- Leveringstider / tilgængelighed
- Retur / Reklamation
- Kunde konto
- Sikkerhed Og Databeskyttelse
- Service og Rådgivning
- Spørgsmål & Svar
- Om Blue Tomato
- Job & Internships
- Download service
- Affiliat program
- Link Os
- Juridiske spørgsmål
Thank you for your interest in our website and our company. Your privacy is very important to us. We strictly adhere to the requirements of the GDPR and process data according to its principles.
You will find detailed information about "Blue Tomato" and the handling of your data below. You can also download the entire privacy statement in your own language here.
1. Who we are and who is responsible for data processing
a) Corporate structure and group of companies
Blue Tomato GmbH, FN 80499g (hereinafter referred to as Blue Tomato Austria) is an Austrian company based in Hochstraße 628, 8970 Schladming and part of the Zumiez Group, with the parent company Zumiez International, LLC based in Lynnwood (USA) and its subsidiary Zumiez Europe Holding GmbH based in Lucerne (Switzerland). Zumiez International LLC and its subsidiaries in Europe form a group of undertakings (hereinafter referred to as Blue Tomato) within the meaning of the GDPR.Blue Tomato Austria is the operator of the Blue Tomato website and all online presences and is operationally responsible for all subsidiaries of the Zumiez Group in Europe. The head office and main establishment within the meaning of the GDPR is located in Austria. All companies in the Group are committed to the protection of personal data within the framework of "binding corporate rules". Further information on how to assert your rights can be found under point 6.
b) Data protection officer
Blue Tomato Austria determines the means and purposes of data processing for all subsidiaries of the Zumiez Group in Europe. Therefore, the company responsible for data processing is
Blue Tomato GmbH (FN 80499g) Hochstraße 628, 8970 Schladming (Austria) Email: email@example.com Phone: +43 3687-2422-333
c) Data protection officer appointed by the Group
Mag. Matthias Zezula Hochstraße 628, 8970 Schladming (Austria) Email: firstname.lastname@example.org Phone: +43 3687-2422-333
2. Scope of the privacy statement
This privacy statement applies to the Blue Tomato Group within Europe, to all Blue Tomato Austria websites and all our other online appearances, including social media sites and in particular the Facebook fan page.
3. What data does Blue Tomato process and how is it collected?
a) How does Blue Tomato collect personal data? We either collect the data ourselves, e.g. through your entry on our website, announcements in the store etc., or we obtain it from a third party, e.g. through an order at Amazon or eBay or via Facebook-Connect. Furthermore, we may also process data that we obtain from publicly available sources.
b) What data does Blue Tomato process? In compliance with data minimisation, Blue Tomato only processes data that is required for the performance of the contract, the fulfilment of legal obligations or within the scope of our legitimate interests, or if you have expressly agreed to this. Wherever possible, Blue Tomato (pseudo)-anonymises your data. You can read more on the subject under point 12, Security measures. Blue Tomato does not process any special categories of customer data as laid out in Art. 9 GDPR.
The personal data processed by Blue Tomato includes:
- personal data such as name, address, birthday, place of birth and delivery address,
- physical data such as weight, height, shoe size, clothing size, but only to the extent that it will not be possible to identify you personally,
- contact details such as telephone number, email address,
- data and information from electronic data interchange, such as IP addresses, cookies, pixels, apps, etc;
- order data from purchase orders,
- advertising and sales data,
- general communication data, such as inquiries and consultations via Customer Service,
- data which Blue Tomato collects itself or through its partners, such as purchasing behaviour, payment behaviour and interests,
- data for the fulfilment of legal and official obligations,
- data for the fulfilment of contractual obligations such as warranties or guarantees,
- credit card data, which is masked before processing and used only within the context of abuse control,
- other account data, only for bank deposits and (return) transfers.
4. For what purpose do we process data and what is our legal basis (justification) for doing so?
Blue Tomato wants to offer you an optimum product range and the best possible selection of products and services, specifically tailored to your preferences and interests. We must also take into account country-specific circumstances such as language, currency and, if necessary, different regulations. We process data on the basis of the above-cited legal grounds and the purposes associated with them.
a) For the fulfilment of (pre)contractual obligations (Art. 6 (1) lit b GDPR)
- Fulfillment of your purchase according to our GTCs,
- Advice and information in the buying process,
- Provision of services, such as travel and courses,
Legitimate interests of Blue Tomato or a third party are:
c) Within the scope of your consent (Art. 6 (1) lit a) Apart from points a) and b), Blue Tomato only processes your personal data after you have given us your consent, e.g. for sending newsletters or using cookies (more on this under point 10, Cookies policy). Your consent can be revoked at any time. Please also refer to point 6 in this respect.
5. Who receives your data?
a) General provisions Blue Tomato has clear rules on who may receive personal data. Within the Blue Tomato Group, your data is made available only to those departments and employees who require it to fulfil contractual, legal and supervisory tasks and obligations and to safeguard the legitimate interests listed under point 3 b). Furthermore, your data is also made available to processors commissioned by Blue Tomato, i.e. companies that support us in fulfilling our corporate goals and tasks, such as IT companies, payment providers, suppliers, deliverers, printers, to the extent necessary to perform the tasks assigned to them. Blue Tomato concludes written agreements with these processors which oblige them to comply with the same requirements that apply to Blue Tomato. In addition, Blue Tomato also makes personal data available to third parties with whom Blue Tomato cooperates within the scope of the aforementioned processing purposes or who may have a legitimate interest within the scope of the cooperation, e.g. debt collection agencies, payment providers or trading platforms such as Amazon or eBay, if you purchase from Blue Tomato via these platforms. If there is a legal or official obligation, public authorities may also receive data from us.
b) Data transfer to third countries Data will only be transferred to countries outside the EU if the country has an adequate level of protection according to Art. 45 GDPR or if other safeguards according to Art. 46 GDPR appropriately protect your data. Blue Tomato has drawn up binding corporate rules within the Group, which must be approved by the data protection authorities in accordance with Art. 46 (2) lit b, in addition to the standard data protection clauses pursuant to Art. 46 (2) lit c. Blue Tomato transmits data on the basis of these safeguards.
c) Other data transmission to the USA For the sake of completeness, we would like to point out that in the USA the surveillance measures of US authorities allow the general storage of all personal data of all persons whose data has been transmitted from the EU or Switzerland to the USA. This is done without differentiation, restriction or exception with respect to the aim pursued and without an objective criterion that would make it possible to restrict the US authorities' access to data and its subsequent use to very specific, strictly limited purposes which justify the interference associated with both access to, and use, of such data. Furthermore, we would like to point out that, in the USA, there are no legal remedies available to data subjects which would allow them to gain access to the data concerning them and to obtain its correction or deletion, and that there is no effective legal protection against general access rights by US authorities. We explicitly draw your attention to this legal and factual situation so that you can make an informed decision when you agree to the use of your data. We would also like to expressly point out that the USA and in particular companies outside the "EU-U.S. and Swiss-U.S. Privacy Shield Framework" do not provide an adequate level of data protection.
6. For how long do we process and store data?
We retain your data for the duration of the business relationship and in order to carry out advertising activities within the framework of legitimate interests, for as long as you do not exercise your right to object to this processing according to Art 21 GDPR or, where you have given us your consent, if you do not revoke it. For more information, refer to point 6. Longer retention periods may be required due to legal storage and documentation obligations. In particular, this refers to the Austrian Federal Fiscal Code (BAO) and the Business Code (UGB) as well as other national and European legal requirements. Due to our warranty obligations and the guarantees of our suppliers, or on the basis of statutory regulations, retention periods of 3 years (short period of limitation) or, in individual cases, also considerably longer retention periods (long period of limitation) may be necessary.
7. Your rights as data subject.
The GDPR grants you comprehensive protection and information rights and particularly the right to object and withdraw in accordance with point g). You can contact our data protection officer with your request or complaint at any time. The supervisory authority responsible for the Group is the Austrian data protection authority. They can also be contacted in the event of a complaint. http://www.dsb.gv.at Your rights, which you can normally exercise free of charge, in detail:
a) Right to be informed according to Art. 15 GDPR You have the right to obtain information free of charge concerning the personal data stored about you and, if necessary, the right to correct, block or delete it, and to withdraw given consents. Please contact our data protection officer if you would like to know how your data is used.
b) Right to rectification according to Art. 16 GDPR Is your data no longer correct, do you want to exercise your rights or do you have anything else on your mind? Just let our Customer Service staff know. Email: email@example.com Phone: +43 3687-2422-333
c) Right to erasure or restriction according to Articles 17 and 18 GDPR Upon request and under the conditions of Art. 17 GDPR, we will delete your data unless we are entitled to its further use. Under the conditions of Art. 18 GDPR, where we cannot delete the data, you can request a restriction of our data processing. We will also always inform data recipients of your request and ask them to comply with it.
d) Right to data portability: regulated in Art 20 GDPR You can request us to make your personal data available to you.
e) Right to object in accordance with Art. 21 GDPR and to withdraw consent in accordance with Art. 13 GDPR If the processing of your data is based on your consent according to Art. 6 (1) lit a, you can withdraw this consent at any time. If we process your data on the basis of our legitimate interests, you can object to such processing in accordance with Art. 21 GDPR. We will then immediately check whether your request is justified. To exercise your right to withdraw and object, simply contact our Customer Service or the Data Protection Officer.
f) Automated individual decision-making, including profiling, in accordance with Art. 22 GDPR You have the right not to be subject to a decision based on automated processing and profiling if this has legal effect or significantly affects you in a similar manner.
Blue Tomato uses automated decision making and profiling according to point 9.
8. Must you provide us with data?
We need your data to process your order. When you make data available to us, you are obliged to provide truthful information. In the case of wrong information, i.e. if the age you indicate is incorrect, we are entitled to assert any resulting damages and to also file a complaint, if this is of criminal relevance. You are not obliged to provide data or to give your consent for processing if the data is not relevant for the fulfilment of the contract. However, due to the different age limits for approval and legal capacity, we may need to know your age in some cases.
9. Automated decision-making and profiling.
a) Automated decision-making. Automated decision-making only takes place if you decide to purchase on account.
- necessary cookies (first party cookies only)
- essential cookies (first party and third party cookies)
- Advertising cookies/pixels (third party cookies)
b) Cookies/pixels used by Blue Tomato In the following list we give you an extensive description of all the cookies/pixels used by Blue Tomato, in which personal data are used.
- Microsofts Windows Internet Explorer
- Microsoft's Windows Internet Explorer Mobile
- Mozilla Firefox
- Google Chrome for Desktop
- Google Chrome for Mobile
- Apple Safari for Desktop
- Apple Safari for Mobile
By using browser extensions such as Ghostery you can deactivate individual cookies and determine which cookies are set. Installing the extension is quick and easy and it is available for all major browsers. In the case of "third party cookies", the service providers themselves often offer deactivation options. The most important ones are listed under point d). In addition, Blue Tomato gives you the option of accepting or rejecting the use of a cookie via a cookie banner in each new session.
d) Website analysis and social media
Google Analytics is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files that are stored on your computer, to help the Blue Tomato website analyse how users use the site. The information collected by the cookie regarding the use of our websites (including your IP address) is usually transferred to a Google server in the USA and stored there. Blue Tomato points out that the code "gat._anonymizeIp();;" has been added to Google Analytics on the websites of Blue Tomato to ensure an anonymous collection of IP addresses (so-called IP masking). Your IP address is only recorded by Google in a shortened form, which guarantees anonymisation and does not allow any conclusions to be drawn about your identity. If IP anonymisation is activated on our websites, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use the mentioned information to evaluate your use of the Blue Tomato websites, to compile reports on the website activities for Blue Tomato and to provide other services associated with the use of websites and the Internet to Blue Tomato. The IP address that your browser transmits within the scope of Google Analytics is not merged with any other data held by Google. A transfer of this data by Google to third parties only takes place dur to legal regulations or within the scope of order data processing. Under no circumstances will Google match your data with other data collected by Google. With your consent you agree to the processing of the data collected about you by Google in the aforementioned manner of data processing and for the named purpose. You can prevent the storage of cookies by selecting the appropriate settings on your browser and other options as set out under point 10 c); however, Blue Tomato points out that in this case you may not be able to use all the functions on our websites to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link. For more information about Google Analytics and data protection, see http://tools.google.com/dlpage/gaoptout?hl=de.
DOUBLECLICK BY GOOGLE
WEBSITENANALYSE BY ECONDA, OPTIMIZELY UND INTELLIAD
For the user-oriented design and optimisation of this website, we use the solutions and technologies of econda GmbH (http://www.econda.de), Optimizely, Inc. (https://www.optimizely.com/) and intelliAd Media GmbH (www.intelliad.de) as well as Google Tag Manager to collect and store anonymised data and create user profiles from this data using pseudonyms. For this purpose cookies may be used, which allow the Internet browser to be recognised. However, user profiles are not merged with data about the bearer of the pseudonym without express consent of the visitor. In particular, IP addresses are made unrecognisable directly after receipt, which makes it impossible to assign user profiles to IP addresses. For the future, visitors to this website can object to this data collection and storage at any time under the following link:
USE OF SOCIAL MEDIA PLUGINS
We do not use social media plugins. The signs and logos of Facebook, Instagram, Pinterest, Twitter and YouTube visible on Blue Tomato websites are exclusively links to the pages of these services. If you click on one of these icons, the service provider will not receive any personal data from you. You can share and view Blue Tomato content there. By using the services of the respective provider you submit to their data protection regulations. See also our indications under point 12, Links to external websites.
e) Email marketing By subscribing to the newsletter, your email address will be used for our own advertising purposes until you unsubscribe from the newsletter. You can unsubscribe at any time by clicking on the "Unsubscribe" link at the end of a newsletter, without incurring any costs other than the transmission costs according to the basic rates of your access provider. As a newsletter subscriber, we will regularly send you carefully selected offers of similar products from our range by email. Blue Tomato has commissioned the service provider Emarsys to individualise and improve our newsletter design. By linking different communication channels, records are created using cookies, which enable Blue Tomato to inform you about current products and offers that meet your needs. By subscribing to the newsletter you also agree that we will forward your email address to Emarsys.
11. Our security measures
Your personal data is encrypted during the order process using "Secure Socket Layer" (SSL) over the Internet (address transmission is excluded for newsletter subscriptions). Here we use the highly secure 128-bit encryption (SSL 3.0, RC4) from GeoTrust. Credit card data are not stored, but are collected and processed directly by our payment service provider "Wirecard Central Eastern Europe GmbH". We protect our website and other systems using technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. In all processing activities, we observe the principles of the GDPR as laid out in Art. 5. and subject all processing activities to close scrutiny within the framework of our data protection management system. We also periodically carry out external data protection audits. Access to your customer account is only possible after entering your personal password. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others.
12. Links to other websites
Blue Tomato's websites contain links to websites of other companies. Blue Tomato has no influence on the design and content of these third party websites, nor do we have any control over how the providers of these websites handle your information. Therefore, our privacy statement and our responsibility and liability do not extend to linked websites. If you have any questions, please contact these companies directly.