​

This Data Privacy Notice describes the collection and further processing of personal data by Kristian Kiel. In the event that the activities covered by this notice are governed by other data protection policies, are evident from the circumstances, or are governed by applicable laws outside of the European Union and the European Economic Area, then such applicable law and resulting policies shall control. The term personal data shall include all information relating to an identified or identifiable person.

​

This Data Privacy Notice describes in Section I processing of personal data by Kristian Kiel in general. Section II contains specific provisions for specific applications (e.g. online-shop, newsletter and banner advertisment).

If you provide Kristian Kiel with personal data of other persons, for example data about the receiver of a gift, please provide their personal data to Kristian Kiel only if you are allowed to do so pursuant to applicable data protection laws and only if the other person would agree to you providing its personal data to Kristian Kiel for the purposes the data are collected and the processing of its personal data according to our data privacy notice.

 

I.  GENERAL PROVISIONS

1.  CONTROLLER, DATA PROTECTION OFFICER

​

Every website (including online-shops and mini sites for special offers), every presence on social media, multimedia portals, chatbots and every application of Kristian Kiel (each a WEBSITE) has a controller within Kristian Kiel with respect to collecting personal data according to the EU General Data Protection Regulation (GDPR) (or comparable provisions according to applicable data protection laws). Unless provided otherwise on the WEBSITE (according to the imprint, the terms of use, etc.) or under Section II below, Kristian Kiel UK LTD, 20-22 Wenlock road, London, N1 7GU is the controller for the Online-Shops www.kristiankiel.net and www.kristiankiel.com and kristiankiel.co.uk.

Kristian kiel has not appointed a data protection officer according to article 37 GDPR.

​

Any inquiry, claim or concern regarding data protection at Kristian kiel (all companies and affiliates) can be addressed to the following contact points:

​

•    The Group Data Privacy Team at customerservice@kristiankiel.net

•    The contact shown on the imprint of the respective website;

•    The Group Data Privacy Team at Kristian Kiel UK LTD, 20-22 Wenlock road, London, N1 7GU

​

2.  PROCESSING OF PERSONAL DATA    

Kristian Kiel collects and processes personal data of:

​

•    users of Kristian Kiel registered WEBSITES; 
•    users registered with a Kristian Kiel website (e.g. if he or she creates a user account); 
•    individuals purchasing and receiving/benefitting from products and services of Kristian Kiel; 
•    potential or actual parties interested in products and services of Kristian Kiel; 
•    recipients of Kristian Kiel newsletters; 
•    participants in research campaigns and opinion surveys conducted by Kristian Kiel; 
•    participants in courses, seminars and other trainings organized by Kristian Kiel;  
•    users of WIFI provided at Kristian Kiel physical locations; 
•    registered participants of any customer loyalty programs or individuals purchasing or using customer loyalty programs of Kristian Kiel (CUSTOMER PROGRAM)

​

The personal data of CUSTOMERS is generally collected directly by Kristian Kiel during the course of using the WEBSITE, as well as in stores or at events of Kristian Kiel as well as through direct communication such as email, telephone or in any other way. Personal data can also be collected indirectly, such as through third party processors, (e.g., Kristian Kiel PARTNERS (as defined further below, including wholesalers, dealers, retailers, suppliers and further business partners such as customer services vendors).  Kristian Kiel also collects data when the CUSTOMER making the purchase does not correspond with the person benefitting from the purchase or if the purchase is shipped to a different person (e.g. as a gift), based on the recommendation of a third party (e.g. recommendation by family or friends of the CUSTOMER) or through further acquisition of supplementary information from third party data sources (e.g. social media).

​

In particular, the following categories of personal data are processed by Kristian Kiel:

​

•  Personal data and contact information including but not limited to first and last name, maiden name, address, residence, telephone number, email address, age, date of birth, gender, marital status, relatives, contact in case of emergency, pictures;

•  Data pertaining to orders and purchases including but not limited to payment information, credit card details and other payment details (in accordance with other laws and regulations), billing and shipping address, products and services ordered and purchased, information and queries and complaints relating to products and services, or respective contracts entered into such as warranty claims, after sales services, repairs, customer care and services, rescissions and disputes;

•  Data in connection with product and services marketing including but not limited to information relating to newsletter and other communication channels, opt-ins and opt-outs, invitations to and participations at events and special activities (as far as they are not part of a customer loyalty program), personal preferences and interests, and customer segmentation information;

•  Data concerning the use of the WEBSITE including but not limited to the IP address and other user identification (e.g. user name of social media, MAC address of smartphones or computers, cookies), date and time of WEBSITE visits, visited sites and contents, and referring websites;

•  Data in connection with communication including but not limited to preferred means of communication, correspondence and communication with Kristian Kiel (including records of the communication);

•  Data which was collected in connection with a customer program including but not limited to membership numbers, access codes (including passwords), preferred language, number of gift certificate, date and duration of the membership, payment information of the CUSTOMER or a potential third party, information concerning the recipient of a gift, number of visits of the WEBSITE, purchase history, products acquired (all WEBSITE accounts, activities and events for which a CUSTOMER must register with his or her personal data and thus enter into a contract with Kristian Kiel shall be deemed a customer program for the purposes of this policy, other than traditional customer loyalty programs); 

together CUSTOMER DATA.

​

In addition, Kristian Kiel collects:

​

•  Data of users of the WEBSITE, who do not register with Kristian Kiel (VISITOR) but may constitute personal data for example with social media (VISITOR DATA), the provisions of this notice regarding data collected from a CUSTOMER in connection with the use of the WEBSITE shall apply accordingly even though the identification of a VISITOR usually is not possible for Kristian Kiel;

•  Information pertaining to employees and other individuals acting on the part of wholesalers, dealers, retailers, suppliers and further business partners of Kristian Kiel (hereinafter natural persons shall be referred to as PARTNERS, their data as PARTNER DATA) including but not limited to contact details, information regarding their function, information relating to the previous contact with these individuals, data regarding marketing activities (e.g. receipt of newsletters), information regarding business transactions, requests, offers, tenders, conditions and contracts, information related to professional or other interests of the individuals.

​

Within the framework of their business relationship, CUSTOMERS will be required to provide CUSTOMER DATA necessary for the establishment and execution of the contractual relationship and the fulfilment of the associated contractual obligations or if required by law. Without these data, Kristian Kiel will generally not be able to conclude or execute the contract with the respective CUSTOMER. This also applies analogously to the PARTNER DATA as far as business relations with the wholesalers, dealers, retailers, suppliers and business partners of Kristian Kiel are concerned; contracts in principle cannot be concluded and processed without information on their employees and other contacts. As any access to the WEBSITE is logged, connection data (such as the IP address) will always be logged; this is done automatically during the use and cannot be deactivated for individual VISITORS, CUSTOMERS or PARTNERS.

​

3.  PURPOSE OF PROCESSING AND LEGAL GROUNDS

​

3.1. PURPOSE of the processing

​

In accordance with applicable law, Kristian Kiel may process CUSTOMER DATA for all lawful PURPOSES including but not limited to the following:

​

•    In connection with services offered, conclusions of contracts (for example purchases), executions of contracts (for example purchase contracts and contracts regarding the participation at customer programs and events), maintenance and development of customer relations, communication, customer service and support, promotions, advertisement and marketing (including newsletters and mailing of promotional materials); 
•    Management of the users of the WEBSITE and other activities in which CUSTOMERS participate, operation and enhancement of the WEBSITE (including the provision of functions which require identifiers or other personal data) and additional IT systems and identity verifications;   
•    protection of CUSTOMERS, employees and other individuals and protection of data, secrets and assets of and entrusted to Kristian Kiel, and the protection of the safety of systems and premises of Kristian Kiel; 
•    compliance with legal and regulatory requirements, including the internal rules of Kristian Kiel, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities;
•    sale or acquisitions of business divisions, companies or parts of companies and other corporate transactions and the transfer of CUSTOMER DATA associated therewith; and
•    for other lawful purposes where such processing was evident from the circumstances or indicated at the time of the collection.

(together the PURPOSE OF CUSTOMER DATA PROCESSING).

​

3.2. LEGAL GROUNDS of processing

​

Kristian Kiel uses the CUSTOMER DATA for the PURPOSE OF CUSTOMER DATA PROCESSING based on the following LEGAL GROUNDS:

​

•    performance of contracts;
•    compliance with legal obligations of Kristian Kiel;  
•    consent of the CUSTOMER (only insofar as the processing is based on a specific query and can be

withdrawn at any time, for example the receipt of newsletters for which the CUSTOMER has registered for);

legitimate interests of Kristian Kiel, including but not limited to

o    purchase and shipment of products and services, also in connection with individuals who are not direct contractual partners (such as e.g. individuals receiving a gift); 
o    advertising and marketing activities; 
o    efficient and effective customer support, maintenance of contact and other communication with CUSTOMERS outside of the processing of contracts; 
o    understanding CUSTOMER behavior, activities, concerns and needs, market studies;  
o    efficient and effective improvement of existing products and services and development of new products and services; 
o    pefficient and effective protection of CUSTOMERS, employees and other individuals as well as protection of data, secrets and assets of or entrusted to Kristian Kiel, protection and safety of systems and premises of Kristian Kiel; 
o    maintenance and secure, efficient and effective organization of business operations including a secure, efficient and effective operation and successful further development of the WEBSITEs and other IT systems; 
o    reasonable corporate governance and development; 
o    successful sale and acquisition of business units, companies or parts of companies and other corporate transactions; 
o    compliance with legal and regulatory requirements and internal rules of Kristian Kiel; 
o    concerns regarding the prevention of fraud, offences and crimes as well as investigation in connection with such offences and other improper conduct, handling of claims and actions against Kristian Kiel, cooperation in legal proceedings and with public authorities as well as the prosecution, exercise of and defense against legal actions.

​

In accordance with applicable data protection laws, Kristian Kiel may process VISITOR DATA for the purpose of maintaining and developing the WEBSITE (including the provision of functions which require identifiers or other personal data), for statistical analysis regarding the use of the WEBSITE as well as for combating abusive conduct, for purposes of legal investigations or proceedings and for the response to inquiries of public authorities. The VISITOR DATA shall be processed in accordance with the principles set out for CUSTOMER DATA above.

​

In accordance with applicable data protection laws, Kristian Kiel may process PARTNER DATA for the purpose of entering into and performance of contracts and other business relationships with PARTNERS, promotions, advertisement and marketing, communication, invitation to events and participation in promotions for PARTNERS, organization of joint activities, compliance with legal and regulatory requirements and internal rules of Kristian Kiel, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities, for the sale or acquisition of business units, companies or parts of companies and other corporate transaction and related transfers of PARTNER DATA. The PARTNER DATA shall be processed in accordance with the principles set out for CUSTOMER DATA above.

​

All the purposes of processing shall be applicable for Kristian Kiel, i.e. not only for the company which initially collected the personal data. Personal data of CUSTOMERS, VISITORS and PARTNERS is collected for the purpose of Kristian Kiel  subject to this data privacy notice, any other policies developed by Kristian Kiel and pursuant to applicable data protection laws.

​

4.  TRANSFER AND DISCLOSURE OF DATA 

​

In accordance with applicable data protection laws, Kristian Kiel may transfer CUSTOMER DATA, VISITOR DATA and PARTNER DATA to the following categories of third parties who process PERSONAL DATA in accordance with the PURPOSE OF DATA PROCESSING on behalf of Kristian Kiel or for their own purposes:

​

•    service providers (within Kristian Kiel as well as external), including processors;
•    wholesalers, dealers, retailers, suppliers and other business partners; 
•    customers of Kristian Kiel; 
•    local, national and foreign authorities;
•    media; 
•    the public including visitors of WEBSITES and social media of Kristian Kiel; 
•    industry organizations, associations, organizations and other committees; 
•    acquirers or parties interested in acquiring business units, companies or other parts of Kristian Kiel; 
•    other parties in potential or actual legal proceedings; 
•    other Group companies of Kristian Kiel.

(together THIRD PARTIES).

​

Kristian Kiel may disclose CUSTOMER DATA, VISITOR DATA and PARTNER DATA within Kristian Kiel as well as to THIRD PARTIES and in every country worldwide. If data is disclosed to countries that do not guarantee adequate protection, Kristian Kiel will ensure adequate protection of data disclosed of CUSTOMERS, VISITORS or PARTNERS by putting adequate contractual guarantees in place, (e.g., on the basis of EU standard clauses), binding corporate rules, on the basis of the EU-U.S. and the Swiss-U.S. Privacy Shield Framework for transfers to THIRD PARTIES based in the U.S., or transferring data pursuant to consent, conclusion or performance of a contract, or in connection with the determination, exercise or enforcement of legal claims, or pursuant to overriding public interests, or  in order to protect the integrity of these individuals. The CUSTOMER, VISITOR or PARTNER can obtain a copy of the contractual guarantees from or will be advised where to obtain such copies by the contact points named above (see para. 1 above). Kristian Kiel reserves the right to redact such copies for applicable legal or secrecy reasons.

​

5.  RETENTION OF DATA

​

In general, Kristian Kiel retains personal data for no longer than it is necessary for the purposes for which the personal data are processed. Notwithstanding the general principle, Kristian Kiel may process personal data for longer periods subject to the following rules and obligations: Kristian Kiel retains personal data as long as Kristian Kiel (i) is obligated to do so (by way of contract, law or other provisions) or (ii) has an overriding interest (e.g. an interest for reasons of proof in case of claims, documentation of compliance with certain legal or other requirements, an interest in non-personalized analysis). Deviating rules are reserved with respect to anonymization or pseudonymization of personal data subject to applicable law.

As a rule for contract related CUSTOMER DATA and PARTNER DATA (including business records and communication) Kristian Kiel retains personal data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship unless (i) a shorter or longer statutory storage obligation is applicable on a case-by-case basis, (ii) the retention is required for reasons of proof or another valid reason based on applicable law, or (iii) the deletion of the data is required earlier (because e.g. the data is no longer required or Kristian Kiel is required to delete the respective data).

  

As a rule for operational data containing CUSTOMER DATA, VISITOR DATA or PARTNER DATA (e.g. protocols, logs), Kristian Kiel retains personal data for a period of 3 - 12 months.

​

6.  COOKIES, GOOGLE ANALYTICS AND SOCIAL PLUG-INS

​

Kristian Kiel uses cookies on its WEBSITE. Cookies are a widespread technique that allocates an identification to the browser of the user of a WEBSITE which the user saves and shows upon request. On the one hand, Kristian Kiel uses session cookies which are automatically erased when the user closes the WEBSITE and which enable the server to establish a stable connection to the user (so that the content of a shopping basket is not lost, for example) as long as he or she browses on the WEBSITE. On the other hand, Kristian Kiel also uses permanent cookies which are only erased after a period defined per WEBSITE. Permanent cookies allow the saving of certain settings (e.g. language) for several sessions or allow for an automated log-in. The user consents to the application of permanent cookies through the use of the WEBSITE and the respective functions (e.g. language settings and automated log-in). The user may block or delete the application of cookies on his or her browser but this activity may impair the use of the WEBSITE.

​

In accordance with applicable law, Kristian Kiel may install coding in newsletters and other marketing email which allow it to determine if the recipient has opened an email or downloaded pictures contained in the email. However, the recipient may block this application in his/her email application. In any case he/she consents to the application of this technology by way of receiving newsletters or other marketing related emails.

​

In the event that Kristian Kiel places advertisements of third parties on the WEBSITE (e.g. banners) or  places an own ad on the website of a third party, cookies from companies specializing in the use of such advertisement may be employed. Kristian Kiel will not disclose personal data to such companies, i.e. they shall only place a permanent cookie with users of the WEBSITE in order to recognize users and do so in the sole interest of Kristian Kiel. This allows Kristian Kiel to place aimed advertisements for these individuals on external third party websites (e.g. in connection with products for which these individuals showed an interest in the online-shop). Kristian Kiel will not disclose personal data to the operators of external websites.

​

Kristian Kiel may use Google Analytics or similar services on its WEBSITE. These applications are third party services which allow Kristian Kiel to measure and analyze the use of its WEBSITE. The provider of these services may be located in any country worldwide (in the case of Google Analytics which is operated by Google Inc. it is the U.S., www.google.com). The service provider uses permanent cookies for these applications. Kristian Kiel will not disclose any personal data to the service provider (who will also not save any IP addresses). The service provider may, however, monitor the use of the WEBSITE by the user and combine this data with data from other websites monitored by the same service provider which the user has visited and the service provider may use these findings for its own benefits (e.g. control of advertisement). The service provider knows the identity of the user who has registered with the service provider. In this case the processing of personal data will be the service provider's responsibility and data shall be processed pursuant to data protection and privacy laws and according to the data protection policies of the service provider (for Google see policies.google.com/privacy). The service provider will provide data on the use of the WEBSITE to Kristian Kiel.

​

In addition, Kristian Kiel may use plug-ins from social media networks such as Facebook, Twitter, Youtube, Google+, Pinterest or Instagram on its WEBSITE. In the default setting of the WEBSITE plug-ins are deactivated; the user can thus choose when to activate them. Should the user do so, the social media providers are able to establish a direct connection to the user during his or her visit on the WEBSITE, which allows the provider to be aware of the user's visit and may analyze the respective information. The subsequent processing of the personal data will be conducted in the responsibility of the social media provider pursuant to data protection and privacy laws and according to its data protection policies published on its website (such as www.facebook.com/; www.twitter.com/; www.youtube.com/; www.google.com/; www.pinterest.com/; www.instagram.com/).

You can find more information about Cookies used by Kristian Kiel and how to manage your Cookie settings on our WEBSITE.

​

7.  RIGHTS OF THE CUSTOMER, VISITORS AND PARTNERS

​

Any affected individual, including any CUSTOMER, VISITOR and PARTNER, may request information from Kristian Kiel as to whether data concerning them is being processed. In addition, they have the right to request the correction, destruction or restriction of personal data regarding them as well as to object to the processing of personal data. Should the processing of personal data be based on consent, the affected individual may withdraw consent at any time. In countries of the EU and EEA the affected individual may, in certain cases, have the right to obtain data generated during the use of online services in a structured, common and machine-readable format which allows for further use and transfer. Request in this respect shall be submitted to the contact point (see para. 1 above).  Kristian Kiel reserves the right to restrict the rights of the affected individual in accordance with applicable law and e.g. not to disclose comprehensive information or not to delete data.   

In the event that Kristian Kiel makes an automated decision with respect to a certain individual which may have a legal effect for the affected individual or seriously affect him or her in a similar way, the affected individual shall have, in accordance with applicable law, the right to communicate with a controller of Kristian Kiel and to request a reconsideration of the decision or to request the prior evaluation by the controller. In this case the affected individual may no longer be able to use certain automated services. The individual will be informed thereof subsequently or separately in advance.

Any affected individual may also raise a complaint with the competent data protection authority, which in the case of a Kristian Kiel controller in the UK is the Information Commissioners Office (https://ico.org.uk/).

 

8.  CHANGES TO THE DATA PRIVACY NOTICE

​

Kristian Kiel reserves the right to amend this Data Privacy Notice at any time and without prior notice or announcement. The latest version posted on the Kristian Kiel WEBSITE shall be applicable.

Should the Data Privacy Notice form part of an agreement with CUSTOMERS and PARTNERS, Kristian Kiel may inform them of an update or amendments by email or in another appropriate manner. The amendments shall be deemed to have been accepted unless an objection is raised within 30 days of notification. In case of objection Kristian Kiel shall be free to terminate the agreement exceptionally and with immediate effect.

​

II. Specific Provisions

​

The following provisions shall supplement the general provisions in Section I for certain activities of Kristian Kiel. In the event there is any inconsistency, the following provisions shall control.

​

1.  ONLINE-SHOPS

​

The creditworthiness of CUSTOMERS may be evaluated automatically in online-shops in order to offer the purchase on account based on this decision. In this case the credit rating is evaluated on the basis of information from an external credit rating agency, which will provide Kristian Kiel with a credit score of the respective CUSTOMER. The agency will calculate the score based on a secret formula based on data on the payment history of the CUSTOMER, its debt and insolvency history and possible limitations of its legal capacity. Should the score be below a certain threshold no payment by invoice will be offered. In this event the CUSTOMER may contact the contact person shown on the imprint of the respective website of the online-shop if he/she is not ready to accept the decision.

​

Online shops of Kristian Kiel may automatically decide whether to enter into purchase agreements. However, Kristian Kiel does not deem this an automated individual decision (according to article 22 of the GDPR).

​

2.  PARTNERS, INCLUDING WHOLESALERS, RETAILERS, DEALERS, CUSTOMER SERVICE VENDORS ETC.

​

As previously indicated, CUSTOMER DATA, PARTNER DATA and VISITOR DATA is generally collected directly by Kristian Kiel but also indirectly, (e.g. when Kristian Kiel requests THIRD PARTIES to act as processors, such as Kristian Kiel’s PARTNERS). In these cases, Kristian Kiel’s PARTNERS process personal data on behalf and under instruction of Kristian Kiel and are bound by specific processor agreements covering the terms and conditions of their duties in a manner to ensure the protection of the rights of our CUSTOMERS, PARTNERS and VISITORS and the processing and security of their personal data in accordance with applicable data protection laws.

​

3.  NEWSLETTER AND BANNER ADVERTISEMENT

​

Kristian Kiel may send newsletters or other commercial communications in connection with its products and services to CUSTOMERS and PARTNERS. In accordance with applicable law, Kristian Kiel reserves the right to do so without prior consent of existing customers and business partners. However, the respective customers and business partners may object to a further mailing of newsletters or other commercial communications at any time through their account on the respective WEBSITE or through the link indicated in every mailing. However, the termination of one newsletter may not entail the termination of other newsletters.

Kristian Kiel reserves the right to place personalized advertisement during WEBSITE visits. Such banner advertisements displayed to the CUSTOMER contains products offered on the WEBSITE which have previously been looked at by the CUSTOMER. The advertisement is generated by Kristian Kiel by the means of cookies (see Section I para. 6 above).