Skip to main content

Privacy policy

UNBINDING CONVENIENCE AUTOMATED ENGLISH TRANSLATION:

We take data protection seriously. The protection and security of your personal data, i.e. all data that relates to you (hereinafter "personal data"), is our top priority.

We therefore treat all data that you entrust to us with the utmost care and in accordance with the applicable data protection regulations, namely the General Data Protection Regulation (hereinafter "GDPR") and the applicable national data protection laws.

Below you can find out which of your data we collect, how we collect it and on what legal basis, for what purpose we use it, how we protect it and what rights you have in relation to its processing.

I. DATA CONTROLLER

The controller for the processing of your personal data when you visit our website at www.westwing.lu or our app, including the sale of goods and the provision of services offered by us, as well as our Westwing accounts on the social media platforms "Facebook", "Instagram", "TikTok" and "Pinterest", among others, within the meaning of the GDPR, is the:

Westwing GmbH, Moosacher Straße 88, 80809 Munich, Germany service@westwing.se (hereinafter referred to as "Westwing" or "we").

Westwing GmbH and the company Westwing Group SE, domiciled at Moosacher Straße 88, 80809 Munich, are also jointly responsible for the processing in some cases. In this context, Westwing and Westwing Group SE have defined in an agreement pursuant to Art. 26 GDPR which of them assume which data protection obligations.

II. DATA PROTECTION OFFICER

You can also contact our data protection officer at any time if you have any questions about the processing of your personal data or the exercise of your rights. You can contact him using the following contact details:

Mr Christian Volkmer (represented by Mr Wojtek Dragon), Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg, Tel: 0941 2986930, Fax: 0941 29869316, E-mail: anfrage@projekt29.de, Website: www.projekt29.de

III. CATEGORIES OF PROCESSED DATA

We process your personal data, i.e. all data that can be linked to you, if you actively provide it to us or we collect it automatically when you use our website or app. This includes, in particular

  • Data collected when you browse our website or app, depending on which of our cookies you have consented to (e.g. login information, i.e. the date and time you logged in to our website, language settings, products in your shopping cart, or data on your preferences, e.g. in relation to product categories),

  • Data that is collected when you create your customer account (e.g. your name, your address, your e-mail address, your desired title (if provided by you), your telephone number (if provided by you), your encrypted password for the customer account),

  • Data processed in connection with your order (e.g. on the products you have purchased or the services you have used and payment information transmitted to us),

  • Data from you that is collected when you contact us (e.g. your name, your e-mail address, your telephone number, your customer, order and article number, as well as any other information that you transmit to us),

  • Data about you that we transmit to our external service providers in certain cases in order to communicate with you on our website or in our app and to personalize the communication (e.g. your name, your e-mail address or products you are interested in based on your surfing behavior),

  • Data collected when you consent to receiving newsletters, customer satisfaction surveys, product reminders and your behavior in relation to the content of our promotional emails (e.g. opening the newsletter or clicking on a link in the newsletter),

  • Data about you that we receive from our cooperation partners in certain cases (e.g. from credit agencies, technical service providers, debt collection service providers or payment service providers),

  • Data that we process for participation in competitions (e.g. your name and e-mail address),

  • statistical or aggregated data about your usage behavior on our social media accounts,

  • Data about you that we receive from a friend or other contact who would like to invite you to use our website or our app (e.g. your e-mail address).

IV. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

We use your data for a number of purposes, namely

  • to provide certain technical functions on our website and to protect our website (e.g. to store your items in the shopping basket) and to analyse your use of our website in order to optimise our offer and our contributions to you,

  • to register on our website and create a customer account,

  • handle and process product orders you have placed with us (e.g. ship the products or return them in case of cancellation or complaint),

  • to contact you (for example, to respond to your enquiries, to send you order confirmations and order notifications, or to notify you of changes to the applicable terms of use or similar notices),

  • to communicate with you and personalise the communication,

  • for advertising, communication and marketing purposes (e.g. to inform you about member benefits such as vouchers or special promotions, to remind you of your shopping basket history, to send you product evaluation and opinion surveys or for other similar advertising activities),

  • commissioning external service providers (e.g. credit bureaus, technical service providers, debt collection service providers or payment service providers),

  • to participate in competitions,

  • statistically analyse the use of our social media profiles and activities in order to optimise our offer and our contributions to you,

  • where appropriate, on the occasion of an invitation from a friend or other contact.

At no time do we process special categories of personal data within the meaning of Art. 9 GDPR (e.g. health data).

Should we also wish to collect and process your data beyond this, we will inform you separately before collecting and processing it, including the legal basis, and obtain your consent if necessary.

V. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your data will only be processed on one of the legal grounds provided for, i.e. if you have given your consent (Art. 6 para. 1 a) GDPR), we have a legitimate interest in the processing (Art. 6 para. 1 f) GDPR), we need your data for the performance or execution of the contract with you (Art. 6 para. 1 b) GDPR) or this is necessary in order to comply with a legal obligation (Art. 6 para. 1 c) GDPR). Please find further information regarding the legal basis for each processing activity set out below in Section IX.

VI. RECIPIENT OF YOUR PERSONAL DATA

Westwing remains at all times responsible for the processing of your personal data collected through our website or our application.

Your data will only be passed on to third parties in the following cases on the basis of the legal provisions listed in each case:

  • if a communication of your data is necessary for the fulfilment or performance of your contract (Art. 6 para. 1 b) GDPR; this includes, for example, communications of data to payment and logistics service providers, carriers and suppliers if they supply you directly); or

  • if necessary to comply with a legal obligation (Art. 6(1)(c) GDPR; this includes, for example, disclosures of data to government agencies and law enforcement authorities to comply with our legal obligations to provide information and to make disclosures or to pursue remedies), or

  • on the basis of our legitimate interest or the legitimate interest of a third party (Art. 6 para. 1 f) GDPR; this includes, for example, communications of data in the context of transfers of claims or in the context of administrative purposes within the group of companies);

  • if, when processing your personal data, we use external service providers, so-called processors, who are obliged to handle your data with care and who act exclusively on our behalf and in accordance with our instructions (Art. 28 GDPR; this includes, for example, processors in the areas of IT, logistics, telecommunications, sales and marketing).

Apart from this, we will only communicate your personal data to third parties if you have given us your consent to the communication of the data in question (Art. 6 para. 1 a) GDPR), whereby any consent given can be revoked at any time with effect for the future.

VII. TRANSFER OF DATA TO THIRD COUNTRIES

When we transfer your personal data to third countries, i.e. to external bodies outside the European Union ("EU") and the European Economic Area ("EEA"), we ensure that the external bodies in question treat your personal data with the same care as we do. We only transfer your personal data to third countries in which the EU Commission has confirmed an adequate level of protection or in which a level of data protection comparable to that in the EU or EEA can be guaranteed by contractual agreements or other appropriate safeguards (Art. 45 et seq. GDPR). Please contact us for more information or if you wish to be provided with copies of applicable safeguards.

VIII. DELETION OF YOUR PERSONAL DATA

Provided there are no statutory retention periods (e.g. under commercial and tax law) to the contrary, we only store your personal data for as long as is necessary for the respective purpose of processing or until you inform us that your personal data in question should be deleted.

Such retention periods under tax or commercial law apply, for example, to data in connection with your orders, such as invoices. The latter are stored for ten years, for example.

Accounts of customers who have not actively used their account for more than six years will be deleted by us.

So-called. Log files that we collect when you surf our website or use our app for network security and abuse prevention purposes are generally stored for 20 days and only in individual cases, if longer storage is necessary to investigate possible cyber-attacks, fraud or abuse, for 180 days. Your data will then be deleted or anonymized in such a way that it can no longer be associated with you as a person.

IX. DETAILS ABOUT THE PROCESSING OF YOUR DATA ON OUR WEBSITE

1. PROCESSING OF DATA WHEN VISITING OUR WEBSITE

When you visit our website, the following information is automatically collected and stored in so-called "server log files". Your browser automatically transmits this information to us so that our website can be displayed in your browser and you can use our website:

  • the IP address of your Internet service provider,

  • the website from which you visit us and the websites you visit from our website,

  • date and time of access and crash data,

  • information on the browser and operating system used,

  • if applicable, the e-mail address you use to register on our website,

  • identification numbers that are stored in so-called cookies or eTags on your end device and by means of which we can recognise your end device on the website,

  • location data,

  • visits or clicks on pages and products.

The processing or storage of your aforementioned access data or your IP address is necessary for technical reasons in order to provide and ensure system security on our website.

In addition, we use your server log files exclusively for the needs-based design and optimisation of our online offering, whereby we assign you an individual customer ID when you visit our website, which we only merge or combine with your e-mail address if an error occurs on the website.

If you visit our website to find out about our range of products and services or to use them, the basis for the temporary storage and processing of access data is Art. 6 (1) b) GDPR, according to which the processing of personal data is permitted for the performance of a contract or for the implementation of pre-contractual measures.

In addition, the processing or temporary storage of your technical access data is based on the satisfaction of our legitimate interest in accordance with Art. 6 para. 1 f) GDPR. In particular, our legitimate interest is to be able to provide you with a technically functional, user-friendly and secure website.

Access data collected when you visit our website is only stored for the period of time necessary to fulfil the aforementioned purposes. Server log files are stored for a maximum of 180 days and then deleted.

2. DATA PROCESSING WHEN REGISTERING OR CREATING A CUSTOMER ACCOUNT

To register and create your customer account, we need your e-mail address and a password of your choice. We also collect and process your contact details, namely your name, your address, your e-mail address, the form of address by which you would like us to contact you (if you provide it) and your telephone number (if you provide it). The e-mail address serves as the access code to your customer account. After successful registration, you will automatically receive a confirmation e-mail. You can also store your personal data in your customer account and use it for convenient shopping on our website. Your data can be updated at any time in the personal area of your customer account ("My Account"). We use this data to process orders, offer payment options and process payments and possible refunds, among other things.

The legal basis for the associated data processing is Art. 6 para. 1 b) GDPR, according to which the processing of personal data is permitted for the performance of a contract or for the implementation of pre-contractual measures.

We would like to make your visit to our website as pleasant as possible by using the "stay logged in" function. This function allows you to use our services without having to log in each time. Technically speaking, a cookie is stored on your device so that you do not have to log in again on subsequent visits to our website. This function is not available to you if you have deactivated this cookie via the cookie settings or if you have deleted the cookie in your browser settings after logging out of our website.

The legal basis for the associated data processing is Art. 6 para 1 f) GDPR, where the legitimate interest of Westwing is to provide its customer with an easy-to-use service.

Your data collected when creating or registering a customer account will only be stored for as long as these data are necessary to achieve the above-mentioned purposes or as long as an active member account with Westwing exists.

3. PROCESSING OF DATA TO PROCESS YOUR ORDER

When you place an order with us, your data is processed to enter into and fulfil the contract and to process your order, including payment and delivery. We store the billing and (possibly different) delivery address details you provide in your user account so that you do not have to re-enter them the next time you make a purchase. You can change these details at any time for the future.

The legal basis for the associated data processing is Art. 6 para. 1 b) GDPR, according to which the processing of personal data is permitted for the performance of a contract or for the implementation of pre-contractual measures.

We delete your personal data processed in the context of orders at the latest after expiry of the legal retention obligations.

3.1. CHOICE OF PAYMENT METHOD

Depending on the payment method you choose, you will be asked for the data necessary to use the relevant payment service provider. These payment details are transmitted directly to the relevant payment service provider and are not stored by us. The relevant payment service provider is responsible for your payment data. Information on this can be found on the website of the relevant payment service provider.

If you do not agree with the payment methods offered to you, you can inform us in writing by sending an e-mail to service@westwing.se. We will then reconsider our decision taking into account your point of view.

3.1.1. PAYMENT BY CREDIT CARD

When you pay by credit card, we receive the so-called payment ID and the last four digits of your credit card number from our payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland.

This data is used to authenticate and assign your order and is therefore transmitted for your security. The personal data required to process the payment is collected directly by the aforementioned payment service provider.

The legal basis for the aforementioned data processing is Art. 6 para. 1 b) GDPR, according to which the processing is permitted for the performance of the contract, or Art. 6 para. 1 f) GDPR, as our legitimate interest in offering you a secure credit card payment option prevails in the context of a balance of interests.

3.1.2. APPLE PAY

If you select the Apple Pay payment method to pay for purchases directly through your bank account, we will receive the relevant account information from our payment service provider Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland. The personal data necessary to process the payment is collected directly by the aforementioned payment service provider.

The legal basis for the aforementioned data processing is Art. 6 para. 1 b) GDPR, according to which the processing is permitted for the performance of the contract, or Art. 6 para. 1 f) GDPR, as our legitimate interest in offering you a secure payment option with Apple Pay prevails in the context of a balance of interests.

More information about data protection in Apple Pay can be found on the Apple Pay website: https://www.apple.com/se/legal/privacy/data/.

3.1.3. GOOGLE PAY

If you select the Google Pay payment method to pay for purchases directly through your bank account, we will receive the relevant account information from our payment service provider Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland. The personal data necessary to process the payment is collected directly by the aforementioned payment service provider.

The legal basis for the aforementioned data processing is Art. 6 para. 1 b) GDPR, according to which the processing is permitted for the performance of the contract, or Art. 6 para. 1 f) GDPR, as our legitimate interest in offering you a secure payment option with Google Pay prevails in the context of a balance of interests.

More information on data protection in Google Pay can be found on the Google Pay website: https://policies.google.com/privacy.

3.1.4. SWISH

If you select Swish as a payment method, we will receive the relevant account information from our payment service provider Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland. The personal data necessary to process and process the payment is collected directly by the aforementioned payment service provider.

The legal basis for the aforementioned data processing is Art. 6 para. 1 b) GDPR, according to which the processing is permitted for the performance of the contract, or Art. 6 para. 1 f) GDPR, as our legitimate interest in offering you a secure payment option with Google Pay prevails in the context of a balance of interests.

More information on data protection at MobilePay can be found under the following link: Swish - For an easier everyday since 2012.

3.1.4. PAYPAL

If you choose the PayPal payment method, your personal data (i.e. your first and last name, delivery address, e-mail address, telephone number, amount to be paid and IP address) will be transmitted to Paypal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, so that you can authorise us to pay via PayPal. For this you will need a PayPal account.

The legal basis for the aforementioned data processing is Art. 6 para. 1 b) GDPR, according to which the processing of personal data is permitted for the performance of a contract or for the implementation of pre-contractual measures.

More information on data protection at PayPal can be found on the PayPal website: https://www.paypal.com/es/webapps/mpp/ua/privacy-full.

3.1.5. KLARNA

If you choose the Klarna payment method with immediate payment or payment within 30 days, payment in three interest-free instalments or interest-bearing financing through Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna Bank AB"; registered in the Swedish Trade Register under: 556737-0431), your personal data (i.e. your contact and identification data, your payment information) will be transferred to Klarna Bank AB.

More information can be found at the following link: https://docs.klarna.com/resources/legal-and-compliance/payment-solutions-guidelines/eu/.

4. FRAUD PREVENTION

To prevent fraud and non-payment, we check for frequent fraud patterns and anomalies. For this purpose, order and payment data (e.g. address, item, payment method) and device information (e.g. device, browser) are processed. The legal basis is Art. 6 para. 1 f) GDPR based on our legitimate interest in protection against misuse.

You can find more information on the payment methods offered in our General Terms and Conditions (GTC).

5. PROCESSING OF DATA WHEN CONTACTING US

You have several options for contacting us. You can contact our customer service via the following communication channels:

  • by telephone,

  • by fax,

  • by post,

  • by e-mail,

  • or via the contact form.

In order to process your request, we collect your name, e-mail address, telephone number, customer, order and item number, as well as any other information you provide, depending on the communication channel you use to contact us.

The legal basis for this is Art. 1 b) GDPR, according to which the data processing is necessary for the performance of the contract, or Art. 6 para. 1 f) GDPR, based on our legitimate interest in processing enquiries from visitors to our website.

6. DATA PROCESSING FOR ADVERTISING PURPOSES

6.1. SENDING OF ADVERTISING E-MAILS

If you have consented to this, Westwing will regularly send you the Westwing newsletter by e-mail to inform you about the latest trends in the Home & Living area, must-have Home & Living styles, highlights of the Westwing online and retail stores as well as special offers or "Sales of the Day" and "Sales Highlights of the Week" ("Newsletter"). Details on this can be found in section 6.1.1.

Subject to your consent, you will also receive e-mail notifications from us about personal benefits - such as vouchers or special promotions -, reminders about the products in your shopping cart, reviews of the Westwing products you have purchased and opinion polls regarding Westwing or Westwing's services ("Notifications"). You can also find details on this under Section 6.1.1.

If you have already purchased a product or service from us and have not objected to receiving it, you will also receive promotional emails from us about similar products and/or services by email. You can find details on this under section 6.1.2.

6.1.1. SENDING OF ADVERTISING E-MAILS BASED ON YOUR CONSENT

If you have given your consent on our website by ticking a checkbox, we will send you newsletters and/or notifications by e-mail.

Please note, however, that we will only send you newsletters and/or notifications by email if you have previously expressly confirmed to us by clicking on a button that you wish to receive the relevant emails. We will send you the relevant button in a notification e-mail following receipt of your consent to the e-mail address you have provided (so-called "double opt-in procedure"). This serves to prevent misuse by third parties who could use your e-mail address to register you for the Westwing newsletter or Westwing notifications without your consent. The legal basis for the double opt-in procedure is Art. 6 para. 1 f) GDPR, as we have a predominantly legitimate interest in preventing such misuse and documenting your consent.

The relevant legal basis under data protection law for the processing of your personal data in connection with the sending of the aforementioned advertising emails is your consent pursuant to Art. 6 para. 1 a) GDPR.

You can withdraw your consent at any time with effect for the future as follows:

  • Click on the unsubscribe link at the end of our promotional emails so that you are redirected (depending on whether you want to unsubscribe from the newsletter or an email notification) to the newsletter management or notification management section in your customer account (together "Promotional email management"). There you can simply uncheck the boxes with the newsletters or notifications that you no longer wish to receive.

  • Optionally, you can also log into your customer account and then click on the "My newsletters" or "My notifications" tab (depending on the type of emails you wish to unsubscribe from) and then unsubscribe from the relevant newsletters or notifications that you no longer wish to receive in the aforementioned newsletter management or notification management by removing the corresponding checkmark.

  • You can also withdraw your consent to receive newsletters and/or notifications and unsubscribe from receiving the relevant promotional emails by sending an email to service@westwing.se.

With the help of our advertising e-mail administration mentioned above, we enable you to declare and revoke your consent to receiving our newsletters and/or notifications in a differentiated manner. By checking or unchecking a box, you can decide individually whether and when or how often you would like to receive a newsletter or notification by e-mail, depending on which newsletter you are interested in or which notification you consider useful and how often you would like to receive the newsletter or notification(s) in question.

Please note that we use standard market technologies in our advertising emails to measure the opening of the emails and/or the links you click on. We use this data for general statistical evaluations and to optimize and further develop our content and customer communication. This is done with the help of small graphics that are embedded in the newsletter (so-called pixels). The legal basis for this is our legitimate interest in the optimization and further development of our content and customer communication (Art. 6 para. 1 f) GDPR). If you do not want this analysis of your usage behavior, you can unsubscribe from receiving advertising emails at any time or deactivate graphics in your email program by default.

Our newsletters and notifications are sent via the mailing service provider Mapp Digital Germany GmbH, Dachauer Straße 63, 80335 Munich, Germany ("Mapp"). An order processing agreement has been concluded with Mapp for the processing of personal data in accordance with Art. 28 GDPR. Further information can be found in Mapp's privacy policy. https://mapp.com/de/privacy/.

6.1.2. SENDING E-MAILS WITH ADVERTISEMENTS FOR PRODUCTS AND SERVICES THAT MAY BE OF INTEREST TO YOU BASED ON YOUR PREVIOUS PURCHASING BEHAVIOR

If you have provided your e-mail address when purchasing a product or service in our online store, we will send you offers and information on products and services from our range that may be of interest to you, as you have already purchased similar products and services from Westwing. In addition, we will send you product evaluation and feedback surveys to ask you about your satisfaction with products you have purchased or services you have used (e.g. our customer service). However, such advertising emails will only be sent if you have not objected to receiving them - despite our corresponding notice below the purchase button.

The relevant legal basis under data protection law for the processing of your personal data is our legitimate interest pursuant to Art. 6 (1) f) GDPR in conjunction with Section 7 (3) UWG. § Section 7 (3) UWG.

You can also object to receiving the relevant advertising emails at any time by simply clicking on the unsubscribe link at the end of our advertising emails. Optionally, you can log into your customer account and unsubscribe via the advertising email administration (see section 6.1.1.). You can also subsequently object to receiving the relevant advertising emails by sending an email to service@westwing.se.

7. DATA PROCESSING FOR COMMUNICATION WITH YOU ON OUR WEBSITE AND VIA OUR APPLICATION

We may also process your personal data when we communicate with you on our website and in our app. For this purpose, we show you so-called "overlays" with an interaction option, for example.

For this purpose, we process the following personal data: your IP address, device-related data such as device type, model, operating system, browser type and version, usage-related information such as time of use, name, email hash, interaction data and messages, installation ID, device ID.

The legal basis for the processing of your personal data is Art. 6 para. 1 (a) GDPR. You can revoke your consent at any time with effect for the future. The easiest way to revoke your consent is via our Cookie Consent Manager.

Westwing has engaged service provider Braxe Inc., 318 West 39th Street, 5th Floor, New York, New York 10018, USA (“Braze”) for the aforementioned processing activities. More information on Braze's data protection compliance can be found here: https://www.braze.com/privacy/.

8. PROCESSING OF DATA FOR PARTICIPATION IN COMPETITIONS

If you participate in competitions, we will only process the data necessary for the organisation of the competitions (Art. 6 para. 1 b) GDPR). Please note the data protection information in the terms and conditions of the relevant competition.

9. DATA PROCESSING IN THE EVENT OF LEGAL PROCEEDINGS

In addition, we process your personal data in individual cases in order to assert our legal claims of any nature or to defend ourselves against legal claims or if this is necessary for the defence or prosecution of criminal offences.

The legal basis in this respect is the protection of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR.

10. DATA PROCESSING WHEN USING FAN PAGES ON SOCIAL NETWORKS

Westwing is active and present on social media and social platforms to communicate with interested parties and users and to inform them about other Westwing offers. In the following, we provide you with an overview of the processing and use of your personal data by us or your use of the social media platforms listed below:

10.1. FACEBOOK AND INSTAGRAM

We operate social media "fan pages" on Facebook and Instagram in co-responsibility with Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, in order to communicate with our fans (such as our customers and stakeholders) and inform them about our products, contests and other promotions.

You can consult the agreement with Meta here: https://www.facebook.com/legal/terms/page_controller_addendum

With the help of Facebook statistics on the use of our Fanpages (e.g. information on the number, names, interactions such as "likes" and comments, as well as summarised demographic information and other information or statistics; "Insights data"), we receive information on how our Fanpage is used, what interests visitors to our Fanpages have and which topics and content are particularly popular, so that we can optimise the content of our Fanpage and tailor it to our users. Insights data only contains statistical and depersonalised information about the visitors of the fanpage and can therefore not be assigned to a specific person. You can find more information about the type and scope of these statistics in the Facebook page statistics information. You will find more information about the respective responsibilities and the processing of your data by Facebook in the so-called "Information supplement on Facebook pages" at: https://www.facebook.com/legal/terms/information_about_page_insights_data

Please note that we have no influence on the data processing that Facebook carries out on your own responsibility in accordance with Facebook's terms of use. However, we would like to point out that when you visit the "Fanpages", data about your usage behaviour is transferred from Facebook and the "Fanpages" to Facebook. Facebook itself processes your personal data to compile the aforementioned statistics and for its own market research and advertising purposes. We do not have access to this data.

Insofar as we receive your personal data when managing fan pages, you have the rights mentioned in this privacy policy. If you wish to assert your rights against Facebook beyond this, you can also contact Facebook directly. We will be happy to assist you in asserting your rights to the extent possible and will refer your queries to Meta.

The legal basis for this data processing is Art. 6 para. 1 f) GDPR based on our aforementioned legitimate interest in being able to offer you our Facebook Fanpages for marketing and advertising purposes.

You can find more information about this in Meta's data policy at: https://es-es.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

10.2. YOUTUBE

We use so-called "plugins" on the YouTube.com platform to embed our own videos and make them accessible to the public. YouTube is a service provided by a third party not affiliated with us, namely YouTube LLC operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; ("Google").

As soon as you access our YouTube channel, your browser establishes a connection to YouTube and transmits information. The integration of YouTube content only takes place in the so-called "extended data protection mode". This is provided by YouTube itself and, according to its own information, ensures that YouTube user information (e.g. cookies) is only stored on your device when videos are played. When you access the videos in question, your IP address, unique identifiers, browser type and settings, device type and settings, operating system, mobile network information such as the name of the mobile network provider and phone number as well as the version number of the app are transmitted to YouTube. YouTube also collects data about the interaction of its apps, browsers and devices with its own services. The transmission of data to YouTube's partners is not necessarily excluded by the extended data protection mode. YouTube establishes a connection to the Google DoubleClick network, regardless of whether you watch a video or not. The data transmitted includes the IP address, crash reports, system activities and the date, time and referrer URL of your request. In addition, YouTube collects data about your activities (e.g., the terms you search for, the videos you watch, etc.). All data collected about you via our YouTube channel is processed by YouTube. According to YouTube, this information is used, among other things, to compile video statistics, improve user-friendliness and prevent abusive behaviour. YouTube also uses cookies to collect information about user behaviour. The storage of these cookies can be prevented by appropriate browser settings and extensions. If you are logged in to your YouTube account, you allow YouTube to map your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.

In addition, we occasionally integrate videos stored on YouTube directly into our website by means of so-called "plugins". With this integration, the content of the YouTube website is displayed in parts of a browser window. However, YouTube videos can only be accessed by clicking on them separately. This technique is also known as "framing". If you access a (sub)page of our website on which YouTube videos are embedded in this way, a connection is established with YouTube's servers and the content is displayed on the website by notifying your browser. We have no influence on the scope and content of the data that is transmitted to YouTube and possibly other YouTube partners by activating the plugin. Among other things, the YouTube server is informed which of our pages you have visited.

The legal basis for processing your data is your consent, Art. 6 para. 1 sentence 1 a) GDPR. This means that we will not use this service unless you have consented to its use. You can withdraw your consent at any time with effect for the future, most easily via our Cookie Consent Manager.

More information about what information YouTube receives and how it is used can be found in YouTube's privacy policy at: https://policies.google.com/privacy.

10.3. TIKTOK

We publish short video clips on the TikTok platform and the TikTok app to promote our products and sales. If you visit the TikTok website or app, TikTok Inc, 10100 Venice Blvd, Culver City, CA 90232, USA ("TikTok") collects and processes your personal data.

TikTok makes a certain amount of this data available to TikTok profile owners in an anonymised and aggregated form. This is the number of new followers, demographic data such as gender and country, without reference to identifiable persons. Therefore, Westwing cannot identify any visitor of the TikTok profile. As the owner of this profile, Westwing receives from TikTok anonymised statistical data (so-called "Insights data"). This data cannot be used to draw conclusions about the respective visitor. The data contained in the statistics are used by us exclusively to analyse the behaviour of the users in order to be able to better adapt our TikTok profile and our offer to the needs and interests of the visitors.

The use of your data transmitted to us by TikTok is based on our legitimate interest in accordance with Art. 6 para. 1 f) GDPR to perform data analyses and statistically record the use of our TikTok profile, to optimise our offer for you, to market our publications and videos on our website and to continuously improve and manage our offer and our products.

Further information on the processing of data by TikTok can be found in TikTok's privacy policy at: https://www.tiktok.com/legal/page/eea/privacy-policy/es.

10.4. PINTEREST

We manage a Westwing account on the Pinterest platform and the Pinterest app on which we post home and living inspiration and advertise our products. Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest") is responsible for Pinterest.

When you sign up for an account, Pinterest processes the data you provide, for example, your name, email address, phone number, photos, pins and comments. In addition, Pinterest collects and processes your IP address, which is used to approximate your location if you choose to share your exact location, as well as other internet and web activity (including the "pins" you click on, the "boards" you create, and the text you add in a comment or description).

The legal basis for this data processing is Art. 6 para. 1 f) GDPR based on our legitimate interest in being able to offer you our Pinterest platform for marketing and advertising purposes.

More information can be found at https://policy.pinterest.com/es/privacy-policy.

XI. TECHNICAL AND ORGANISATIONAL MEASURES FOR DATA SECURITY

We have taken technical and organisational security precautions and measures to protect your personal data against loss, destruction, manipulation and unauthorised access by third parties and to ensure an adequate level of protection and safeguard your personal rights.

In particular, we encrypt personal data, including sensitive content such as your contact enquiries, before transmitting it. All our employees, as well as service providers and processors working for us, are obliged to comply with applicable data protection regulations and legislation.

We regularly check that our security measures are adequate and correspond to the state of the art.

XII. YOUR RIGHTS AS A DATA SUBJECT

In accordance with the legal provisions on data protection, you have the following rights with regard to your personal data at any time:

1. RIGHT TO INFORMATION

You have the right to request information about the data we process about you, as well as a copy of that data.

2. RIGHT OF RECTIFICATION

You have the right to request the rectification of inaccurate data and, taking into account the purposes of the processing, the completion of incomplete data.

3. RIGHT OF CANCELLATION

You have the right to request the deletion of your data for the following reasons:

  • The storage of the data is no longer necessary for the purposes for which they were collected or otherwise processed,

  • You withdraw the consent on which the processing was based and there is no other legal basis for the processing,

  • You object to the processing and there are no compelling legitimate grounds for the processing,

  • the personal data in question have been unlawfully processed,

  • or the deletion of personal data is necessary in order to comply with a legal obligation under Union or Member State law.

Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutory retention obligations. Irrespective of the exercise of your right to erasure, we will delete your data immediately and completely, provided that the storage is no longer necessary for the respective purpose of the processing and there are no legal or statutory retention obligations to the contrary.

4. RIGHT TO RESTRICTION OF PROCESSING

You have the right to request the restriction of the processing of your data, provided that

  • you contest the accuracy of your personal data, for a period that allows us to verify the accuracy of your personal data,

  • the processing is unlawful and you object to the erasure of your personal data and request instead the restriction of the use of your personal data,

  • we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of a right in legal proceedings, or

  • you have objected to the processing in accordance with Art. 21 (1) GDPR pending verification of whether our legitimate grounds override yours.

5. RIGHT TO DATA PORTABILITY

If the legal requirements are met, you have the right to receive the data provided in a structured, commonly used and machine-readable format and to transmit this data to another data controller or, if technically feasible, to have it transmitted by Westwing.

6. RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT DATA PROTECTION AUTHORITY

You also have the right to lodge a complaint with the competent data protection supervisory authority. To assert this right, please send an e-mail to: service@westwing.se.

7. RIGHT OF OBJECTION

Insofar as the processing of personal data is based on our legitimate interest pursuant to Art. 6 para. 1 sentence f) GDPR, you also have the right to object to the processing of your personal data on grounds arising from your particular situation, e.g. by email to: service@westwing.se. In that case, we will no longer process the personal data for these purposes, unless our legitimate interest prevails in individual cases.

8. RIGHT OF CANCELLATION

If the processing of your personal data is based on your consent in accordance with Art. 6 para. 1 a) of the GDPR, you have the right to withdraw your consent at any time with effect for the future, e.g. by sending an email to: service@westwing.se.

If you wish to assert any of these rights against us, please contact our Data Protection Officer by e-mail at: anfrage@projekt29.de.

XIII. MODIFICATIONS TO THIS PRIVACY POLICY

We reserve the right to change this privacy policy if necessary, for example, due to the use of new technologies.

If fundamental changes are made to this privacy policy, we will announce them on our website. We will also check whether, in individual cases, there is an obligation to provide further notification in the event of changes to this privacy policy and, if necessary, we will comply with this obligation accordingly.

Status: March 2025