Privacy Policy

ZOZO Germany GmbH i.L., Oranienburger Straße 66, 10117 Berlin, Germany, (“we”) operates the website zozo.com (the “Site”), accessible at https://zozo.com/.
With this privacy policy, we inform you about the personal data we collect when you visit our Site and how we process it. Thereby, we also fulfil our obligation to inform you pursuant to Arti-cle 13 General Data Protection Regulation (GDPR).

  1. Identity of the controller

    ZOZO Germany GmbH i.L.
    Oranienburger Straße 66,
    10117 Berlin,
    Germany

    liquidator@eu.zozo.com

  2. Purposes of processing, its legal basis and the period for which the data will be stored

    1. General use of the Site

      Generally, we do not store personal data while you use our Site with the exception that our webserver registers all connections to the Site automatically and collects the follow-ing technical information about your visit:
      • Your IP address;
      • The name of the files accessed;
      • Information about the transmission;
      • Date and time of the connection;
      • The amount of data transmitted;
      • The referrer; and
      • The web browser/user agent.
      We process this data to establish a connection to your device over the Internet. We store the aforementioned data in log files in order to ensure the security and integrity of our IT systems. The respective purposes of the processing also constitute our legitimate interests we pursue with it (Art. 6 par. 1 lit. f) GDPR). We retain our log files for 180 days and delete them thereafter.
    2. Contact

      You can contact us, for example, by writing an email. In such case, we will process the personal data you provide us with in order to answer your request. This may include es-pecially your name, email address, subject of your message and the message itself. We will retain your messages until we have fulfilled your request. Afterwards, we will delete it immediately. The processing for such purposes is based on Art. 6 par. 1 lit. f) GDPR, while the purposes of the processing also constitute our legitimate interests we pursue with it.
  3. Recipients and transfers to third countries

    We use IT service providers in order to present you our Site and all of its functions. If not stated otherwise in this privacy policy, we do not transfer personal data to third coun-tries.

  4. Rights of the data subject

    If the respective requirements are met, the GDPR grants you certain rights as a data sub-ject.

    Art. 15 GDPR – Right of access: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain information.

    Art. 16 GDPR – Right to rectification: You shall have the right to obtain from us without undue delay the rectification of inac-curate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

    Art. 17 GDPR – Right to erasure: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay.

    Art. 18 GDPR – Right to restriction of processing: You shall have the right to obtain from us the restriction of processing.

    Art. 20 GDPR – Right to data portability: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you shall have the right to transmit those data to another controller without hindrance from us. You shall also have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

    Art. 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

  5. Especially Art. 21 GDPR – Right to Object

    You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate inter-ests or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

    In such case, we shall no longer process the personal data unless we demonstrate com-pelling legitimate grounds for the processing, which override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or de-fence of legal claims.

    Where personal data are processed for direct marketing purposes, you shall have the right to object at any time for such marketing, which includes profiling to the extent that it is related to such direct marketing.

    If you wish to object to any processing of data, you may send us an email to one of our aforementioned email addresses.

  6. Obligation to provide us with personal data

    You have no statutory or contractual obligation to provide us with any personal data. However, we may not be able to provide you with our services if you decide not to do so.

  7. Existence of automated individual decision-making, including profiling

    We do not use automated individual decision-making, including profiling pursuant to Art. 22 GDPR, which produces legal effects concerning you or similarly significantly affects you.

  8. Internet specific processing or use of personal data

    1. Cookies

      For providing you the services of the Site we may use cookies. Cookies are small text files, which are transferred from the Site or third parties and stored on your device. Cookies cannot execute programs or infect your device with computer viruses. Some cookies are stored only for your current browser session and will be deleted once you close your browser. Other cookies may be stored on your device for a certain period. You can obtain more information on how long specific cookies are stored within your end device’s or browser software’s settings. We use cookies for different purposes. One purpose is to provide you with the functionality of our Site. Another purpose is analyzing your usage of our Site. These cookies are not strictly necessary for our Site to work properly, however, they give us new insights on how to improve our services. Typically, cookies do not contain personal data. However, if that may be the case in certain situation, the processing of such data has its legal ground in Art. 6 par. 1 lit. f) GDPR. The aforementioned purposes also constitutes the legitimate interests we pursue with them.

      We may use certain technologies on our Site that rely on the use of Cookies or similar technologies such as pixels or tags stored on your device by third parties. You can find more information on these technologies and for what purposes we use them below.

      If you wish to prevent us from storing cookies on your device, your web browser or device may provide you with settings to do so. You may find an instruction on how to change your settings in the help section of your browser or device. The respective settings only apply to the device you are currently using. If you use another device, change your web browser or reinstall your browser you may have to change the respective settings again. Please, be aware that not accepting cookies may lead to you not being able to use the Site and all its functions.

    2. Google Tag Manager

      On the Site we use the service Google Tag Manager (operated by Google Ireland, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google“)), which allows us to manage our website tags. Tags are small code snippets used on our Site that for example can be used to measure traffic and user behavior, provide online advertising, remarketing or to target specific audiences as well as to test and optimize our Site. Tags can be provided by Google itself or by third parties. However, Google Tag Manager does not process the data itself but only manages the tags used for processing. More information is accessible at http://www.google.de/tagmanager/faq.html and http://www.google.de/tagmanager/use-policy.html. In the following paragraphs, we explain the specific tags we use.
    3. Google Analytics

      We use Google Analytics, operated by Google to collect information about how users use our Site. The information generated by the cookie about your use of the Site will be transmitted to and stored by Google or one of its affiliates on servers in the United States. However, Google is certified under the EU-US-Privacy Shield. Hence, an adequate level of protection is ensured. This information also includes your IP address. However, as IP-anonymization is activated, your IP address will be truncated and therefore anonymized on systems within the European Union/ European Economic Area and as soon as technically feasible. Only in exceptional cases, the full IP address will be transferred to a Google server in the United States, and then shortened.
  9. Service Provider

    From 1 June 2019, messages you direct at ZOZO Germany GmbH i.L. via e-mail or at liquidator@eu.zozo.com will be accessed by an external service provider in order to perform our contractual obligations during the process of liquidation and to appropriately react to other material information. To the extent this is necessary for the performance of our contract with you or to safeguard legitimate interests, personal data contained in your message may be transferred to ZOZO Inc. (World Business Garden Marive West 16F, 6-1, Nakase 2-chome, Mihama-ku, Chiba-shi, Chiba 261-7116, Japan). According to a decision by the EU Commission which you can read here, the level of data protection in Japan is adequate. The legal basis for this processing of personal data is, if you have concluded a contract with us, Article 6(1)(b) GDPR, if not Article 6(1)(f) GDPR.

Berlin, May 2019

You can see the previous version of our privacy policy here.