Privacy Policy

Name of the responsible office

WhiteWall USA Inc.

c/o United Corporate Service, Inc.

800 North State Street, Suite 304

Dover, Delaware 19901

Kent County, Delaware

Phone: 888-861-4881

E-Mail: info@whitewall.com

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as a website user, our website uses an SSL or TLS encryption. Thus, data that you submit via this website is not readable for others. You will recognize an encrypted connection by the "https: //" address bar of your browser and by the lock icon in the browser bar.

Server Log Files

In server log files, the website provider automatically collects and stores information that your browser automatically sends to us. This information is:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the completion of a contract or precontractual measures.

Personal Data

To complete and execute your order, and for the purpose of sending e-mails in certain situations (such as notifications regarding order status), we process personal information you provide (title, first- and surname, address, e-mail address and phone number, payment details) in accordance with the conditions of the German data protection laws. We save the contract text and send you an e-mail containing the details of your order. You can view our T&C (General Terms & Conditions) here at any time, and can review your previous orders in your WhiteWall account if you registered when ordering. Your personal information, which after registering, you can enter, adjust, and delete in your password-protected area My WhiteWall, will be used exclusively for the implementation of the contract. Some of your information (title, first name and surname, address, telephone number) is made available to our logistics provider during the delivery of your order. The same applies to personal information transferred to us during communication (electronic or in print form).

Order

We use the data you provide to fulfil and process your order.

Registration on this website

To use certain features, you can register on our website. The transmitted data is used exclusively for the purpose of using the respective offer or service. Required information requested during registration must be given in full. Otherwise we will reject the registration.

In case of important changes, for technical reasons for example, we will inform you by e-mail. The e-mail will be sent to the address provided when registering.

The processing of the data entered during registration takes place on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of your already given consent is possible at any time. For the revocation, an informal message by e-mail will suffice. The legality of the data processing that has already been completed remains unaffected by the revocation.

We store the data collected during the registration throughout the period you are registered on our website. Should you cancel your registration, your data will be deleted. Legal retention periods remain unaffected.

Contact form

Data submitted via the contact form, including your contact details, will be stored to process your request or to be available for follow-up questions. No disclosure of this data will take place without your consent.

The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of the consent you have already given is possible at any time. For the revocation, an informal message by e-mail will suffice. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data submitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or you no longer need to back up your data. Mandatory statutory provisions - especially retention periods - remain unaffected.

Customer Satisfaction Surveys

After shipping your order, you will receive a one-time invitation by e-mail to participate in a voluntary customer satisfaction survey.

The data collected as part of customer satisfaction surveys are used to improve our services and will not be submitted to third parties. If you send us a request to delete your data to dataprotection@whitewall.com, the data from the customer satisfaction surveys will be anonymized. We reserve the right to comply with legal deadlines for data storage.

Newsletter Data

To send our newsletter, we need an e-mail address from you. It is necessary to verify the given e-mail address and to accept the newsletter. Supplementary data is not collected or is voluntary. The use of the data takes place exclusively for sending of the newsletter.

The data provided in the newsletter registration is processed exclusively on the basis of your consent (Art. 6 (1) lit. GDPR). Revocation of the consent you have already given is possible at any time. An informal message by e-mail will suffice for the revocation, or you can use the "unsubscribe" link in the newsletter. The legality of the already completed data processing operations remains unaffected by the revocation.

Data entered to set up the subscription will be deleted in the event of cancellation. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

Product Recommendations via email

To make existing customers aware of products from their area of interest, we inform them of these products by email. Existing customers will also receive these individual product recommendations if they are subscribed to our newsletter. We make the selection of individual product recommendations based on data and information: a) you have entered while shopping, and b) that are legally allowed to be used.

If you are no longer interested in our individual product recommendations, you can deactivate this service here at any time. Contact our customer service team: 888-861-4881.

Payment Details

In addition, in order to ensure maximum data protection, all payment details (e.g. account and credit card details) will automatically be deleted from our systems after the order and the payment have been processed and such information will have to be re-entered in the event of future transactions.

Images

WhiteWall will not use your image data in any way without your explicit consent. Image data you upload for personal use only, will not be used by WhiteWall for advertising or other purposes under any circumstances. The regulations differ with regards to images you offer for sale through WhiteWall and these differences can be found in our T&C.

Your Personal Account

In accordance with federal data protection laws you have the right to access, for free, information regarding your saved data as well as, where applicable, the right to adjust, block or delete this information. This can be done either through your password-protected area My WhiteWall, or by contacting our customer services under info@whitewall.com.

Cookie Options

You have several options to manage cookies and trackers. If you don’t want our Site to collect information using these technologies, you can change your web browser settings to reject Cookies from the site or to alert you before a cookie is placed on your computer. Each browser is different, so you should check your browser’s “Help” menu to learn how to change these  preferences. Please note that cookie and tracker-based opt-outs only apply to the specific computer and browser on which the opt-out cookie is applied. If you clear cookies from your device or switch to a different browser, your opt-out will no longer be valid and you will need to opt out again where you want your choices to apply. If you accept a cookies or tracker, you can delete it at any time through your web browser. If you choose not to accept cookies or trackers used for analytics and site functionality, you will not be able to enjoy all the features available to our registered users.​

The Network Advertising Alliance (“NAI”) and the Digital Advertising Alliance (“DAA”) offer opt-out tools to help you manage your choices for participating companies that use Cookies for Interest-Based Advertising and cross-app advertising. For more information about these tools please visit: NAI Opt-Out Page and DAA Opt-Out Page. You can also opt out of Google cookies by installing Google Analytics’ opt-out browser add-on and/or the Google Advertising Cookie out-out browser add-on.​

“Do Not Track” is a preference you can set in your web browser to let the sites you visit know that you do not want them collecting information about you. Our sites do not currently respond to all “Do Not Track” settings; however, we treat Global Privacy Control signals as requests to opt out of the “sale or sharing” of personal information pursuant to the California Privacy Rights Act.​

How do we make updates to this Notice?​

As we implement new technology and introduce new services or otherwise change our privacy practices, or in response to changes in applicable laws or regulations, we may modify this Notice and provide notice to you by posting updates on this page. Please check back periodically to view any updates. Changes to our Notice will become effective when posted. If we change this Privacy Notice in a material way, we will endeavor to promptly notify our customers. Your continued use of our websites and/or other services following such notice acknowledges your acceptance of such updated terms.​

Contentful CDN

We use Contentful CDN to properly deliver content to our website. Contentful CDN is a service provided by Contentful GmbH, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, especially files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Contentful GmbH, Ritterstr. 12-14 10969 Berlin Germany, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Contentful CDN.

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Contentful GmbH. Further information can be found in the privacy policy for Contentful CDN: https://www.contentful.com/legal/de/privacy/.

Payment service provider

Use of Paypal

Our website enables payment via PayPal. The payment service provider is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.

When you pay with PayPal, the payment data you enter is transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). A revocation of your already given consent is possible at any time. Previous data processing operations remain in place in the event of a revocation.

All PayPal transactions are subject to the PayPal privacy policy. This can be found at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Use of the payment service provider Adyen

We use Adyen, a service for online payment processes, for our website. The service provider is the Dutch company Adyen N.V., PO Box 10095 1001 EB Amsterdam, The Netherlands.

To learn more about the data processed through the use of Adyen, please see the privacy policy at https://www.adyen.com/policies-and-disclaimer/privacy-policy.

YouTube

For integration and presentation of video content, our website uses plugins from YouTube. Provider of the video portal is the YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit a page with an integrated YouTube plug-in, it will connect to YouTube's servers. YouTube will find out which of our pages you viewed.

YouTube may associate your browsing behavior directly with your personal profile should you be logged into your YouTube account. By logging out beforehand you have the option to prevent this.

The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For details on how to handle user information, please refer to the YouTube Privacy Policy at: www.google.com/intl/en/policies/privacy.

Pseudonymisation of Personal Data without Consent

If there is no consent for data processing, we apply a so-called de-identification mechanism. This server-side solution by Jentis automatically truncates IP addresses by the last digit on our Jentis Twin Server so that it becomes impossible to identify a specific European visitor solely based on the IP address.

In addition, other identifiers from analytics providers are replaced by randomly generated numbers, so that visitors to the Pixum Website cannot be filtered or re-identified by third-party providers. The server-side solution by Jentis aims to ensure an optimal level of protection for the personal data we process.

Collection of anonymous user data

On this website, web analysis technologies from Adobe Systems Inc. and Google Inc. (web analysis technology Google Remarketing) are used to collect and store data for marketing and optimization purposes on the basis of Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. f) EU GDPR, from which user profiles are created using pseudonyms. These user profiles are used to analyze visitor behavior and are evaluated to improve and tailor our offer. The pseudonymized user profiles are not merged with personal data about the bearer of the pseudonym without the express consent of the person concerned, which must be given separately.

Further information about the individual marketing and analysis cookies as well as the terms of use and data protection can be found here:

Google Inc.: https://www.google.com/intl/de/policies/privacy/partners/

Adobe Systems Inc.: https://www.adobe.com/de/privacy/policy.html

Google Analytics

Our website uses functions of the web analytics service Google Analytics. Web analytics service provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your device and allow analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually in the USA.

Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the analysis of user behavior in order to optimize our website and possibly also advertising.

For details on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

You can prevent Google Analytics from collecting your data by deactivating it in our cookie settings.

Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored on Google’s servers. On this website, IP-anonymity is activated, meaning that Google will shorten IP addresses from within countries that are members of the European Union or that are signatories of the EEA Agreement. A full IP address will only be transmitted to Google’s US servers (where it will then be shortened) in certain exceptional cases. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google Analytics will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of cookie-based data from your website visit (as well as Google’s processing of this information) by downloading and installing the browser plug-in at the following link. By using this website, you consent to the processing of data about you by LivePerson in the manner and for the purposes set out above.

We analyze this data anonymously and merely for statistical purposes, in order to continually optimize our site and make our internet offerings more attractive to you. To protect your personal information and private sphere, your identity cannot be inferred through this anonymous data.

The default settings in all major browsers accept cookies. You can generally disable the use and storage of cookies by selecting respective browser settings. However, by altering your settings, you can choose to automatically block cookies from all web sites, or only our website but this may make certain features of our services inaccessible to you.

Google Ads and Conversion Tracking

Our website uses the online marketing program "Google Ads", including conversion tracking (evaluation of user actions). Google conversion tracking is a service operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you are ordinarily resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google responsible for processing your data and for compliance with the applicable data protection legislation.

If you click on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the advert and were forwarded to this page. Every Google Ads customer receives a different cookie. It is therefore not possible to track cookies relating to the websites of Ads customers.

The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows us to find out the total number of users who have clicked on our adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users.

Your data may be transmitted to the USA. For the USA, no adequacy decision from the EU Commission is available.The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.

You will find more information as well as Google’s data privacy policy at: https://policies.google.com/privacy

Google reCAPTCHA

To protect our web forms from abuse and against spam, we use the Google reCAPTCHA service on this website. Google reCAPTCHA is an offer from Google Ireland Limited, headquartered at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). By checking a manual entry, this service prevents automated software (so-called bots) from performing inappropriate activities on our website. According to Art. 6 para. 1 s. 1 lit. f GDPR, this is meant to protect our legitimate interests, which prevail after due consideration of interests, in protecting our website against misuse as well as in trouble-free display of our online presence.

By means of a code embedded in the website, a so-called JavaScript, Google reCAPTCHA uses methods as part of the check, that enable an analysis of the website use by you, such as cookies. The automatically collected information about your use of this website including your IP address will usually be transmitted to a server in the U.S. and stored there. In addition, other cookies saved in your browser by Google services will be analysed by Google reCAPTCHA. No personal data are read or saved from the input boxes of the relevant form.

To the extent that information is transmitted to Google servers in the U.S. and saved there, the U.S. company Google LLC is certified under the EU-U.S. Privacy Shield. An updated certificate can be read here.

You can avoid collection of the data created by the JavaScript and/or the cookie and related to your use of the website (including your IP address) by Google as well as processing of such data by Google by disabling the activation of JavaScripts or the placement of cookies in your browser set-tings. Please bear in mind that this may restrict the functionality of our web content for your use.

Further information on the privacy policy of Google can be found here.

Google Fonts

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby your IP address is transmitted.

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimization of our online offer pursuant to Art. 6 para. 1 lit. f. GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.

This allows us to integrate additional services flexibly in order to evaluate user access to our website.

The use of Google Tag Manager is based on our legitimate interests, i.e. interest in optimising our services in accordance with Art. 6 para. 1 lit. f. GDPR.

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Customer Match

We use Google Ads Customer Match lists as part of our advertising activities only with your consent. For the use of Customer Match, lists with encrypted user data (e.g. names, email addresses, customer-specific identifiers) are uploaded to Google. Google then compares whether the transmitted user data matches existing Google customers. The use of Customer Match serves us to optimize our web offer and to individualize it to the respective users. Once the Customer Match lists have been created, the encrypted data records are automatically deleted again. The providers do not obtain new addresses as a result.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as an order processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities may access the data stored by Google.

You can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). Likewise, you can adjust personal advertising in your Google user account in the Privacy tab according to your wishes. To do this, log in to Google and go to "Manage Google Account" in the "Data and Privacy" section.

For further information, please refer to Google's privacy policy at: https://policies.google.com/privacy.

Microsoft Advertising

We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft") on our website. The data processing serves marketing and advertising purposes and the purpose of measuring the success of the advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, this does not allow us to personally identify these users.

Microsoft Advertising uses technologies such as cookies and tracking pixels to help analyze how you use the Site. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is placed on your computer. This cookie has a limited validity and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to that page. In doing so, the following information may be collected, among other things: IP address, identifiers (identifiers) assigned by Microsoft, information about the browser you are using and about the device you are using, referrer URL (web page from which you accessed our website), URL of our website.

Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can find more information about data protection and the cookies used by Microsoft Bing here.

Awin

Our website uses features of the affiliate and advertising company AWIN AG (Landsberger Allee 104 BC, 10249 Berlin, Germany). Awin is a performance marketing network that provides an interface between affiliates and advertisers. Awin uses tracking tools to run its services in order to store and track a user action. As a result, data from you is sent to the company in pseudonomized form and stored there.

When you click on an ad on our website, this is documented by cookies. The cookies are set in your browser when you click on one of our ads on our website. The cookies store information such as when which ad was clicked on at what time on which website. All this data is only used to track a publisher's marketing efforts and sales.

Your data is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). Insofar as the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimizing our online services and our marketing measures. The data stored within the scope of Awin will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. Further information can be found in the privacy policy for Awin: https://www.awin.com/us/privacy.

You have the option to prevent the collection of your data by cookies at any time by managing, deactivating or deleting them in your browser.

Integration of the Trusted Shops Trustbadge

To display our Trusted Shops seal of quality and any reviews collected, as well as to offer the Trusted Shops products to buyers after placing an order, the Trusted Shops Trustbadge is integrated on this website.

This is to protect our legitimate interests in optimal marketing, which prevail after due consideration of all interests, by enabling secure shopping in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised through it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of an order processed by a content delivery network (CDN) provider. Trusted Shops GmbH also uses service providers from the U.S. An adequate level of data protection is ensured. Further information on data protection by Trusted Shops GmbH can be found here.

When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the access, the amount of transmitted data and the requesting provider (access data), and documents the access. Individual access data are stored in a security database for the analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement between you and Trusted Shops shall apply. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is automatically checked using a neutral parameter, i.e. the email address hashed by a one-way cryptological function. Prior to submission, the e-mail address is converted into this hash value that cannot be decrypted by Trusted Shops. After checking for a match, the parameter is deleted automatically.

This is required to pursue our and Trusted Shops’ predominant legitimate interests in ensuring the buyer protection that is linked to each specific order and the transactional evaluation services in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, also regarding objection, can be found in the Trusted Shops Privacy Policy linked above and in the Trustbadge.

Use of Zendesk Chat

On our website, you have the option to contact us using "Zendesk Chat". This software is operated via an external system by Zendesk Inc, 1019 Market Street, San Francisco, CA 94103, USA (www.zendesk.de). This is an optional option and you can also contact us by email or phone instead, for example. When using the chat, data is collected and stored for the purpose of web analytics and to operate the chat system to respond to live support requests. In doing so, Zendesk tracks which page of our website was accessed. Usage profiles can be created from this data. Cookies may be used for this purpose. Conducted chats are logged and stored.

If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.

To avoid the storage of Zendesk cookies, you can set your internet browser to prevent cookies from being placed on your computer in the future or to delete cookies that have already been placed. However, switching off all cookies may mean that some functions on our Internet pages can no longer be executed.

Salesforce

We use Salesforce on our website, a service for our customer relationship management (CRM). The service provider is the American company salesforce.com Inc, One Market Street, Suite 300, San Francisco, CA 94105, USA.

Salesforce also processes data from you in the USA, among other places. Salesforce uses standard contractual clauses (= Art. 46. para. 2 and 3 GDPR) as the basis for data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Through these clauses, Salesforce undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en.

The Data Processing Addendum, which corresponds to the standard clauses, can be found at https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

To learn more about the data that is processed through the use of Salesforce, see the Privacy Policy at https://www.salesforce.com/company/privacy/.

Meta Platforms Inc.

On our website we use the plug-in of the social network Facebook from Meta Platforms Ireland Limited.

Meta Platforms Ireland Limited

4 Grand Canal Square

Grand Canal Harbour

Dublin 2, Ireland

Meta Platforms Ireland has the responsibility to enable data subject rights under Art. 15 - 20 GDPR, to comply with the security requirements of Art. 32 GDPR with respect to the security of the Service, and to comply with the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta Platforms Ireland's obligations under the Joint Processing Agreement.

Facebook

Our website uses Social Plugins (“Plugins”) from the social network, facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto; CA 94304, USA. The Plugins are recognizable through one of the Facebook logos (e.g., the white F on a blue tile or the “thumbs-up” symbol), or are labeled with the phrase: “Facebook Social Plugin.” The list and appearance of Facebook Social Plugins can be viewed at: https://developers.facebook.com/docs/plugins/.

When you visit one of our webpages that contains such a Plugin, your browser makes a direct connection to Facebook’s servers. Facebook will transmit the contents of the Plugin directly to your browser and embed it in the website. Therefore, we have no influence over the range of data that Facebook collects through these Plugins and can, therefore, only inform you to the best of our knowledge: through the embedded Plugins, Facebook receives data pertaining to the correlating information you call up on our website. If you are logged into Facebook, Facebook can associate this information with your Facebook account. When you interact with the Plugins (for example, by clicking the like button or leaving a comment), the corresponding information is transmitted directly from your browser to Facebook, where it is saved. Even if you do not have a Facebook account, it might still be possible for Facebook to determine and save your IP address. For more information regarding the purpose and scope of the data collection, the further processing and use of the data by Facebook, your rights (and settings options) pertaining to the protection of your privacy, please consult Facebook’s privacy policy at: https://www.facebook.com/privacy/policy/.

If you have a Facebook account, but would not like Facebook to collect data about you through our website and connect it to the stored data for your profile, then you must log out of Facebook before visiting our website. It is also possible to block Facebook Social Plugins with browser add-ons, such as the “Facebook Blocker.”

Kameleoon

This website uses the personalization and web analytics service Kameleoon. The program enables an analysis of user behavior based on (automated) user segmentations. We can determine how the individual user segments visit the website, which landing pages are visited and how an increase in click-through rates can be achieved by analyzing the log file data. The system analyzes your behavior and its context when using this website and assigns it to target groups anonymously.

For the analyses, as described above, cookies/local storage of the browser are used, which are linked to a pseudonymized ID. Your IP address is completely anonymized and not stored for this purpose. The information generated by the cookie/local storage about your use of this website is transmitted to a Kameleoon server in Germany and stored there in aggregated and pseudonymized form. The IP address transmitted by your browser within the framework of Kameleoon will not be merged with other data from Kameleoon.

The use of Kameleoon serves to evaluate your use of the website and to compile reports on website activities so that we can regularly improve our offer. The legal basis for the storage of the cookie is the consent given (Art. 6 para. 1 p. 1 lit. a GDPR). The further evaluation of the collected data takes place over a period of max. 365 days on the basis of Art. 6 para. 1 p. 1 lit. f GDPR.

You may refuse the use of cookies / local storage by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Tracify

We use the web analytics service Tracify on our website or on parts of our website to record how our website is used by its visitors and to evaluate and optimize the effectiveness of our advertising/marketing measures.

Tracify is a web analytics service provided by Tracify GmbH in Munich, Germany. Tracify GmbH acts for us as a data processor on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Tracify enables an analysis of the use of the website and the customer journey without storing cookies or other information on the end device of the user, but only on the basis of browser and device information, such as the IP address of the user, the configuration of the respective user agent (user agent string), usage data, order information, contact data, the screen resolution, the installed fonts and plugins and the processor of the respective device. The information transmitted to Tracify is completely and irreversibly anonymized immediately after transmission, so that a personal reference is excluded. Only the anonymized aggregated information is analyzed. Data processing when using Tracify takes place entirely in Germany; there is no data transfer to unsafe third countries without an adequate level of data protection.

The legal basis for the use of Tracify is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in a demand-oriented design of the website and in the evaluation and optimization of our marketing measures.

Sentry

We use the Sentry service (Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA) to improve the technical stability of our service by monitoring system stability and identifying code errors.

Sentry serves these purposes alone and does not evaluate data for advertising purposes. User data, such as device details or time of error, are collected anonymously and are not used in a personalized manner and are subsequently deleted.

For more information, please see Sentry's privacy policy: https://sentry.io/privacy/.

Noibu

Our website utilizes the error tracking service provided by Noibu Technologies Inc., located at 979 Bank St, Ottawa, ON K1S 5K5, Canada. The purpose of this service, referred to as Noibu, is to gather information about unidentified user interactions on our website for the purpose of identifying and correcting ecommerce errors that may impact user experience. Noibu only collects browser and device information for debugging purposes.

The processing of user data through Noibu is based on your consent as per Article 6(1)(a) of the General Data Protection Regulation (GDPR). Should you wish to opt out of this data processing, you may do so at any time by revoking your consent by sending an email to privacy@noibu.com.

Users of our website have the option to deactivate the data processing by Noibu at any time. We have entered into a data processing agreement with Noibu in accordance with the EU Standard Contractual Clauses."

Your rights

You have many rights regarding your personal information. Read more about them below. If you would like to exercise them or learn more, feel free to contact us! Please note that some of the rights may not be applicable to your situation.

1. Right of access:

You have the right to know what personal information we process and why. That’s why we inform you in advance about our processing activities via this statement. If you have any questions, or would you like to learn more about what information we process from you, you are always welcome to contact us and we will provide you with further information.

2. Right to rectification:

If you believe we store wrong information about you, such as your name or address, you can ask us to correct this.

3. Right to erasure:

You have the right to tell us to permanently erase your personal information from our records. You can do this for example if you believe there’s no longer any need for us to keep it. Or, if you previously have given your permission, you can just decide to withdraw it.

4. Right to restrict the processing activities:

You have the right to restrict our processing activities in certain situations. This means we will continue to store your information, but we’ll temporarily stop any other processing. Why would you want to do this? For example if you’ve asked us to fix incorrect information. In this situation you may want us to stop processing until the information is correct.

5. Right to data portability:

In certain situations you have the right to ask us to send your personal information in digital form to you, so that you can forward it to someone else.

6. Right to object:

You have the right to object to the processing of your information, even when we have a legitimate legal reason to process it. You can do this when we process your information on the basis of our legitimate interest, and you believe that your personal interest outweighs ours. If you do not want us using your information for direct marketing purposes, including profiling, we will comply in any case.

7. Right to withdraw consent:

If we process your personal information based on your consent, you have the right to withdraw your consent anytime. If you do not wish us to collect cookies, you may set your browser to refuse cookies, or to alert you when cookies are being sent. If you do so, please note that some parts of our Website may then not function properly.

8. Right to lodge a complaint with a supervisory authority:

If you aren’t satisfied with the way we treat your personal information, you have the right to lodge a complaint about us to the national supervisory authority.

Supplemental Notice to Residents of CA, CO, CT, and VA

Depending on where you reside, you may also have additional legal rights with respect to your information. While some of these rights apply generally, certain rights apply in limited cases. Consistent with applicable laws, this Supplemental Notice provides a way to exercise such rights for residents of California, Virginia, Colorado and Connecticut.​

For information about what categories of personal information we may collect from our customers, the sources of that information, the purposes for collecting and using that information, and what types of third party service providers we may share that information with, please read our privacy policy from the beginning to the end.​

The laws of California, Virginia, Colorado and Connecticut grant some or all of the following rights to consumers who reside in those states:​

  • The right to request information about personal information that we have collected about that customer in the 12 months preceding the customer’s request (including the categories of information collected, the source of that information, the business purpose of that collection, the categories of third parties with whom that information is shared, and the specific pieces of personal information collected about that particular customer;​

  • The right to receive requested information in a readily-usable format if provided electronically;​

  • The right to request that we delete any personal information about the consumer that we have collected (although we may be entitled to retain some information for certain purposes);​

  • The right to opt-out of “sales” of personal information to third parties, the sharing of personal information with third parties for targeted advertising purposes, and/or the processing of personal information for targeted advertising purposes;​

  • The right to update or correct any personal information which is out of date or incorrect; and​

  • The right to be free from discrimination based on your exercise of your privacy rights.​

To exercise your rights pursuant to this Supplemental Notice with respect to one of more of our brands, please contact us as follows:​

WhiteWall USA Inc.​

c/o United Corporate Service, Inc.​

800 North State Street, Suite 304​

Dover, Delaware 19901​

Kent County, Delaware​

Phone: 888-861-4881

E-Mail: dataprotection@whitewall.com​

We cannot respond to your request to access or delete information unless we are able to both verify your identity or authority to make the request and confirm the personal information relates to you and/or your household. If you have an account on any of our Sites, we will verify your identity by having you log in to your account. If you do not have an account on our Sites, we will attempt to verify your request by asking you to provide identifying information that we will match to information in our files. We will only use information you provide in your request for the purpose of verifying your identity or authority to make the request. You can also designate an authorized agent to make a request on your behalf. Your agent will need to provide a Power of Attorney authorizing the agent to act on your behalf,or will need to complete the same verification procedures that would be required for a request submitted by you directly, and provide information that allows us to verify your authorization. If you would like to appeal a decision related to a request to exercise your rights under this Supplemental Notice, please contact us at the phone numbers, online forms, or email address listed above.​

We may deny deletion requests in whole or in part as permitted or required by applicable law.   We do not charge a different price or rate or provide a different level or quality of goods or services based on your exercising your CCPA rights. We do not sell personal information in the ordinary sense of that term. That is, we don’t provide your personally identifiable information to third parties in exchange for money. But under California law, sharing information with third parties for targeted advertising purposes may be considered a “sale” of personal information. California residents have the right to opt out of such sharing.​

Supplemental Notice to residents of California

If you are a California resident under the age of 18, and a registered user of any site where this Notice is posted, you may request and obtain removal of content or information you have publicly posted on such site.  To make such a request, please send an email with the subject line “California Minor Content Removal Request” to dataprotection@whitewall.com. Please specify in your request which website or application your request relates to and the specific information or content that you would like removed. Please note that your request does not ensure complete or comprehensive removal of the content or information, because, for example, some of your content may have been reposted by another visitor to our websites. We may offer various financial incentives and benefits (such as free shipping, discounts, and other special offers) to customers who interact with us in our Sites and provide personal information. We offer such financial incentives and benefits for business purposes such as increasing engagement and sales or raising brand awareness, and participation is voluntary. We do not assign monetary or other value to personal information, but the value of such personal information is reasonably related to the estimated value of the financial incentive offered when the information was collected. WhiteWall reserves the right to withdraw or modify the financial incentives we offer at any time.​

Supplemental Notice to Residents of Nevada

Nevada law gives Nevada consumers the right to request that a company not sell their personal information for monetary consideration to certain other parties.  This right applies even if their personal information is not currently being sold.  If you are a Nevada consumer and wish to exercise this right, please send an email with the subject line “Nevada Resident Do Not Sell Request” to dataprotection@whitewall.com.​

Last Update: September 2024