the right to update this privacy policy as necessary in order to adapt it to changes in the legal framework or changes to the service and data processing.