Data protection declaration

I. Who is responsible for the processing and who can I contact?

We, Engelbert Strauss GmbH & Co. KG, Frankfurter Str. 98-108, 63599 Biebergemünd, Germany (hereinafter also referred to as "Strauss"), provide you with our website Strauss Global including the accessible webshop Strauss Global at the website address www.strauss.global.

Orders through the Strauss Global webshop are processed through our e-commerce partner E-Commerce Partner Global-e NL B.V., Krijn Taconiskade 430, 1087 HW Amsterdam, Netherlands (hereinafter referred to as

"Global-e"). Global-e acts as the Merchant of Record and distributes the Strauss products offered in the Strauss Global webshop in its own name on our behalf. If you purchase Strauss products through our webshop Strauss Global, your contractual partner is Global-e. You can access Global-e's Terms of Sale here: www.global-e.com/tos

Various actors collaborate in the processing of your personal data (hereinafter "Data"). Depending on the type of data processing, responsibility falls within the scope of Strauss or Global-e. The data protection responsibility is detailed as follows:
www.global-e.com/consumer-privacy-policy

a. Responsibility of Strauss

Responsible for the processing of data related to the provision of the Strauss Global website and the operation of the Strauss Global webshop (see details in Section II) is Strauss:

Engelbert Strauss GmbH & Co. KG
Frankfurter Straße 98-108
63599 Biebergemünd
Germany

Please see our masthead for more details.

Questions, complaints, or requests for information regarding data protection can be submitted at any time via e-mail to dataprotection@strauss.global or addressed to the above-mentioned address with the addition 'Datenschutz' (data protection).

Data protection officer contact data:

Dr. Florian Modlinger
Mitterweg 36a
83233 Bernau a. Chiemsee
Tel.: 0176-32572896
E-mail: modlinger@strauss.de

b. Scope of responsibility of Global-e

For all data processing related to the purchase or orders of Strauss products through the webshop Strauss Global, Global-e is responsible. All data that you submit during the order process (from clicking the 'Checkout' button) is collected by Global-e and processed for the purpose of order processing through their own systems. From this point onward, we effectively have no influence over your data. All data processing during and after the 'Checkout' process is solely within the responsibility of Global-e. You can find further data protection information from Global-e here: www.global-e.com/consumer-privacy-policy

II. Which data is processed?

Within Strauss' scope of responsibility (see above section I.1.), the following data processing activities take place.

1. Visit to the website www.strauss.global

When you visit our website www.Strauss.global (including help.Strauss.global), we process your IP address, date and time of your visit, information about your used browser including language settings, and possibly your operating system, the address of the website from which you accessed our website (referrer URL), as well as information about the files you accessed. Your browser automatically transmits this data to your internet provider, and they, in turn, transmit it to us.

Why is this data processed?

We process this data so that you can load our website, for the purpose of analysing and ensuring the security of our systems, optimising our website, and for statistical purposes. We cannot attribute this data to a specific person.

Art. 6(1)(f) GDPR provides the legal basis for this. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can identify and remedy the causes of disruptions.

2. Use of the webshop Strauss Global

Orders through our Strauss Global webshop are processed by our e-commerce partner Global-e (see above Section I.). If you acquire Strauss products through our Strauss Global webshop, Global-e is your contractual partner.

All data that you submit during the order process (from clicking the 'Checkout' button) is collected by Global-e and falls within their responsibility. This includes, for example, your name, title, postal address, e-mail address, telephone number, customer number, information about the ordered items (item number, quantity of ordered items, size, colour), billing and delivery address, payment method, currency, order number, and other data that Global-e requires according to the applicable law for processing the contract with you.

Why do we process this data?

We can access your data on the systems of Global-e to prepare the shipment of goods to you as end customers (e.g., addressing packages). Additionally, we assist our E-Commerce partner Global-e in customer support and processing returns.

The legal basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that your orders through our E-Commerce partner Global-e are properly processed.

How long will the data be stored? Do I need to provide this data?

We only view your data at Global-e and store it for as long as necessary to fulfil the purposes mentioned above, unless we are entitled to a longer storage period for other reasons. Furthermore, your data is exclusively stored in the systems of Global-e. For additional information on the storage duration and mandatory details for an order, please refer to the privacy policy of Global-e.

Data Processing by Third Parties

On our website, we use a Content Delivery Network (CDN) provided by the service provider "Fastly" (Fastly Inc., 475 Brannan St., Suite 300, San Francisco, CA 94107, USA). The CDN helps us deliver content from our online platform, such as large media files, graphics, or program scripts, faster and more securely through regionally distributed servers connected via the Internet. Additionally, we employ a Web Application Firewall (WAF) from Fastly to swiftly identify and prevent attacks on our website.

In connection with the aforementioned purposes, technical connection data from server access (IP address, date, time, requested page, browser information) is processed. Storage is only carried out in individual cases form and for a maximum duration of 30 days. The legal basis for processing is Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring and improving the stability and functionality of our website.

The transfer of data to the USA is carried out based on the Standard Contractual Clauses of the European Commission. Furthermore, Fastly has joined the EU-US Data Privacy Framework, ensuring compliance with the European data protection standards for data transfers to the USA, according to the European Commission. Fastly processes the aforementioned data based on a data processing agreement, which is why Fastly is not considered a "third party."

For more information on data protection at Fastly, please refer to https://www.fastly.com/privacy.

3. Cookies

What are cookies?

Cookies are small files containing an identification number. Cookies are stored on your computer or mobile device when you call up our website (incl. help.strauss.de). When you call up our website, your computer or mobile end device can be recognised using this identification number. Cookies cannot run programs or transfer viruses to your computer. They are designed to make our services more user-friendly and more effective.

Which type of cookies does Engelbert Strauss use?

Our cookies are used in accordance with the GDPR and the TTDSG. We use the following category of cookies:

Necessary cookies

Some functions on our website (incl. help.strauss.de) are not possible if cookies are not set. These are required so that the browser is recognised after changing websites. These functions include e.g. the possibility of placing products in the shopping cart or logging into your customer account on our website.

Functional cookies

Functional cookies enable us to record and save your user settings, for instance the selected language, your username etc.

This also includes cookies that analyse the surfing behaviour of our users and transfer the following information, for example: Entered search terms; frequency of website call-ups; the use of website functions, the data and duration of the visit. This user data is processed anonymously. It is no longer possible to assign the data to the active user.

Personal cookies (for analysis and advertising purposes in a pseudonymous form)

We also use cookies that allow the user's surfing behaviour to be analysed in a pseudonymous form. In this way, the following information can also be transmitted, for example: Entered search terms; frequency of website call-ups; the use of website functions, the data and duration of the visit.

The user data collected in this way is pseudonymised by technical means. This prevents data being assigned to the active user. The data is not saved with other data. This statistical data helps us to tailor our online sites to personal interests and quantify the efficiency of our advertising campaigns.

Why does Engelbert Strauss use cookies?

We use necessary and functional cookies to make visiting our website an attractive and user-friendly experience. They are also necessary to allow and facilitate the use of certain functions. We also use analysis and advertising cookies to create statistics on the use of our website. The analysis cookies show how our website is used so that we can continuously optimise our services.

The legal basis for the use of necessary cookies is Art. 6 (1)(b) GDPR (General Data Protection Regulation). Necessary cookies are required to view our website and use basic functions. Functional cookies are used based on Art. 6 (1)(f) GDPR (General Data Protection Regulation). We have a justified interest in enabling user-friendly use of our websites and improving the quality of our website and the associated contents. The legal basis for the use of analysis and advertising cookies is Art. 6 (1)(a) GDPR (General Data Protection Regulation) and Art. 49 (1)(a) GDPR (General Data Protection Regulation). We only use these, if you have given us your consent. This may also include the associated transfer of data to the USA. We would therefore like to point out that the USA does not have an adequate data protection level within the meaning of the EU Regulation 2016/679, especially because there is a risk that, in certain statutory circumstances, the US authorities have the right to access your data for controlling and monitoring purposes, without there being any appropriate remedial measures.

How long will this data be stored?

Some cookies are deleted after the browser session ends (so-called transient cookies, especially session cookies). Other cookies remain on your device and allow us to recognise your computer on your next visit (so-called permanent cookies). You can find out how long they are stored in your web browser’s cookie settings.

Do I need to provide this data? How can I prevent the use of cookies?

There is no obligation to use cookies. You can change how cookies are used at any time by means of the following settings:

We would like to point out that deactivating cookies may impact on how our website works.

You can also prevent cookies via certain settings in your web browser. You need to make these settings separately for every browser and device that you use. You can also delete set cookies at any time via the web browser or other software programs.

5. YouTube

Within the scope of our legitimate interests pursuant to Art. 6(1) S. 1 f) GDPR, we have included Youtube videos in our online services which are saved on www.youtube.com and can be played directly from our homepage. The plugin serves to enhance the design of our websites.

These videos are embedded in our homepage so that the setting of Youtube cookies is blocked until 'play' is actively clicked. By clicking the 'play' button, you grant consent for Youtube to set cookies on the end device you are using; these can also be used to analyse the usage behaviour for market research and marketing purposes.

YouTube is service of the company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you call up a website with one of these plugins whilst visiting our online sites, a connection is made to the YouTube servers and the plugin is shown. As a result, the YouTube-server is informed that you have visited our website. If you are logged in as a YouTube member, YouTube will assign this information to your personal user account. If the plugin is used, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment if, before using our websites, you log out of your YouTube user account or any other accounts of the companies YouTube LLC und Google Inc. and also delete the respective cookies of these companies.

The data collected by cookies is usually sent to a server in the USA where it is saved. If data is transferred to the USA, the data transfer is based on standard contractual clauses.

For more information about data processing and information about data protection by YouTube (Google), please visit google.de/intl/de/policies/privacy/.

For more information about the use of cookies by Youtube, please refer to Google's cookie policy at policies.google.com/technologies/types?.

6. Contact forms and e-mail contact

For handling inquiries, we use the ticket system Zendesk, a service platform provided by Zendesk Inc., 989 Market Street # 300, San Francisco, CA 94102 ('Zendesk'). Additionally, you can also send us your inquiries via e-mail.

In the contact form, various data such as your surname, first name, postal address, telephone number, e-mail address, etc., is collected. We process the data you have entered into the contact form or transmitted to us via e-mail so that we can process and respond to your inquiry.

Zendesk processes the aforementioned data on our behalf. We have entered into a data processing agreement with Zendesk, and as a result, Zendesk is not considered a 'third party.' Zendesk processes your data in the EU/EEA and partly in the USA. For this purpose, the company has Binding Corporate Rules (BCR) approved by the Irish Data Protection Authority, which legitimise secure data transfer to third countries outside the EU and EEA. For more information, you can visit: www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/.

The EU Commission has, as of 10th July 2023, issued an adequacy decision for the USA, certifying a level of data protection equivalent to that of the EU, provided that the relevant American service providers have undergone a self-certification process. This is the case with Zendesk.

Why is this data processed? Do I have to provide this data?

The processing of data you have entered into the contact form is based on your consent (Article 6(1)(a) of the GDPR and Article 49(1)(a) of the GDPR). If you transmit data to us via e-mail, the legal basis is Article 6(1)(f) of the GDPR.

The provision of this data is not mandatory and not necessary for entering into a contract. However, using the contact form requires you to provide an e-mail address, as we cannot respond otherwise. If you provide additional data, it is done voluntarily.

If you do not agree with the processing of your inquiry through Zendesk, you can alternatively reach us via e-mail, telephone, or fax.

For more information on the processing of your data by Zendesk, please refer to: www.zendesk.de/privacy-notice/.

7. Newsletter

You have the option to subscribe to a free newsletter. When you register for our newsletter on our website, the email address you provide will be transmitted to us. You also have the option of receiving a tailored, personalised email newsletter from us. We produce the latter on the basis of the data you provide us for this purpose via the input form.

Why is my data processed?

We process your email address for the purpose of regularly sending our newsletter. After subscribing to the email newsletter, you will receive an email from us with a link to verify your email address. After confirming your email address you may provide more data via a separate input form. We process the data entered here for the purpose of producing a tailored, personalised and sector-specific newsletter.

The legal basis is your consent, which you gave us when subscribing to the newsletter or a personalised newsletter (Article 6 (1)(a) GDPR and Article 49 (1)(a) GDPR). The legal basis for sending the newsletter after you purchase goods or services is Article 6 (1)(f) GDPR and Section 7 (3) UWG (Unfair Competition Act).

How do I unsubscribe from the newsletter? How long will the data be stored?

If in the future you no longer wish to receive the newsletter, you may withdraw your consent to receive the newsletter at any time via the unsubscribe link in the newsletter or via our unsubcribe form in the online shop under “Newsletter” (for further information on the right of withdrawal see IV.).

The data you provided when subscribing to the newsletter will be promptly deleted after you withdraw your consent or unsubscribe from the newsletter. If you are also a customer of ours, the storage periods given above under II.1 will apply.

Do I have to provide this data?

Our newsletter is a voluntary offer. However, you must provide your email address in order to receive the newsletter. Additional data is required if you wish to receive a tailored, personalised newsletter (e.g. profession/sector for the production of a sector-specific newsletter, surname to address the newsletter to you personally and location for sector-specific campaigns in your geographical area).

III. Is my data forwarded to third parties?

Some data may also be forwarded to the following recipients if this is necessary for the fulfilment of the contract (Article 6 (1)(b) GDPR), we are legally obliged to do so (Article 6 (1)(c) GDPR), or this is necessary in order to safeguard our legitimate interests (Article 6 (1)(f) GDPR):

• Banks and payment service providers, for payment processing
• Collection agencies
• Manufacturers, for the purpose of processing warranty claims
• Transport companies, postal service providers, service provider for shipping control
• Prosecution authorities, courts, arbitration boards, auditors, lawyers or tax advisers
• Insurers, for processing any claims

We may use external service providers to process your data. We have chosen and commissioned these carefully, and they are bound by our instructions and are regularly checked. These service providers include call centre agencies, lettershops and printers, data collection and maintenance agencies, IT service providers, service providers for data carrier destruction and shipping control service providers. The legal basis is Article 28 GDPR where these service providers are order processors.

IV. You have the following rights regarding your data:

You can request information under the conditions of Article 15 of the GDPR about whether and which data we process about you. You can request the correction and, under certain circumstances, the completion of your data under Article 16 of the GDPR. You have the right, under the conditions of Article 17 of the GDPR, to have your data deleted or, under the conditions of Article 18 of the GDPR, to have it blocked. You have the right, under Article 20 of the GDPR, to receive your data that you provided to us based on consent or a contract, provided the processing is automated. If you wish and if technically feasible, we will transmit this data to a third party. Your rights may be limited or excluded by law under certain conditions. You have the right to lodge complaints regarding data protection with the competent data protection authority.

To the extent that we process data to safeguard our interests solely on the basis of Article 6(1)(f) of the GDPR, you have the right to object to the processing of your data for reasons arising from your particular situation. If you object, we will no longer process the data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert legal claims.

Furthermore, you can object to the processing of your data for advertising purposes at any time without incurring any costs other than the transmission costs at the basic rates. You can freely object to the sending of e-mails for advertising purposes at any time, for example, by clicking on the corresponding unsubscribe link at the end of such an e-mail. The objection can also be made by e-mail to dataprotection@strauss.global or by post with the addition 'Data Protection' to the address mentioned above under I.1.

If you have consented to the data processing, you have the right to revoke your consent at any time. The revocation does not affect the lawfulness of the processing until the revocation. The revocation can be made by e-mail to dataprotection@strauss.global or by post with the addition 'Data Protection' to the address mentioned above under I.1. After revocation, the data will no longer be processed. This does not apply if we are legally entitled or obligated to do so."