1. Data Controller and its Data Protection Officer
The Controller is:
Zalando Marketing Services GmbH
The data protection officer of the Controller can be reached via the above mail address (Attn.: Data Protection Officer) or by e-mail to firstname.lastname@example.org
2. Scope of this Privacy Notice
This Privacy Notice provides you with an overview of how Zalando Marketing Services GmbH (hereinafter “ZMS”) processes your data in the Course of the Collabary platform (including the Creator Campaign Marketplace (CCM)). For the avoidance of doubt, it does not apply to the processing of personal data by Zalando SE; please refer to Zalando SE’s privacy notice.
When using the website for information purposes only, i.e. if you do not provide us with information, we only collect the data that your browser transmits to our server. If you view our website, we collect the following data:
This data will be processed by us for the following purposes:
This data may only be personally identifiable via the IP address. Depending on your way of access to the Internet, the IP address may be completely anonymous, or your access provider stores the assignment of a dynamic IP address to you. In the latter case, combining the above-mentioned data with that of your access provider can eventually make a connection between you personally and the above-mentioned data. However, we will only initiate this if this is appropriate in individual cases for the purposes of legal prosecution, and we will otherwise only cooperate in this if this is ordered by competent authorities or courts in individual cases.
The legal basis for the provision of the website is the Performance of Contract.
For the other purposes, the legal basis is the Legitimate Interest in keeping the website and the underlying systems secure, and to improve the usability and performance of the website. For these purposes, the IP address will be anonymized (by truncation of the last octet) at the earliest possible point in time. Under no circumstances do we use this data collected for the purpose of drawing conclusions about you personally.
The data will be stored until the end of the calendar month following use and then be deleted or anonymized (unless required in individual cases for the purpose of legal prosecution) within two working days.
4. Collabary Platform Registration
If you register with us, we additionally collect the following information from you:
The data will be processed in order to operate the service. It will be shared with potential advertisers with a view to conclude a cooperation between you and the advertiser and/or ZMS as an advertising agency. The legal basis for the processing in this Section is Performance of Contract.
5. Creator Campaign Marketplace
Within the Collabary platform, you may actively choose to use the Creator Campaign Marketplace (CCM). On the CCM, you may offer your services as an as a creative content creator to third parties for the use as advertising material on the Zalando platform. In this case, Collabary will share your platform-public profile data with Zalando SE and with potential advertisers. We will also collect and process data about the use of your creative materials on Zalando (online fashion store, mobile apps and other sales channels, as the case may be) in order to calculate performance and compensation metrics. The legal basis for the processing described in this Section is Performance of Contract.
6. Information Stored on your Device (Cookies etc.) and tag manager technologies
6.1.1. Cookies in General
When you use the website, we eventually use technologies to store information on your device. We refer to these technologies as “cookies”, while, for the purpose of this Privacy Notice, this also includes functionally similar technologies (e.g. HTML5 storage objects). Our web server supplying the website can store cookies on your computer or mobile device, respectively. The cookie data are then transmitted back if your computer or mobile device requests information from our servers, so that cookie data can be processed in order to provide the requested information.
If you use the website, you can inspect the cookies in your internet browser. You can also adjust your browser settings to accept cookies or not. Also, we ask you whether or not you want to accept cookies on our Website (your choice is stored in a cookie).
6.1.2. Session Cookie
We use a session cookie that is non-persistent (i.e. will be deleted automatically if you close your browser); this cookie is technically necessary to operate the website, and you cannot opt-out from this cookie. It is a first-party cookie (i.e. a cookie that is only functional towards our servers).
6.1.3. Google Analytics
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout ; furthermore, you also have the option of preventing future collection of your data when visiting this website by using the following opt-out cookie: Disable Google Analytics; these possibilities to opt-out from Google Analytics data collection do on no way limit your right to withdraw your consent towards us.
6.2. Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed through an interface. Google Tag Manager only implements tags, but does not set cookies and does not collect any personal information. Google Tag Manager triggers other tags that may collect personal information. However, Google Tag Manager does not access this information. Any cookies or tracking disabled at domain or cookie level will remain disabled even when implemented with Google Tag Manager.
7. Contact Form and E-Mail
When you contact us by e-mail or via a contact form, we will store and process your e-mail address and, if you provide it, your name and telephone number in order to respond to your message.
We will restrict the processing of the data arising in this context after processing is no longer necessary. Your message and our response will further be stored in order to fulfill legal obligations (German trade and tax laws, §§ 257 HGB, 147 AO) for the duration of six full years, and afterward be deleted.
8. Legal Bases
We refer to different legal bases in this Privacy Notice. Such terms refer to certain provisions of the General Data Protection Regulation (GDPR):
9. Withdrawal of Consent and Objection to Data Processing
9.1. If you have given your consent to the processing of your data and/or the receipt of marketing e-mails, you can withdraw your consent at any time with effect for the future. To do this, notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
9.2. To the extent we base the processing of your personal data on a Legitimate Interest, you may object to the processing. To do this, notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer. If you wish to file such an objection, we kindly ask you to explain the reasons why your interest outweighs ours. In the event of your objection, we will check the situation and either stop or adjust our processing of your data, or point out to you our overriding interest, on the basis of which we will continue our processing.
10. Your rights
You are entitled to request from us:
If you wish to exercise one or several of these rights, please notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
If you wish to complain about data processing, please notify (e.g. by e-mail) the Controller mentioned under 1. above or its data protection officer.
You also have the right to file a complaint with a data protection authority. The responsible authority for the Controller is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information).
At least within the European Economic Area (EEA), you may also choose to file your complaint with any other data protection authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.