*There are two independent companies Peek & Cloppenburg with headquarters in Düsseldorf and Hamburg. This website belongs to the group of companies of Peek & Cloppenburg KG, Düsseldorf, whose store locations you can find here.

Privacy Statement

Status April 2023

 

1. General 

1.1 The person responsible for data collection and processing within the meaning of data protection law is:

Peek & Cloppenburg B.V. & Co. KG
Berliner Allee 2
40212 Düsseldorf

(hereinafter "we")

 

We are a member of the Peek & Cloppenburg B.V. & Co. KG group of companies, Düsseldorf, HRA 6862 (hereinafter "P&C Group"). Please note that there are two independent companies Peek & Cloppenburg with their headquarters in Düsseldorf and Hamburg. Where reference is made to Peek & Cloppenburg in this data protection declaration, this refers to Peek & Cloppenburg B.V. & Co. KG, Düsseldorf, whose store locations can be found here.

1.2. You can reach our data protection officer at:

Peek & Cloppenburg B.V. & Co. KG 
Datenschutzbeauftragte 
Berliner Allee 2 
40212 Düsseldorf 
E-Mail: [email protected]

 

The protection of your personal data is very important to us. We process your data primarily to provide a functional and convenient to use website. We want to ensure that you can use our content and offers via this website. Furthermore, we only process your data if and to the extent that this is permitted by legal regulations. For further information, please refer to the following statements. The following also applies if you use the Peek & Cloppenburg app "P&C Düsseldorf Fashion Shop" and use it to access our content and offers.

1.3 You can access the Peek & Cloppenburg B.V. & Co. KG privacy policy at any time at the URL www.peek-cloppenburg.de/de/datenschutzerklaerung and save or print it.

 

2. Processing of personal data during the use of our website

2.1 Each time you visit our website, our system automatically collects information from your computer system. This data is stored in the log files of our system. There is no storage of the aforementioned data together with other personal data. We collect the following data:

  • Information about the browser type and version used
  • Information about the language used on your browser
  • Country settings
  • Your operating system used
  • Your IP address
  • Date and time of access
  • Websites from which your system accesses our website
  • Websites that are accessed by your system via our website

 

2.2 It is necessary for our system to process the above data in order to ensure the functionality and delivery of the website. The processing of this data also enables us to present our website in your preferred language. In addition, we use this data to optimize our website and secure our information technology systems. The data will not be used for marketing purposes in this context. The legal basis for the processing of this data and the log files is Art. 6 para. 1 lit. f DSGVO. Accordingly, our legitimate interest is to provide you with a functional and user-friendly website.
 

2.3 The data will be processed and, in particular, stored for as long as is necessary to achieve the aforementioned purpose. Insofar as data is required for the provision of the website, the necessity ceases to apply when the respective session has ended. Your data will then be deleted automatically. In the case of storage of data in log files, this is usually the case after fourteen days at the latest. If the aforementioned data continues to be stored, however, your IP address will be deleted or alienated in this case, so that it is no longer possible to assign the calling Internet connection. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.

 

2.4 Insofar as we evaluate usage behavior on our website beyond this and in a legally permissible manner without express consent, we use only anonymized data that does not allow any conclusions to be drawn about individual persons in order to improve the usability of the website and the user experience for our visitors.

 

3. Use of trackers and scripts

We use the following trackers and scripts on our website:

a)     Vercel Insights
 
Vercel Insights is an analytics tool provided by Vercel Inc. It allows us to collect and analyze information about the use of our website. This information helps us to optimize the performance and usability of our website. Personal data we process includes IP address, browser information, device information and usage data.

b)    Google Tag Manager 

Google Tag Manager is a tool provided by Google LLC. It allows us to manage website tags via a central user interface. The Google Tag Manager itself does not collect any personal data, but only serves to manage tags that may in turn collect data. We use Google Tag Manager to simplify the integration and management of other tools and services on our website. No personal data is processed.

c)    OneTrust Cookie Compliance OneTrust is a cookie consent collection and management tool provided by OneTrust, LLC. The tool allows us to obtain and manage your consent to the use of cookies and other technologies in accordance with the General Data Protection Regulation (GDPR) and other relevant laws. Personal data processed by us includes cookie preferences.

d)    Prismic Prismic is a content management system (CMS) provided by Prismic.io. Prismic allows us to create and manage content for our website. Prismic's script is used to dynamically load the content displayed on our website. No personal data is processed.

e)    Next.js (_next/*) 

Next.js is a web framework developed by Vercel. It allows us to create a performant and user-friendly website. The scripts that start with "_next" are necessary for the functionality of our website and contain, among other things, the code for the main page, the app logic and the webpack integration. No personal data is processed.

4. Cookies - General 

4.1

We use so-called "cookies" on our website. These are text files that are stored in or by your Internet browser on your computer system. When you visit our website, a cookie may be stored on your system. This contains an individual string of characters that can be used to identify your browser the next time you visit the website. This is stored on your computer and the data is transmitted from it to our site. Cookies that have already been stored can be deleted at any time. This can also be done automatically by setting your browser accordingly.
In the following sections "Required cookies" (4), "Analysis and statistics cookies" (5), "Advertising cookies" (6), "Social media cookies" (7) and "Functional cookies" (8), we explain in detail which types of cookies we use and which data is processed there in each case.

 

4.2

With the exception of necessary cookies, we only set cookies with your express consent. When you access our website for the first time, you can either consent to the use of all cookies "Analysis and statistics cookies" (5), "Advertising cookies" (6), "Social media cookies" (7) and "Functional cookies" (8) by clicking "I agree" or select your cookie settings individually by clicking "Individual settings". Here you have the choice of which cookie category you would like to activate by clicking on the corresponding slider (Blue=activated; Gray=deactivated). You can activate or deactivate individual cookies within a category by clicking on "Provider details".

 The activation of cookies is voluntary. You can revoke your consent at any time by clicking on the "Cookie preferences" link. You can also use our website to its full extent without activated cookies. If you wish to deactivate the use of individual cookies (5-8) and revoke the consent you have given, you can do this by deactivating the respective stored cookie
under Cookie Settings.

 

4.3 Unless different deletion periods are stated in the following declarations (in particular 4), the following applies in summary to the storage period, regardless of the type and purpose of the cookies: Cookies are not subject to a fixed deletion period. Rather, we use cookies based on your consent (5-8) until you revoke it.

 

5. Required cookies

5.1 We use necessary cookies on our website. These are cookies that are used to enable basic website functions and those strictly necessary for normal website visit and navigation. Required first-party cookies allow us to enable basic website functions, such as login, site navigation, or storing products in the shopping cart during the session. For example, some functions of our website require that the browser is recognized even after a page change. These functions could not be offered without the use of cookies.

5.2 The following data, among others, are processed in this process:

  • Session and device IDs
  • Entered search terms
  • Last viewed main category (women/ men/ children)
  • Last viewed products
  • For reservations in the house: last selected store

 

5.3 Required cookies do not require consent. Required cookies are necessary according to § 25 para. 2 no. 2 Telecommunications Telemedia Data Protection Act (TTDSG) to provide you with the website (the telemedia service) in a functional and legally compliant manner and to enable a purchase or the use of the other offers on our website that you want.

5.4 The legal basis for the further processing of personal data collected by means of required cookies is our legitimate interest in being able to provide you with a functional and user-friendly online store (Art. 6 para. 1 lit. f) DSGVO). The data collected through necessary cookies will not be used to create user profiles. The aforementioned data will be processed and, in particular, stored for as long as is necessary to achieve the aforementioned purpose. As a rule, the storage period of the required cookies is until the end of your visit to our website. Depending on the type of your browser, a recovery of the previously visited page may be activated in the default settings, so that the session cookies are automatically deleted after a predefined period of time. The storage period of a session cookie can be up to two years, depending on the setting. You can change this default setting independently in your browser settings. If cookies are generally deactivated for our website (e.g. by a corresponding setting in your browser), no necessary cookies can be set either, which may mean that not all functions of the website can be fully used, for example our website will not be able to recognize your browser and certain content may not be retrievable or data (e.g. from an input mask) may be lost.

5.5 As required cookies, we also use so-called third-party cookies. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

5.5.1 Cloudflare 

Third-party provider:

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA 

Purpose of processing:

Page navigation and browser recognition even after a page change (for example, to store products in your shopping cart during a session).

Protection of the website from harmful bots.

Processed data:

Session ID, IP address, information about the time of the visit to the website.

Data transfer to a third country: 

Storage and processing takes place on servers in the EU and the United States of America on the basis of closed EU standard contractual clauses (SCC).

Storage period:

24 hours 

 

 

5.5.2 OneTrust 

Third-party provider: 

 OneTrust Technology Limited, 82 St John St, Farringdon, London EC1M 4JN, UK

Purpose of processing:

OptanonAlertBoxClosed:

This cookie is set by websites that use certain versions of OneTrust's cookie compliance solution.  It is set after visitors see a cookie information notice and in some cases only when they actively close the notice.  It allows the website not to display the message more than once to a user.  The cookie has a lifetime of one year and does not contain any personal information.

 

OptanonConsent:

This cookie is set by OneTrust's cookie compliance solution. It stores information about the categories of cookies that the website uses and whether visitors have given or withdrawn their consent to the use of each category. In this way, website owners can prevent cookies of each category from being set in the user's browser if the user has not given consent. The cookie has a normal lifetime of one year, so that returning visitors to the website can remember their preferences. It does not contain any information that can identify the website visitor.

Processed data:

Decision of the website visitors about the activation or deactivation of cookies.

Data transfer to a third country:

Storage and processing takes place on servers in the EU and the United States of America on the basis of closed EU standard contractual clauses (SCC).

Storage period:

365 days

5. Analysis and statistics cookies

5.1 We also use first-party cookies and third-party cookies on our website (hereinafter collectively referred to as "analysis and statistics cookies"), which enable an analysis of your browsing behavior. We process data on browsing and purchasing behavior to create anonymous statistical evaluations, reports and analyses that help us optimize our processes and workflows. If you are a participant in the INSIDER loyalty card program of JC New Retail AG and log in to our website with your INSIDER account, data on your surfing and purchasing behavior will also be merged with your data from the INSIDER program for the above-mentioned purpose.

5.2 The analysis and statistics cookies are used for the purpose of improving the quality of our website and its content. We also use them to prevent abusive behavior when placing orders. Through the analysis and statistics cookies, we learn how the website is used and can thus constantly improve our offer. We set analysis and statistics cookies exclusively with your consent in accordance with § 25 para. 1 p. 1 TTDSG. Further information on your consent in connection with cookies can be found above under 3.2 . The legal basis for the further processing of personal data collected by means of the analysis cookies for an improvement of our website and our offers is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO. Insofar as the purpose of the further processing is fraud prevention / abuse prevention and control when using our online store, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f) DSGVO (see 14.2 for more information).

5.3 We use the following third-party cookies to analyze browsing behavior. In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transmitted:

 

5.3.1 Google Analytics 

Third-party provider: 

Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Irland 

Purpose of processing:

Analyse des Surfverhaltens von Websitebesuchern zur Verbesserung unserer Website sowie unseres Angebots. 

Processed data: 

IP-Adresse, Kundennummer, Postleitzahl, Stadt, Orderdaten (OrderID, Warenkorbwert, ProduktID, Bestellungszeitraum, Kundenstatus), Cookie ID, Browserinformationen (Ländereinstellungen, Browserversion, Betriebssystem, Bildschirm- und Browserbildauflösung, Gerätetyp, Browser-Apps), Informationen über zuvor von Ihnen besuchte Website und/oder Anzeige. 

Wir verwenden die Code-Erweiterung „anonymizeIP“, die der Aktivierung der IP-Anonymisierung auf unserer Website dient. Durch Nutzung dieser Erweiterung wird die IP-Adresse innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum gekürzt. Nur in Ausnahmefällen wird die vollständige 

IP-Adresse an einen Server in den USA übertragen und dort gekürzt. Die im Rahmen von Google Analytics vom Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. 

Data transfer to a third country:

Die Speicherung und Verarbeitung erfolgt auf Servern in der EU und in den Vereinigten Staaten von Amerika auf Basis geschlossener EU-Standardvertragsklauseln (SCC). Daten werden außerhalb des Google-Netzwerks nicht an Dritte weitergeben. 

Storage period:

26 Monate 

7. Social media cookies

7.1 We use social media cookies from social networks to show you targeted advertising for our products in the corresponding social networks that match your interest. Based on your browsing and purchasing behavior, we use analytical models to place and personalize advertisements addressed to you on the social network so that they correspond to your personal interests. If you are a participant in the INSIDER loyalty card program of JC New Retail AG and log in to our website with your INSIDER account, data on your browsing and purchasing behavior will be merged with your data from the INSIDER program in order to send you advertising tailored to you on the social network. We set social media cookies exclusively with your consent in accordance with Section 25 (1) sentence 1 TTDSG. Further information on your consent in connection with cookies can be found above under 3.2. The legal basis for the further processing of the personal data collected by means of the social media cookies is your consent pursuant to Art. 6 para. lit. 1 a) DSGVO.

7.2 In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transferred:

7.2.1 Meta Platforms (Facebook/Instagram) 

Third-party provider: 

Meta Platforms Ireland, Ltd., 4 Grand Canal Square, Dublin 2, Irland 

Purpose of processing:

Collection of personal data to analyze customer behavior on the website. The aim is to display social media ads in meta platforms (Facebook and Instagram) on a person-specific basis. In addition, the tracking of personal data serves to measure the success of marketing measures.

If we carry out personalized advertising via Meta Platforms (Facebook/Instagram), we have the option of passing on e-mail addresses in encrypted form and information on the associated orders to Meta Platforms.

This only happens if the consent of the user in question has been obtained for this purpose. The transmitted data will then be decrypted by Meta Platforms and the information can be assigned to your person with the help of further information, such as the ownership of an account on the social network "Facebook" and "Instagram".

If the user has an account with Facebook or Instagram, he or she will be presented with the advertising booked by us as part of his or her existing user relationship with the respective social network. (So-called advanced matching)

Processed data:

IP address, website usage data (information about which ad you used to access the website; time spent on the website and which areas of the website were viewed; website loading times, browser and screen settings), zip code, device data, terminal device, order data (OrderID, shopping cart value, ProductID, time of order), encrypted email address

Data transfer to a third country:

The data processed by Meta Platforms may be transferred to countries outside the European Union, in particular to Meta Platforms, Inc, 1601 Willow Rd, Menlo Park, CA 94025, USA. The storage and processing is based on closed EU standard contractual clauses (SCC).

Storage period:

36 months 

 

7.2.2 Pinterest 

Third-party provider: 

Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA 

Purpose of processing:

Collection of personal data to analyze customer behavior on the website. The aim is to display social media ads on Pinterest for specific individuals. In addition, the tracking of personal data serves to measure the success of marketing measures.

Processed data: 

IP address, website usage data (information about which ad you used to access the website; time spent on the website, products called up, website loading times, browser and screen settings), zip code, device data, terminal device, order data (orderID, shopping cart value, productID, time of order)

Data transfer to a third country:

USA: Pinterest Inc. Storage and processing is based on closed EU standard contractual clauses (SCC).

Storage period:

30 days 

8. Advertising - Cookies

8.1 We use advertising cookies (including from third parties) to learn more about your browsing behavior and to display targeted ads for products that match your interests. Based on your browsing and purchasing behavior, we personalize advertising addressed to you using analytical models so that it matches your personal interests. If you are a participant in the INSIDER loyalty card program of JC New Retail AG and register on our website with your INSIDER account, data on your browsing and purchasing behavior will be merged with your data from the INSIDER program in order to send you advertising tailored to you. We set advertising cookies exclusively with your consent in accordance with § 25 para. 1 p. 1 TTDSG. Further information on your consent in connection with cookies can be found above under 3.2. The legal basis for the further processing of the personal data collected by means of the advertising cookies is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.

8.2 In this section, we would like to provide you with an overview of which data we process in this context and to which third-party provider the data is transferred:

6.2.3 Bing Ads 

Third-party provider: 

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA 

Purpose of processing:

Collection of personal data to analyze customer behavior on the website. The aim is to display search engine advertising on Bing on a person-specific basis. In addition, the tracking of personal data is used to measure the success of marketing measures.

Processed data:

IP address, cookie ID, website usage data (information about which ad you used to access the website; time spent on the website and which areas of the website were viewed; website loading times, browser and screen settings), zip code, device data, end device, order data (order data)

Data transfer to a third country:

Your data will be forwarded to Microsoft Corporation based in the USA. Storage and processing takes place on servers in the EU on the basis of closed EU standard contractual clauses (SCC).

Storage period:

540 days 

 

6.2.9 Bloomreach Engagement (Exponea) 

Third-party provider: 

Exponea DE GmbH, Kemperplatz 1, 10785 Berlin 

Purpose of processing:

Classification of users into behavioral and interest-based segments based on session data in combination with offline data to trigger print, email, app push and retargeting campaigns to bring you back to our website. Based on products viewed, added to cart, or purchased, personalized targeting is performed through retargeting campaigns via ads on third-party sites, or personalized emails, print, and app pushes are sent.

Collection of personal data to analyze customer behavior on the website and aggregate different customer accounts to personalize communications and analyze them.

Processed data:

 Anonymized IP address, customer number, order data (OrderID, shopping cart value, ProductID, order period, customer status), e-mail address, browser information (country settings, browser version, operating system, device type), CookieID, salutation, first name, last name, address, phone number, INSIDER information (e-mail, name, address, INSIDER purchases, points, bonus and status movements).

Storage period:

36 months 

 

6.2.10 Tisoomi 

Third-party provider: 

Tisoomi GmbH, Borselstraße 3, 22765 Hamburg, Deutschland 

Purpose of processing:

 Playout of personal display advertising, surfing behavior on the website. The display of display advertisements takes place on third-party websites.

Processed data:

 IP address (anonymized), cookie, user agent, language setting, visited website (referrer), displayed banners, clicked banners, conversion data

Storage period:

30 days 

 

9. Legal basis 

The processing of your data is based on Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to analyze and optimize the use of our website.

10. Your rights as a user

Below we summarize your rights under the GDPR and the German Federal Data Protection Act (BDSG).

10.1 You can revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Please address your revocation to:

[email protected]
or by mail to: 
Peek & Cloppenburg B.V. & Co. KG 
Kundenservice 
Berliner Allee 2 
D-40212 Düsseldorf. 

or use the revocation options as listed elsewhere in this privacy policy (e.g. by changing your cookie settings after giving consent).


10.2 Right of access - Art. 15 GDPR
You can request comprehensive information about the data concerning you and the circumstances of the processing, such as the purposes for which this data is processed or the duration of the storage.

10.3 Right of rectification - Art. 16 GDPR
You may request that inaccurate data concerning you be corrected.

10.4 Right to erasure - Art. 17 GDPR 
In principle, you can request that we delete data relating to you if this data is no longer required for legal reasons or may no longer be processed by us.

10.5 Right to restriction of processing - Art. 18 GDPRYou have the right to demand that we restrict processing in accordance with Art. 18 DSGVO. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the duration that the verification of the accuracy requires, as well as in the event that you request limited processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer necessary for the purposes pursued by us, but you need it for the assertion, exercise or defense of legal claims, as well as if the successful exercise of an objection is still disputed between us and you.

10.6 Obligation to notify - Art. 19 GDPR
We are obliged to inform all recipients to whom your data has been disclosed about a correction or deletion of your data or a restriction of processing. This does not apply only if the information is impossible for us or involves a disproportionate effort. We will inform you about these recipients if you request this.

10.7 Right to data portability - Art. 20 GDPR
In accordance with Art. 20 DSGVO, you are entitled to receive the personal data concerning you from us in a common, machine-readable format or to have it transferred to another controller.

10.8 Right of objection - Art. 21 DSGVOIn the case of processing of personal data for the performance of tasks in the public interest (Art. 6 (1) (e) DSGVO) or for the performance of legitimate interests (Art. 6 (1) (f) DSGVO), you may object to the processing of the personal data relating to you at any time with effect for the future. In the event of an objection, we shall refrain from any further processing of your data for the aforementioned purposes, unless,

  • there are compelling legitimate grounds for processing which override your interests, rights and freedoms, or

  • the processing is necessary for the establishment, exercise or defense of legal claims.

You can object to the use of your data for the purpose of direct advertising at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the purpose of direct advertising.

10.9 Right not to be subject to automated decision-making - Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing - including profiling - if it produces legal effects concerning you or similarly affects you.

An automated decision is exceptionally permissible if either (i) you have previously given your express consent or (ii) the decision is necessary for the conclusion or performance of a contract between you and us or (iii) applicable legal provisions permit this and these provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests.

In cases (i) and (ii), we will take reasonable steps to safeguard your rights and freedoms and your legitimate interests. This includes that you can explain your point of view, challenge the automated decision and request a personal referral by one of our employees.

10.10 Right to complain to a supervisory authority - Art. 77 GDPRYou have the right to lodge a complaint with a supervisory authority if you believe that our processing of data concerning you is in breach of the General Data Protection Regulation.

11. Changes to the privacy policy

We reserve the right to update this privacy policy as necessary to adapt it to changes in the legal framework or in the event of changes to the service as well as data processing.